Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
File:                     ekQ0Re8M2qdnJh9OCxILvj_OByc.mft (raw, json)
Hash identifier:          tH7fdgexFrSXLoltVMcrT9qQ9e9mXh19BbOOJys3QuI=
Subject key identifier:   A8:A3:2F:D3:27:E0:74:2F:44:26:98:19:49:D3:C5:81:40:43:DA:7D
Authority key identifier: 7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
Certificate issuer:       /CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Certificate serial:       01964F6C4BEEE3B9E753E300F1F799013C5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
Manifest number:          14F8
Signing time:             Sat 19 Apr 2025 19:00:19 +0000
Manifest this update:     Sat 19 Apr 2025 19:00:19 +0000
Manifest next update:     Sun 20 Apr 2025 19:00:19 +0000
Files and hashes:         1: ekQ0Re8M2qdnJh9OCxILvj_OByc.crl (hash: nUhVKNo+eL8OcAjn9zArp6tV7iA3xENStv5CVApnehU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 19:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6c:4b:ee:e3:b9:e7:53:e3:00:f1:f7:99:01:3c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
        Validity
            Not Before: Apr 19 19:00:19 2025 GMT
            Not After : Apr 20 19:00:19 2025 GMT
        Subject: CN=a8a32fd327e0742f4426981949d3c5814043da7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2c:f7:76:56:71:33:e0:57:4e:be:a4:21:6b:
                    07:d3:58:3f:1a:ea:d5:e6:a8:ff:da:c2:d6:87:f5:
                    82:e9:25:e9:b6:cc:7a:87:74:3d:07:6c:d1:20:c4:
                    8b:80:38:73:a7:0e:f7:ac:7a:a9:41:12:0b:42:14:
                    6d:9f:c2:72:f2:42:83:dd:b0:9e:de:9e:a0:4d:93:
                    ac:f4:c0:70:43:b5:79:07:93:31:fa:9c:bd:a6:60:
                    60:09:77:4c:19:43:af:46:c3:bf:da:84:3b:11:1b:
                    64:6c:9f:58:af:ea:5d:59:b8:4f:56:5c:d8:b7:a7:
                    23:40:11:b1:39:61:f7:10:4d:17:1d:1c:96:3e:89:
                    c0:a2:d7:a0:d4:80:9f:0f:ca:cf:d1:a4:7f:b1:3c:
                    14:1e:d7:43:2c:4d:c8:a9:cd:80:f1:c2:fb:c1:9e:
                    dd:10:08:36:c7:4f:31:c5:b3:82:1e:fc:70:b7:8d:
                    5c:da:28:ab:89:ab:10:15:a5:00:03:8f:8f:fe:49:
                    fd:ba:b4:07:03:45:c1:ae:e6:64:b0:96:98:4c:c9:
                    94:c3:b6:f3:2e:3a:aa:ff:d0:1c:1e:a5:7b:8e:86:
                    e6:6a:dc:92:6c:e6:7a:df:bb:28:07:cd:b4:5e:9a:
                    58:8e:4e:b6:0a:e6:f6:aa:1a:99:b1:88:ae:01:2a:
                    21:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A3:2F:D3:27:E0:74:2F:44:26:98:19:49:D3:C5:81:40:43:DA:7D
            X509v3 Authority Key Identifier:
