Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
File:                     2JVh1yxrmEdwA-5iKJ_sVwweFng.mft (raw, json)
Hash identifier:          Uwg+fTcAtXGvAo+w1ObCIFy8nm8wkKW+zxqxP0JcMbs=
Subject key identifier:   6A:48:B9:39:39:80:63:58:EC:5C:12:3B:A3:02:F4:27:24:69:E0:E5
Authority key identifier: D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
Certificate issuer:       /CN=d89561d72c6b98477003ee62289fec570c1e1678
Certificate serial:       01965F849004A632C0A3E1B715B12A002F8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
Manifest number:          1493
Signing time:             Tue 22 Apr 2025 22:00:45 +0000
Manifest this update:     Tue 22 Apr 2025 22:00:45 +0000
Manifest next update:     Wed 23 Apr 2025 22:00:45 +0000
Files and hashes:         1: 2JVh1yxrmEdwA-5iKJ_sVwweFng.crl (hash: VYmmD+EPn/xJwWN156/c+F+hziBmkqRmh8LnP5taBtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5f:84:90:04:a6:32:c0:a3:e1:b7:15:b1:2a:00:2f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d89561d72c6b98477003ee62289fec570c1e1678
        Validity
            Not Before: Apr 22 22:00:45 2025 GMT
            Not After : Apr 23 22:00:45 2025 GMT
        Subject: CN=6a48b93939806358ec5c123ba302f4272469e0e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5b:2a:9e:89:9e:66:3d:e1:b7:a9:61:d1:13:
                    a5:a3:22:54:74:db:9f:b1:15:8d:1b:d6:5c:03:7c:
                    ec:8d:f1:4a:19:22:a2:37:0d:55:a1:72:10:7e:09:
                    35:0a:dc:75:71:1e:a9:36:27:87:fd:cd:68:34:5f:
                    07:7d:2f:b1:2c:c7:aa:66:bf:f3:ab:d8:a5:bb:21:
                    4a:f4:d0:dc:c5:f9:43:00:a6:21:2f:3f:05:a3:89:
                    e7:4e:a7:51:65:53:93:3c:26:0f:31:f6:18:d4:2c:
                    03:d4:9f:c1:87:0e:58:85:9d:46:17:8c:da:2d:4b:
                    6e:93:cb:7d:5f:66:0d:f0:88:60:c3:03:24:aa:1c:
                    4f:7f:d7:b0:99:4b:b7:a8:99:83:25:b2:83:d8:b5:
                    bf:9b:d8:e6:9b:15:a6:30:49:b0:94:6c:22:e8:fd:
                    2f:03:de:18:75:a7:eb:c6:07:cd:72:4d:1e:1d:39:
                    73:cd:db:7d:31:4d:ab:55:96:8a:57:1e:5d:a6:ad:
                    28:44:e6:d2:b2:10:12:dc:55:66:06:23:a8:8d:85:
                    c7:7c:8f:92:85:78:f9:6f:c2:02:80:c6:8e:a1:93:
                    52:60:40:ab:21:83:00:44:e7:93:98:32:45:e1:16:
                    5e:5c:42:6b:cf:5a:46:b7:ae:68:59:a1:a3:b1:a1:
                    95:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:48:B9:39:39:80:63:58:EC:5C:12:3B:A3:02:F4:27:24:69:E0:E5
            X509v3 Authority Key Identifier:
                keyid:D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:f4:6d:82:e6:cd:83:4c:4c:a0:56:45:c1:88:1e:f7:09:a4:
         ec:d0:4e:51:d3:b8:e1:95:81:52:f4:dc:b4:3b:f6:e6:d9:be:
         e0:07:2c:e1:b6:e8:ac:f7:01:bf:1a:44:5e:e1:22:c9:c1:58:
         28:29:35:37:74:d9:d7:33:35:55:a2:7c:b8:9d:36:54:15:2c:
         80:d4:19:f3:a6:f6:2a:b8:d2:c4:a2:07:1f:e0:b7:e3:f3:82:
         3d:5a:6d:57:57:d5:d5:11:f3:a8:26:d1:5e:70:3f:e4:29:20:
         e5:1d:7e:fe:24:28:1a:25:b3:b9:70:12:aa:a0:27:75:34:77:
         18:66:98:c2:12:56:ea:14:24:ef:98:fb:0f:f4:10:9f:a2:ba:
         38:76:e4:9a:e1:1b:eb:fb:38:92:08:cd:d6:e5:f3:3e:61:42:
         bd:46:76:26:2f:34:b3:be:d3:ee:fe:ce:aa:3e:21:57:b1:d7:
         e5:8f:dd:52:99:c4:f1:5c:de:92:5a:a0:d5:82:b8:c3:41:8b:
         15:21:dd:d4:a3:16:31:bc:ce:99:08:c7:b9:60:f5:aa:a1:ba:
         a3:94:96:61:b4:35:f1:bb:67:2d:23:c1:6d:2d:71:5f:94:2b:
         91:7c:62:9d:f9:d6:c6:f0:72:3a:ce:11:c6:45:af:87:83:f2:
         48:9f:87:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZfhJAEpjLAo+G3FbEqAC+MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTU2MWQ3MmM2Yjk4NDc3MDAzZWU2MjI4OWZlYzU3MGMx
ZTE2NzgwHhcNMjUwNDIyMjIwMDQ1WhcNMjUwNDIzMjIwMDQ1WjAzMTEwLwYDVQQD
Eyg2YTQ4YjkzOTM5ODA2MzU4ZWM1YzEyM2JhMzAyZjQyNzI0NjllMGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFsqnomeZj3ht6lh0ROloyJUdNuf
sRWNG9ZcA3zsjfFKGSKiNw1VoXIQfgk1Ctx1cR6pNieH/c1oNF8HfS+xLMeqZr/z
q9iluyFK9NDcxflDAKYhLz8Fo4nnTqdRZVOTPCYPMfYY1CwD1J/Bhw5YhZ1GF4za
LUtuk8t9X2YN8IhgwwMkqhxPf9ewmUu3qJmDJbKD2LW/m9jmmxWmMEmwlGwi6P0v
A94YdafrxgfNck0eHTlzzdt9MU2rVZaKVx5dpq0oRObSshAS3FVmBiOojYXHfI+S
hXj5b8ICgMaOoZNSYECrIYMAROeTmDJF4RZeXEJrz1pGt65oWaGjsaGV8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpIuTk5gGNY7FwSO6MC9CckaeDlMB8GA1UdIwQY
MBaAFNiVYdcsa5hHcAPuYiif7FcMHhZ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkpWaDF5eHJtRWR3QS01aUtKX3NWd3dlRm5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9jNzExNmUtY2Q2MC00MDRlLTkxZmEt
NzZlN2RhZThhMWNiLzEvMkpWaDF5eHJtRWR3QS01aUtKX3NWd3dlRm5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9jNzExNmUtY2Q2MC00MDRlLTkxZmEtNzZlN2RhZThhMWNi
LzEvMkpWaDF5eHJtRWR3QS01aUtKX3NWd3dlRm5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfRtgubN
g0xMoFZFwYge9wmk7NBOUdO44ZWBUvTctDv25tm+4Acs4bborPcBvxpEXuEiycFY
KCk1N3TZ1zM1VaJ8uJ02VBUsgNQZ86b2KrjSxKIHH+C34/OCPVptV1fV1RHzqCbR
XnA/5Ckg5R1+/iQoGiWzuXASqqAndTR3GGaYwhJW6hQk75j7D/QQn6K6OHbkmuEb
6/s4kgjN1uXzPmFCvUZ2Ji80s77T7v7Oqj4hV7HX5Y/dUpnE8Vzeklqg1YK4w0GL
FSHd1KMWMbzOmQjHuWD1qqG6o5SWYbQ18btnLSPBbS1xX5QrkXxinfnWxvByOs4R
xkWvh4PySJ+HAQ==
-----END CERTIFICATE-----
Generated at Wed Apr 23 06:39:49 2025 by rpki-client