Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft
File:                     1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft (raw, json)
Hash identifier:          nhED8D1jsbiYEe7ysy9D5DVLlvFpyOLTmJnIdtwNubk=
Subject key identifier:   19:8C:66:5F:9F:A3:A0:EF:F2:1C:2A:A8:AE:9D:9F:38:46:41:FC:DD
Authority key identifier: F8:A6:1C:2D:49:73:89:70:00:E5:6A:CB:3C:84:3F:20:34:AA:56:A0
Certificate issuer:       /CN=f8a61c2d4973897000e56acb3c843f2034aa56a0
Certificate serial:       01964B58B79C867F15D489DB4A186954ABB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft
Manifest number:          02F2
Signing time:             Sat 19 Apr 2025 00:00:27 +0000
Manifest this update:     Sat 19 Apr 2025 00:00:27 +0000
Manifest next update:     Sun 20 Apr 2025 00:00:27 +0000
Files and hashes:         1: 1-KYcLUlziXAA5WrLPIQ_IDSqVqA.crl (hash: N3Hw74Q36D6ydLcM8zHV3acGtfxZ9pt60t1WbxcjvRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:58:b7:9c:86:7f:15:d4:89:db:4a:18:69:54:ab:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8a61c2d4973897000e56acb3c843f2034aa56a0
        Validity
            Not Before: Apr 19 00:00:27 2025 GMT
            Not After : Apr 20 00:00:27 2025 GMT
        Subject: CN=198c665f9fa3a0eff21c2aa8ae9d9f384641fcdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:90:73:20:0d:51:5a:18:c4:d3:45:c7:58:
                    fa:eb:b6:81:f7:86:36:96:35:b0:76:86:7f:eb:fc:
                    0c:31:36:f9:aa:27:ff:7b:16:2b:2c:b7:35:ce:42:
                    33:45:a5:20:c5:40:90:6a:42:41:55:2d:21:64:bf:
                    6e:6a:d0:a2:56:c0:40:e9:c0:28:15:7c:a2:97:78:
                    30:a7:58:f9:57:03:c2:fc:cd:34:e7:36:1b:e4:97:
                    56:5a:16:52:83:10:95:6d:72:30:3c:4a:f5:47:75:
                    91:38:cd:e1:1d:82:6f:f2:ac:fe:aa:d6:fb:97:f1:
                    23:f4:48:f0:9b:b0:0a:81:33:4b:42:88:9d:dc:92:
                    f6:c0:54:21:3c:8b:a1:93:d8:c6:07:d6:01:77:c7:
                    33:73:4f:e0:6d:0e:95:82:8d:4b:d7:1f:ef:be:68:
                    a3:88:a7:36:1f:96:a2:af:5d:ef:23:9b:a3:26:49:
                    e1:1d:62:ef:6d:fd:de:46:26:db:a0:89:62:7a:9e:
                    db:fb:a5:bb:00:07:57:de:02:57:0e:01:6f:8b:a2:
                    ce:11:36:11:f6:c8:a5:3f:04:74:d9:a8:9d:7e:db:
                    3e:31:f9:91:83:43:63:1d:74:5d:df:f8:a3:5b:12:
                    a6:09:7c:a7:49:b2:8c:83:02:23:94:05:13:7c:97:
                    32:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8C:66:5F:9F:A3:A0:EF:F2:1C:2A:A8:AE:9D:9F:38:46:41:FC:DD
            X509v3 Authority Key Identifier:
                keyid:F8:A6:1C:2D:49:73:89:70:00:E5:6A:CB:3C:84:3F:20:34:AA:56:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:8d:6d:90:87:2e:11:fc:82:32:80:4e:08:ed:19:bd:36:1f:
         2d:f1:7d:dd:44:fc:d3:26:5f:84:1d:00:5a:de:9a:97:e7:2a:
         67:26:6b:81:ce:b1:00:fb:da:11:52:b7:10:84:3e:57:a9:4e:
         4c:be:e9:01:da:92:00:4b:89:3e:05:b7:9f:bc:98:b1:31:10:
         da:01:59:4b:c6:7e:13:3b:0e:71:69:a5:b9:15:74:43:a5:5a:
         23:19:88:0a:4e:31:30:3e:e1:f1:15:95:97:db:2d:82:6b:42:
         61:26:a4:dd:0f:ce:1f:e1:7d:5b:a1:e0:a1:09:b1:2c:e2:52:
         d7:36:96:e7:aa:dc:2e:e0:fa:5a:18:c8:34:05:47:23:59:59:
         3e:0b:4b:a9:07:87:90:12:d7:86:8e:20:37:45:39:80:a5:83:
         25:51:cf:5b:49:3f:f4:fd:bd:1d:64:ba:76:39:ef:8b:3d:ed:
         c0:b3:a3:65:37:ab:a3:32:b2:0a:b4:81:1a:50:cc:92:a3:80:
         42:10:82:9d:bc:af:77:8b:d1:dd:5e:1a:33:9f:97:a3:3a:59:
         04:52:2a:02:b4:f7:1a:11:3d:a6:09:52:c2:98:ba:e7:7e:ec:
         a0:bb:75:85:cb:1e:7c:10:a2:a1:e6:4b:c7:bc:e9:e8:f1:62:
         25:d8:fe:a6
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZLWLechn8V1InbShhpVKu1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTYxYzJkNDk3Mzg5NzAwMGU1NmFjYjNjODQzZjIwMzRh
YTU2YTAwHhcNMjUwNDE5MDAwMDI3WhcNMjUwNDIwMDAwMDI3WjAzMTEwLwYDVQQD
EygxOThjNjY1ZjlmYTNhMGVmZjIxYzJhYThhZTlkOWYzODQ2NDFmY2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTCQcyANUVoYxNNFx1j667aB94Y2
ljWwdoZ/6/wMMTb5qif/exYrLLc1zkIzRaUgxUCQakJBVS0hZL9uatCiVsBA6cAo
FXyil3gwp1j5VwPC/M005zYb5JdWWhZSgxCVbXIwPEr1R3WROM3hHYJv8qz+qtb7
l/Ej9Ejwm7AKgTNLQoid3JL2wFQhPIuhk9jGB9YBd8czc0/gbQ6Vgo1L1x/vvmij
iKc2H5air13vI5ujJknhHWLvbf3eRibboIliep7b+6W7AAdX3gJXDgFvi6LOETYR
9silPwR02aidfts+MfmRg0NjHXRd3/ijWxKmCXynSbKMgwIjlAUTfJcyswIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBmMZl+fo6Dv8hwqqK6dnzhGQfzdMB8GA1UdIwQY
MBaAFPimHC1Jc4lwAOVqyzyEPyA0qlagMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LWWNMVWx6aVhBQTVXckxQSVFfSURTcVZxQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvMTVhMDY3LTY5MTYtNDM4NS1hMjky
LTI3ODJlY2VlMGU5Mi8xLzEtS1ljTFVsemlYQUE1V3JMUElRX0lEU3FWcUEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA2LzE1YTA2Ny02OTE2LTQzODUtYTI5Mi0yNzgyZWNlZTBl
OTIvMS8xLUtZY0xVbHppWEFBNVdyTFBJUV9JRFNxVnFBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQY1t
kIcuEfyCMoBOCO0ZvTYfLfF93UT80yZfhB0AWt6al+cqZyZrgc6xAPvaEVK3EIQ+
V6lOTL7pAdqSAEuJPgW3n7yYsTEQ2gFZS8Z+EzsOcWmluRV0Q6VaIxmICk4xMD7h
8RWVl9stgmtCYSak3Q/OH+F9W6HgoQmxLOJS1zaW56rcLuD6WhjINAVHI1lZPgtL
qQeHkBLXho4gN0U5gKWDJVHPW0k/9P29HWS6djnviz3twLOjZTerozKyCrSBGlDM
kqOAQhCCnbyvd4vR3V4aM5+XozpZBFIqArT3GhE9pglSwpi6537soLt1hcsefBCi
oeZLx7zp6PFiJdj+pg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 06:23:16 2025 by rpki-client