Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.mft
File:                     XyoTPsL-YGe1ZJboGdW_tORHH5Q.mft (raw, json)
Hash identifier:          tX0UGG4js2Zn75NEJq30Hih+Xsp8j39wYxF4id8Q6G0=
Subject key identifier:   36:CF:30:B9:06:74:68:F2:C6:37:6D:B1:4E:4F:03:0D:6F:64:46:26
Authority key identifier: 5F:2A:13:3E:C2:FE:60:67:B5:64:96:E8:19:D5:BF:B4:E4:47:1F:94
Certificate issuer:       /CN=5f2a133ec2fe6067b56496e819d5bfb4e4471f94
Certificate serial:       01965492A323A61306B9A0C255BDC3792DEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XyoTPsL-YGe1ZJboGdW_tORHH5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.mft
Manifest number:          070E
Signing time:             Sun 20 Apr 2025 19:00:18 +0000
Manifest this update:     Sun 20 Apr 2025 19:00:18 +0000
Manifest next update:     Mon 21 Apr 2025 19:00:18 +0000
Files and hashes:         1: XyoTPsL-YGe1ZJboGdW_tORHH5Q.crl (hash: kPr+el0+tKJKPbr71r0Ek5GNTN/yruJ0PcPRjCRWCVs=)
                          2: zw3OOzLu7F0rCvVUhFlHNjK6_48.roa (hash: EC4+NtSiW4UmHKtwZdLsHrR4X7fUOJDCpzkjNoARw5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XyoTPsL-YGe1ZJboGdW_tORHH5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 19:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:92:a3:23:a6:13:06:b9:a0:c2:55:bd:c3:79:2d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f2a133ec2fe6067b56496e819d5bfb4e4471f94
        Validity
            Not Before: Apr 20 19:00:18 2025 GMT
            Not After : Apr 21 19:00:18 2025 GMT
        Subject: CN=36cf30b9067468f2c6376db14e4f030d6f644626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4f:64:c6:e0:4f:9f:f2:05:40:ab:db:0c:36:
                    88:56:5c:7d:32:cc:d2:a8:3d:f3:e3:0f:cf:af:08:
                    ce:c7:bf:dc:5d:34:58:cc:84:be:c4:f2:53:46:71:
                    d3:09:d0:49:c5:8d:54:2d:43:f6:59:10:1b:95:00:
                    a3:57:bd:eb:3a:6c:ce:c9:7a:da:78:73:c1:54:47:
                    8f:f0:cb:a5:b6:43:52:c1:fd:cb:51:33:d2:b2:9f:
                    79:ed:e2:25:1b:95:ca:cc:ad:33:21:f3:f8:74:77:
                    f4:d1:a1:86:b0:95:f1:d8:fe:85:ce:f2:bb:3f:41:
                    f8:09:0b:0a:c1:bd:01:e5:65:63:f2:08:ab:39:6c:
                    47:04:b1:a0:c9:5e:99:5e:b7:56:60:09:24:11:08:
                    77:8e:1f:09:e8:4d:dd:ae:ff:9f:dc:59:fc:8b:1c:
                    69:45:bc:bd:da:24:20:c2:1d:ee:c4:b5:f4:86:80:
                    0b:27:17:05:6a:83:13:99:47:4c:c0:14:c3:57:c0:
                    41:02:b8:ed:e9:40:e2:f1:a4:28:7e:12:72:ce:b4:
                    07:44:1c:0f:b9:ad:3c:7a:b6:ff:42:95:c5:32:cf:
                    69:85:cf:d4:35:42:33:bb:32:62:c3:3f:cb:5a:02:
                    03:6c:a7:7f:cf:d1:9a:8f:c0:2c:81:3c:0e:a1:b5:
                    ac:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CF:30:B9:06:74:68:F2:C6:37:6D:B1:4E:4F:03:0D:6F:64:46:26