                keyid:7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:b4:fe:e6:ab:68:69:7d:4b:c9:c2:02:bc:3c:52:d9:9c:25:
         12:ae:a7:84:7c:df:cb:89:3f:70:5c:2c:5e:3f:81:bd:4e:43:
         dd:88:23:97:be:1b:bf:55:d3:28:49:22:08:aa:2f:66:3e:15:
         ad:b9:d8:c0:1f:99:7a:2c:4c:ec:f3:e8:39:03:1f:f4:3c:ba:
         84:92:7b:96:9a:8c:b5:99:32:1a:07:a3:9d:aa:48:63:3d:f6:
         d4:31:61:a2:c7:15:2b:80:94:87:01:b4:28:41:b5:23:b0:68:
         4f:7b:58:2c:47:a3:e5:3f:e8:b8:06:76:35:88:51:be:b4:2e:
         88:09:14:b4:8c:fd:bc:c6:4b:ae:40:c2:9d:aa:10:1f:31:0e:
         cc:a0:c4:b9:31:f9:36:c5:89:3d:99:91:50:87:c2:76:2e:c3:
         7a:3d:9e:65:67:d6:d0:7a:90:32:45:a8:fc:b1:ea:57:73:ed:
         fa:b1:8b:8e:94:e6:8c:0d:6d:ae:5c:c8:c3:0f:ce:8b:ca:0e:
         bb:30:94:2d:cc:7b:b8:2b:48:e7:4a:9a:13:98:be:f9:aa:f8:
         1e:5e:9c:47:89:22:a0:84:5f:6b:db:b6:d1:a8:93:ee:26:02:
         99:e8:4e:59:0c:67:1e:c9:e5:04:d5:04:02:7c:a1:05:92:e2:
         2d:95:9a:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbEvu47nnU+MA8feZATxeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNDQzNDQ1ZWYwY2RhYTc2NzI2MWY0ZTBiMTIwYmJlM2Zj
ZTA3MjcwHhcNMjUwNDE5MTkwMDE5WhcNMjUwNDIwMTkwMDE5WjAzMTEwLwYDVQQD
EyhhOGEzMmZkMzI3ZTA3NDJmNDQyNjk4MTk0OWQzYzU4MTQwNDNkYTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSz3dlZxM+BXTr6kIWsH01g/GurV
5qj/2sLWh/WC6SXptsx6h3Q9B2zRIMSLgDhzpw73rHqpQRILQhRtn8Jy8kKD3bCe
3p6gTZOs9MBwQ7V5B5Mx+py9pmBgCXdMGUOvRsO/2oQ7ERtkbJ9Yr+pdWbhPVlzY
t6cjQBGxOWH3EE0XHRyWPonAoteg1ICfD8rP0aR/sTwUHtdDLE3Iqc2A8cL7wZ7d
EAg2x08xxbOCHvxwt41c2iiriasQFaUAA4+P/kn9urQHA0XBruZksJaYTMmUw7bz
Ljqq/9AcHqV7jobmatySbOZ637soB820XppYjk62Cub2qhqZsYiuASohywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKijL9Mn4HQvRCaYGUnTxYFAQ9p9MB8GA1UdIwQY
MBaAFHpENEXvDNqnZyYfTgsSC74/zgcnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWtRMFJlOE0ycWRuSmg5T0N4SUx2al9PQnljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yN2M1ZWYtMWVhYy00MTVmLTlhYzAt
NWIzNWQ4ODE3NWQ1LzEvZWtRMFJlOE0ycWRuSmg5T0N4SUx2al9PQnljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8yN2M1ZWYtMWVhYy00MTVmLTlhYzAtNWIzNWQ4ODE3NWQ1
LzEvZWtRMFJlOE0ycWRuSmg5T0N4SUx2al9PQnljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjrT+5qto
aX1LycICvDxS2ZwlEq6nhHzfy4k/cFwsXj+BvU5D3Ygjl74bv1XTKEkiCKovZj4V
rbnYwB+ZeixM7PPoOQMf9Dy6hJJ7lpqMtZkyGgejnapIYz321DFhoscVK4CUhwG0
KEG1I7BoT3tYLEej5T/ouAZ2NYhRvrQuiAkUtIz9vMZLrkDCnaoQHzEOzKDEuTH5
NsWJPZmRUIfCdi7Dej2eZWfW0HqQMkWo/LHqV3Pt+rGLjpTmjA1trlzIww/Oi8oO
uzCULcx7uCtI50qaE5i++ar4Hl6cR4kioIRfa9u20aiT7iYCmehOWQxnHsnlBNUE
AnyhBZLiLZWaHQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:27:18 2025 by rpki-client