Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
File:                     AclpL7GkCf800a87grjj2mRnXDI.mft (raw, json)
Hash identifier:          rtgwmD4oeAGTzK7AMco1/sySh3Ygskx8Gut3flXPvHE=
Subject key identifier:   98:6A:50:8D:D6:A1:66:C9:51:AB:39:25:18:26:93:4E:1C:C5:20:DC
Authority key identifier: 01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32
Certificate issuer:       /CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
Certificate serial:       01963C1DBB9322514B87B8D20F53C00146D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
Manifest number:          0A66
Signing time:             Wed 16 Apr 2025 01:01:43 +0000
Manifest this update:     Wed 16 Apr 2025 01:01:43 +0000
Manifest next update:     Thu 17 Apr 2025 01:01:43 +0000
Files and hashes:         1: AclpL7GkCf800a87grjj2mRnXDI.crl (hash: pQdBAPGP2CuQ70Cwo0Og+oald88nJBNOkocedcQKsbk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3c:1d:bb:93:22:51:4b:87:b8:d2:0f:53:c0:01:46:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
        Validity
            Not Before: Apr 16 01:01:43 2025 GMT
            Not After : Apr 17 01:01:43 2025 GMT
        Subject: CN=986a508dd6a166c951ab39251826934e1cc520dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:10:63:4d:6e:e5:ef:8b:c6:8d:50:09:b6:76:
                    35:8d:a7:9c:00:5e:e0:f9:3f:e8:08:fe:f6:5a:ad:
                    78:f5:43:4f:b7:66:71:45:46:c5:e3:8a:9a:3f:7b:
                    be:46:7b:7f:2a:7b:a8:c4:3b:80:ab:7b:b2:e9:97:
                    8c:bf:b5:1f:4b:d8:4a:00:f7:7c:db:72:9e:a6:b4:
                    49:ee:1e:04:c3:34:a9:7b:67:c0:08:84:1a:7e:34:
                    14:70:f6:00:1c:50:1e:ae:ba:3f:29:6d:b0:93:47:
                    c2:f1:28:cb:30:26:31:d6:28:6e:f1:1f:04:43:d7:
                    aa:68:af:86:de:8a:4d:23:df:33:32:38:b5:a3:6f:
                    e8:92:28:d9:51:8b:3d:ed:d1:c7:d1:9e:3f:72:31:
                    d8:63:19:7e:01:f7:c6:83:f6:7c:5c:b4:98:a8:3c:
                    e2:40:6f:2d:a6:42:2f:e1:07:7f:1d:a0:1a:97:00:
                    56:c8:fc:2d:ad:60:e3:07:36:90:53:89:5b:5d:c7:
                    47:d4:15:b8:7f:3c:34:de:13:64:2f:bb:12:65:c2:
                    a6:95:c6:81:5a:38:31:6f:bc:86:fc:4c:81:45:d0:
                    dd:a8:81:99:53:09:64:d6:c9:27:f0:9b:bb:31:f7:
                    44:e5:f7:d8:f7:93:f4:9c:04:77:1a:17:7e:b4:c7:
                    0b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6A:50:8D:D6:A1:66:C9:51:AB:39:25:18:26:93:4E:1C:C5:20:DC
            X509v3 Authority Key Identifier:
                keyid:01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:42:de:ba:4f:6b:f4:d6:c5:c2:53:00:f6:4a:2e:7f:e7:03:
         6e:3a:12:7d:5f:fd:34:2d:84:9a:21:62:ce:30:17:6f:5a:bd:
         70:5b:a6:08:e4:4e:2b:91:38:12:26:2e:5d:af:f4:e2:d9:db:
         c3:4e:7c:79:10:27:9c:d0:0a:57:3b:cb:65:b1:e2:ee:64:b9:
         d4:15:f4:3d:78:d2:8d:07:7a:0d:b2:7b:94:92:bf:0c:b3:07:
         d4:2f:7c:c9:2a:66:53:0f:b8:a3:2f:b3:5e:74:83:4d:28:f5:
         b5:f8:66:95:aa:a6:88:30:7c:db:a4:73:38:39:2b:24:63:92:
         6f:12:0e:4b:ef:7f:fd:fa:f9:cf:d6:a4:c3:f8:08:77:7a:a9:
         99:0e:7f:79:27:42:ce:77:1e:9a:b8:ec:14:f8:98:62:b6:93:
         3a:72:0d:99:16:d3:87:05:8b:76:1e:6e:c2:4a:32:a9:73:e6:
         be:4d:8b:a6:7f:bb:63:57:27:83:d7:71:5f:38:8e:79:c7:db:
         20:6a:c2:b5:25:f4:91:0a:ad:bb:d5:b6:09:e5:e2:6d:66:b9:
         a7:81:fa:dc:94:12:e0:88:9c:32:82:c6:57:9e:39:eb:70:47:
         0d:e8:68:c9:4f:6b:5f:c0:55:bf:ff:14:a7:17:15:5c:21:e8:
         28:d4:51:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY8HbuTIlFLh7jSD1PAAUbUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYzk2OTJmYjFhNDA5ZmYzNGQxYWYzYjgyYjhlM2RhNjQ2
NzVjMzIwHhcNMjUwNDE2MDEwMTQzWhcNMjUwNDE3MDEwMTQzWjAzMTEwLwYDVQQD
Eyg5ODZhNTA4ZGQ2YTE2NmM5NTFhYjM5MjUxODI2OTM0ZTFjYzUyMGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RBjTW7l74vGjVAJtnY1jaecAF7g
+T/oCP72Wq149UNPt2ZxRUbF44qaP3u+Rnt/KnuoxDuAq3uy6ZeMv7UfS9hKAPd8
23KeprRJ7h4EwzSpe2fACIQafjQUcPYAHFAerro/KW2wk0fC8SjLMCYx1ihu8R8E
Q9eqaK+G3opNI98zMji1o2/okijZUYs97dHH0Z4/cjHYYxl+AffGg/Z8XLSYqDzi
QG8tpkIv4Qd/HaAalwBWyPwtrWDjBzaQU4lbXcdH1BW4fzw03hNkL7sSZcKmlcaB
Wjgxb7yG/EyBRdDdqIGZUwlk1skn8Ju7MfdE5ffY95P0nAR3Ghd+tMcLLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhqUI3WoWbJUas5JRgmk04cxSDcMB8GA1UdIwQY
MBaAFAHJaS+xpAn/NNGvO4K449pkZ1wyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWNscEw3R2tDZjgwMGE4N2dyamoybVJuWERJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82MzBmZWMtZGQ1Ni00NmFjLWEwMzgt
ZGRiODkwZDc4ZmU5LzEvQWNscEw3R2tDZjgwMGE4N2dyamoybVJuWERJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy82MzBmZWMtZGQ1Ni00NmFjLWEwMzgtZGRiODkwZDc4ZmU5
LzEvQWNscEw3R2tDZjgwMGE4N2dyamoybVJuWERJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwULeuk9r
9NbFwlMA9kouf+cDbjoSfV/9NC2EmiFizjAXb1q9cFumCOROK5E4EiYuXa/04tnb
w058eRAnnNAKVzvLZbHi7mS51BX0PXjSjQd6DbJ7lJK/DLMH1C98ySpmUw+4oy+z
XnSDTSj1tfhmlaqmiDB826RzODkrJGOSbxIOS+9//fr5z9akw/gId3qpmQ5/eSdC
zncemrjsFPiYYraTOnINmRbThwWLdh5uwkoyqXPmvk2Lpn+7Y1cng9dxXziOecfb
IGrCtSX0kQqtu9W2CeXibWa5p4H63JQS4IicMoLGV54563BHDehoyU9rX8BVv/8U
pxcVXCHoKNRROw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 04:44:39 2025 by rpki-client