Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
File:                     564LxrVkpXPje515fLdeuxt24AE.mft (raw, json)
Hash identifier:          M4NW8b7Y6dBD1fgtncWBVYC1bFhKsUawdMfXk8HY6HI=
Subject key identifier:   ED:5D:D9:4F:F5:4C:60:E6:07:7F:E2:AF:B4:B9:68:3D:74:FD:00:95
Authority key identifier: E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01
Certificate issuer:       /CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
Certificate serial:       01964F6D70044D723EB2C9A39E08CB7B4254
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
Manifest number:          14F8
Signing time:             Sat 19 Apr 2025 19:01:34 +0000
Manifest this update:     Sat 19 Apr 2025 19:01:34 +0000
Manifest next update:     Sun 20 Apr 2025 19:01:34 +0000
Files and hashes:         1: 564LxrVkpXPje515fLdeuxt24AE.crl (hash: /oX4BSB/32X3leUERQx4HvYe3KzifpS49PL3NMkAkdg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 19:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6d:70:04:4d:72:3e:b2:c9:a3:9e:08:cb:7b:42:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
        Validity
            Not Before: Apr 19 19:01:34 2025 GMT
            Not After : Apr 20 19:01:34 2025 GMT
        Subject: CN=ed5dd94ff54c60e6077fe2afb4b9683d74fd0095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:45:96:01:7a:c3:f0:65:5c:e4:c3:96:ff:07:
                    bf:cb:6b:fb:1f:48:61:d2:e9:66:86:6c:62:18:84:
                    99:10:5f:1b:13:30:9c:c4:19:3d:3b:a8:76:75:db:
                    f5:5e:61:54:95:44:99:e9:49:7a:0f:b2:75:a4:66:
                    b3:99:7c:fd:ac:b4:b2:7d:32:25:c5:20:f3:e9:d8:
                    a9:c0:34:ea:c5:f6:7e:5c:1a:24:b7:ea:4c:84:35:
                    bb:9b:a3:bb:0c:62:ce:c4:bf:e7:ca:9e:ee:fe:48:
                    cc:a2:6b:ea:38:cb:65:18:ec:42:60:c9:db:44:af:
                    75:66:96:6e:53:c9:91:bf:bb:1b:32:e9:9a:f5:b0:
                    cf:e0:11:d2:1e:68:bf:54:4f:35:3c:02:23:f9:d8:
                    bb:31:59:7a:e6:47:37:f0:d3:6d:7b:bf:52:03:df:
                    71:fe:ab:b8:93:7f:6c:b3:e0:dd:a7:8d:61:91:74:
                    ce:b4:a0:0f:76:fd:3f:25:bb:b8:5e:5e:bc:7a:35:
                    5a:7a:39:e2:d9:7f:6a:b7:06:cf:8f:cb:64:ea:ae:
                    ef:66:50:07:7c:35:68:77:8f:ab:79:f0:96:4b:70:
                    79:49:b4:63:d3:a9:73:7c:02:d7:54:b0:90:87:90:
                    b7:17:e5:34:61:a2:4d:f6:d0:67:de:01:1c:60:2d:
                    d1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5D:D9:4F:F5:4C:60:E6:07:7F:E2:AF:B4:B9:68:3D:74:FD:00:95
            X509v3 Authority Key Identifier:
                keyid:E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:1e:eb:c1:e6:a9:f9:d9:24:3d:34:0e:a1:03:82:44:7d:4b:
         8c:af:ad:5d:2d:f1:22:80:37:b9:aa:a0:6a:25:bb:f9:a9:62:
         d8:3d:24:24:a5:55:25:21:35:2f:a9:60:24:6b:f2:0b:b3:78:
         56:cc:a3:8a:58:0f:bc:31:d5:69:ac:4e:fd:26:8d:a9:b6:fc:
         be:c0:6f:cc:b7:6e:5f:04:aa:0a:d4:d6:c7:3d:1b:02:5e:a0:
         b5:f2:c5:17:a4:9c:e8:21:94:69:10:e8:29:c9:61:06:a6:f7:
         15:75:1c:a1:14:eb:8e:a4:17:e7:14:1f:f2:c9:e2:71:67:94:
         d4:37:6d:fd:18:88:ed:d4:b6:cc:17:72:0d:2f:49:08:2f:a1:
         cf:f5:4b:3d:dd:cc:3b:9d:04:f5:02:17:62:35:e7:ab:45:00:
         ac:c0:90:ce:9e:83:36:43:f5:cc:03:8c:db:b3:ff:53:02:93:
         fe:db:b1:89:24:01:41:50:99:59:16:75:51:64:39:49:ec:e4:
         fc:9f:eb:41:46:25:b2:f6:9c:fe:9e:6a:36:8a:bf:12:3c:c4:
         79:46:90:27:df:4b:a6:c4:52:bb:be:26:8b:6b:dd:55:af:da:
         0a:37:d8:54:26:58:35:a2:b3:53:a4:bf:cf:6c:15:a1:69:0b:
         0a:5e:2c:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbXAETXI+ssmjngjLe0JUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3YWUwYmM2YjU2NGE1NzNlMzdiOWQ3OTdjYjc1ZWJiMWI3
NmUwMDEwHhcNMjUwNDE5MTkwMTM0WhcNMjUwNDIwMTkwMTM0WjAzMTEwLwYDVQQD
EyhlZDVkZDk0ZmY1NGM2MGU2MDc3ZmUyYWZiNGI5NjgzZDc0ZmQwMDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUWWAXrD8GVc5MOW/we/y2v7H0hh
0ulmhmxiGISZEF8bEzCcxBk9O6h2ddv1XmFUlUSZ6Ul6D7J1pGazmXz9rLSyfTIl
xSDz6dipwDTqxfZ+XBokt+pMhDW7m6O7DGLOxL/nyp7u/kjMomvqOMtlGOxCYMnb
RK91ZpZuU8mRv7sbMuma9bDP4BHSHmi/VE81PAIj+di7MVl65kc38NNte79SA99x
/qu4k39ss+Ddp41hkXTOtKAPdv0/Jbu4Xl68ejVaejni2X9qtwbPj8tk6q7vZlAH
fDVod4+refCWS3B5SbRj06lzfALXVLCQh5C3F+U0YaJN9tBn3gEcYC3RJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1d2U/1TGDmB3/ir7S5aD10/QCVMB8GA1UdIwQY
MBaAFOeuC8a1ZKVz43udeXy3XrsbduABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTY0THhyVmtwWFBqZTUxNWZMZGV1eHQyNEFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82YmQzMjEtN2Y1Yi00MTUyLThkMGMt
OWIxMDdiZWY5MDMwLzEvNTY0THhyVmtwWFBqZTUxNWZMZGV1eHQyNEFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82YmQzMjEtN2Y1Yi00MTUyLThkMGMtOWIxMDdiZWY5MDMw
LzEvNTY0THhyVmtwWFBqZTUxNWZMZGV1eHQyNEFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhB7rweap
+dkkPTQOoQOCRH1LjK+tXS3xIoA3uaqgaiW7+ali2D0kJKVVJSE1L6lgJGvyC7N4
VsyjilgPvDHVaaxO/SaNqbb8vsBvzLduXwSqCtTWxz0bAl6gtfLFF6Sc6CGUaRDo
KclhBqb3FXUcoRTrjqQX5xQf8snicWeU1Ddt/RiI7dS2zBdyDS9JCC+hz/VLPd3M
O50E9QIXYjXnq0UArMCQzp6DNkP1zAOM27P/UwKT/tuxiSQBQVCZWRZ1UWQ5Sezk
/J/rQUYlsvac/p5qNoq/EjzEeUaQJ99LpsRSu74mi2vdVa/aCjfYVCZYNaKzU6S/
z2wVoWkLCl4s0Q==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:17:21 2025 by rpki-client