Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
File:                     uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft (raw, json)
Hash identifier:          qPB4um4NF3e/hh6Ge/jZttj9tk73ooPyiRWOzr4DErU=
Subject key identifier:   B8:6B:D0:B2:AD:B7:FA:78:62:7B:91:E5:F6:CD:C8:07:4E:A1:73:C2
Authority key identifier: B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC
Certificate issuer:       /CN=b84b63058658a59ecbbf44395bf16f780dc929cc
Certificate serial:       01965F4D6AE6B29A1C3261874F4DC714EE8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
Manifest number:          1501
Signing time:             Tue 22 Apr 2025 21:00:31 +0000
Manifest this update:     Tue 22 Apr 2025 21:00:31 +0000
Manifest next update:     Wed 23 Apr 2025 21:00:31 +0000
Files and hashes:         1: uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl (hash: e0uU0t26HGtpPpFHK5o8Mf2E52IxynaWxW+hjXzYm4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 21:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5f:4d:6a:e6:b2:9a:1c:32:61:87:4f:4d:c7:14:ee:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84b63058658a59ecbbf44395bf16f780dc929cc
        Validity
            Not Before: Apr 22 21:00:31 2025 GMT
            Not After : Apr 23 21:00:31 2025 GMT
        Subject: CN=b86bd0b2adb7fa78627b91e5f6cdc8074ea173c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d2:47:b6:03:7a:1d:32:66:a8:48:35:82:82:
                    42:2e:85:9c:88:62:7d:25:9a:a4:fd:43:e9:32:3c:
                    61:3d:a3:2f:a9:8f:50:c7:83:b1:d3:46:c2:36:28:
                    28:70:b5:33:b2:1d:3e:40:49:a5:61:fa:d5:4b:b2:
                    dd:1f:95:24:4a:1b:8a:70:4f:2c:99:b3:b5:7e:e1:
                    31:50:5d:68:81:b2:57:39:b6:73:68:52:15:1b:7b:
                    94:2a:e1:14:78:82:6a:2a:58:82:82:77:b0:e4:e4:
                    5b:ea:8d:a3:88:c5:72:e8:55:69:fa:ce:44:70:05:
                    d4:00:00:f0:23:cb:b4:39:31:7e:c4:fc:26:e1:70:
                    b7:eb:44:b0:47:99:c4:9d:51:41:40:01:57:e8:ee:
                    44:84:c3:5f:f0:3e:5e:09:0e:a9:50:c5:f8:f6:53:
                    e5:79:db:42:9d:88:e9:24:53:00:35:e0:f3:55:9f:
                    31:04:bd:02:38:6e:b8:9f:5b:7d:de:ba:55:f6:16:
                    af:4e:8a:4c:5e:e3:82:24:e4:d0:52:d5:44:c7:28:
                    fc:f7:2d:0b:c3:a4:c1:11:66:63:46:fd:ad:ac:3c:
                    41:cc:62:3a:6a:d6:35:92:4c:e3:d8:38:86:e0:28:
                    96:1e:d3:17:98:a8:41:04:9a:ae:70:0a:bc:d8:7e:
                    3d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6B:D0:B2:AD:B7:FA:78:62:7B:91:E5:F6:CD:C8:07:4E:A1:73:C2
            X509v3 Authority Key Identifier:
                keyid:B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:77:83:46:8f:7c:28:a7:51:fd:b2:36:ff:1d:35:7c:54:46:
         f2:49:b2:a8:c8:9c:43:a3:35:c2:6b:7a:80:11:ba:35:de:14:
         a4:0c:5e:6f:9c:b5:14:d0:a7:0d:4e:b5:d0:01:b7:da:96:06:
         91:49:ff:ca:cb:e2:bf:d8:02:e1:e3:fd:df:99:1e:6f:8c:f7:
         ec:5e:69:9b:5a:78:61:35:6a:e9:35:9d:33:07:73:40:8d:83:
         ec:4c:4b:8d:8d:95:14:97:99:d6:65:80:5d:46:72:f6:cf:d5:
         76:6b:84:f0:93:a2:01:74:3c:c3:e6:80:47:08:3d:5d:d1:e2:
         37:3a:db:6c:6e:c7:c7:7f:88:8e:37:7f:76:f0:70:fb:d6:89:
         30:75:da:75:a6:37:8e:d2:43:3e:fa:b1:2d:4c:1a:87:81:e5:
         ba:a5:64:ae:ee:6c:d7:40:6f:38:9a:bd:93:de:64:67:0e:af:
         d6:1b:0d:43:76:c8:17:b0:71:cd:ff:2c:b7:3f:40:39:e0:b3:
         b1:2c:8b:5e:b5:a6:7c:57:7f:72:89:ee:7d:7d:7a:2b:73:66:
         21:bb:8b:74:04:aa:37:3f:a1:c0:d1:fb:c2:e7:9c:13:30:8a:
         95:ef:17:b1:a1:77:f7:d7:6c:f7:7e:5d:a1:b2:46:e1:b1:84:
         90:cd:d7:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZfTWrmspocMmGHT03HFO6NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NGI2MzA1ODY1OGE1OWVjYmJmNDQzOTViZjE2Zjc4MGRj
OTI5Y2MwHhcNMjUwNDIyMjEwMDMxWhcNMjUwNDIzMjEwMDMxWjAzMTEwLwYDVQQD
EyhiODZiZDBiMmFkYjdmYTc4NjI3YjkxZTVmNmNkYzgwNzRlYTE3M2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dJHtgN6HTJmqEg1goJCLoWciGJ9
JZqk/UPpMjxhPaMvqY9Qx4Ox00bCNigocLUzsh0+QEmlYfrVS7LdH5UkShuKcE8s
mbO1fuExUF1ogbJXObZzaFIVG3uUKuEUeIJqKliCgnew5ORb6o2jiMVy6FVp+s5E
cAXUAADwI8u0OTF+xPwm4XC360SwR5nEnVFBQAFX6O5EhMNf8D5eCQ6pUMX49lPl
edtCnYjpJFMANeDzVZ8xBL0COG64n1t93rpV9havTopMXuOCJOTQUtVExyj89y0L
w6TBEWZjRv2trDxBzGI6atY1kkzj2DiG4CiWHtMXmKhBBJqucAq82H49EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhr0LKtt/p4YnuR5fbNyAdOoXPCMB8GA1UdIwQY
MBaAFLhLYwWGWKWey79EOVvxb3gNySnMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUV0akJZWllwWjdMdjBRNVdfRnZlQTNKS2N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xYmEwM2QtNDI0ZC00N2NlLThiYzQt
YTEzNWNiNTU5NzU4LzEvdUV0akJZWllwWjdMdjBRNVdfRnZlQTNKS2N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xYmEwM2QtNDI0ZC00N2NlLThiYzQtYTEzNWNiNTU5NzU4
LzEvdUV0akJZWllwWjdMdjBRNVdfRnZlQTNKS2N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHeDRo98
KKdR/bI2/x01fFRG8kmyqMicQ6M1wmt6gBG6Nd4UpAxeb5y1FNCnDU610AG32pYG
kUn/ysviv9gC4eP935keb4z37F5pm1p4YTVq6TWdMwdzQI2D7ExLjY2VFJeZ1mWA
XUZy9s/VdmuE8JOiAXQ8w+aARwg9XdHiNzrbbG7Hx3+Ijjd/dvBw+9aJMHXadaY3
jtJDPvqxLUwah4HluqVkru5s10BvOJq9k95kZw6v1hsNQ3bIF7Bxzf8stz9AOeCz
sSyLXrWmfFd/conufX16K3NmIbuLdASqNz+hwNH7wuecEzCKle8XsaF399ds935d
obJG4bGEkM3XYA==
-----END CERTIFICATE-----
Generated at Wed Apr 23 04:10:15 2025 by rpki-client