            X509v3 Authority Key Identifier:
                keyid:5F:2A:13:3E:C2:FE:60:67:B5:64:96:E8:19:D5:BF:B4:E4:47:1F:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyoTPsL-YGe1ZJboGdW_tORHH5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:fa:b2:06:4d:75:e6:e7:00:40:e8:66:a3:85:ad:2e:95:18:
         4c:f6:0e:9d:3d:d1:3a:33:cd:ef:01:9b:75:e3:b9:b6:84:f2:
         d4:67:1f:9c:35:73:c1:b1:fb:0e:66:53:75:73:6e:e8:72:88:
         d4:c9:93:75:d3:54:18:48:9a:c8:ae:32:4f:db:50:12:af:9a:
         57:6c:72:98:71:50:f2:12:6e:6d:1a:97:64:b3:54:b5:85:15:
         92:0a:fb:1c:a7:ae:a0:6b:4a:90:58:6f:59:ec:fc:24:74:69:
         4e:17:10:bb:49:4d:30:c4:45:39:ce:a3:e6:a0:d7:d1:e7:58:
         71:64:06:bd:95:f8:90:6a:2f:bf:4c:f0:d7:a6:74:56:28:76:
         d1:63:6d:d1:46:d7:7d:22:77:31:f2:b1:10:91:ba:07:f2:3a:
         e7:62:df:d6:6f:2b:80:3a:aa:69:56:e3:0a:42:60:a9:8e:6d:
         3b:6d:c0:2a:86:36:6e:2a:c9:b4:5d:5e:24:4b:a5:3d:34:44:
         6c:4e:03:13:b2:1e:50:5f:46:3f:9f:42:a6:14:0c:e4:5c:ed:
         71:be:86:5f:70:84:08:f9:a1:d2:27:80:3f:ab:14:3e:dc:b8:
         c1:72:cc:ef:82:fe:10:0b:3c:3b:b4:ed:a8:9f:35:90:35:4f:
         23:1e:e9:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUkqMjphMGuaDCVb3DeS3qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMmExMzNlYzJmZTYwNjdiNTY0OTZlODE5ZDViZmI0ZTQ0
NzFmOTQwHhcNMjUwNDIwMTkwMDE4WhcNMjUwNDIxMTkwMDE4WjAzMTEwLwYDVQQD
EygzNmNmMzBiOTA2NzQ2OGYyYzYzNzZkYjE0ZTRmMDMwZDZmNjQ0NjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk9kxuBPn/IFQKvbDDaIVlx9MszS
qD3z4w/PrwjOx7/cXTRYzIS+xPJTRnHTCdBJxY1ULUP2WRAblQCjV73rOmzOyXra
eHPBVEeP8MultkNSwf3LUTPSsp957eIlG5XKzK0zIfP4dHf00aGGsJXx2P6FzvK7
P0H4CQsKwb0B5WVj8girOWxHBLGgyV6ZXrdWYAkkEQh3jh8J6E3drv+f3Fn8ixxp
Rby92iQgwh3uxLX0hoALJxcFaoMTmUdMwBTDV8BBArjt6UDi8aQofhJyzrQHRBwP
ua08erb/QpXFMs9phc/UNUIzuzJiwz/LWgIDbKd/z9Gaj8AsgTwOobWsbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbPMLkGdGjyxjdtsU5PAw1vZEYmMB8GA1UdIwQY
MBaAFF8qEz7C/mBntWSW6BnVv7TkRx+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHlvVFBzTC1ZR2UxWkpib0dkV190T1JISDVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8xNjFkMmYtZWM4Ny00NzE4LTkzNjQt
ZmEyYzE1MzcxNzI2LzEvWHlvVFBzTC1ZR2UxWkpib0dkV190T1JISDVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8xNjFkMmYtZWM4Ny00NzE4LTkzNjQtZmEyYzE1MzcxNzI2
LzEvWHlvVFBzTC1ZR2UxWkpib0dkV190T1JISDVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1vqyBk11
5ucAQOhmo4WtLpUYTPYOnT3ROjPN7wGbdeO5toTy1GcfnDVzwbH7DmZTdXNu6HKI
1MmTddNUGEiayK4yT9tQEq+aV2xymHFQ8hJubRqXZLNUtYUVkgr7HKeuoGtKkFhv
Wez8JHRpThcQu0lNMMRFOc6j5qDX0edYcWQGvZX4kGovv0zw16Z0Vih20WNt0UbX
fSJ3MfKxEJG6B/I652Lf1m8rgDqqaVbjCkJgqY5tO23AKoY2birJtF1eJEulPTRE
bE4DE7IeUF9GP59CphQM5Fztcb6GX3CECPmh0ieAP6sUPty4wXLM74L+EAs8O7Tt
qJ81kDVPIx7pkQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:47:25 2025 by rpki-client