Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
File:                     XjPdpt78k8-CUWSU2fNIjWxK2dw.mft (raw, json)
Hash identifier:          V732Unoyszpt4Q+r1Byp17UCnJE6AZrU1LkaIsbr79Q=
Subject key identifier:   E5:6C:A7:C6:7A:CC:7E:3E:09:D2:43:DB:92:71:A3:99:76:DA:4D:D5
Authority key identifier: 5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
Certificate issuer:       /CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Certificate serial:       01965424EBEC480FB3D60440C377313A98E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
Manifest number:          0764
Signing time:             Sun 20 Apr 2025 17:00:27 +0000
Manifest this update:     Sun 20 Apr 2025 17:00:27 +0000
Manifest next update:     Mon 21 Apr 2025 17:00:27 +0000
Files and hashes:         1: XjPdpt78k8-CUWSU2fNIjWxK2dw.crl (hash: 0p+4LygEJWbKFdGrI1keTuEN7ytBlc13lZn4Xdykj4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 17:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:24:eb:ec:48:0f:b3:d6:04:40:c3:77:31:3a:98:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
        Validity
            Not Before: Apr 20 17:00:27 2025 GMT
            Not After : Apr 21 17:00:27 2025 GMT
        Subject: CN=e56ca7c67acc7e3e09d243db9271a39976da4dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8a:32:46:99:dc:e1:9b:d8:d1:f0:bf:07:29:
                    89:3f:57:20:5d:8f:a1:1f:b1:10:cf:1b:7f:69:0d:
                    3c:20:be:b1:f1:64:32:15:c3:68:c0:f4:e4:9e:33:
                    3d:28:b4:1c:45:2b:f4:18:b6:3b:ae:2e:3f:bc:cf:
                    ea:38:dc:76:f7:10:80:04:77:69:b3:18:65:49:fa:
                    a3:2b:36:64:ac:87:3e:3e:1c:cd:5f:47:68:84:cb:
                    f8:65:6c:68:aa:8b:00:11:2c:93:fb:fc:65:eb:63:
                    3f:dc:e2:b1:7d:ea:26:ba:9b:49:8e:8a:fd:47:c6:
                    de:8e:7f:73:43:0d:e4:42:b0:68:f1:12:39:3f:58:
                    e6:7b:31:39:91:14:97:a8:f2:58:01:28:f1:e2:75:
                    11:06:45:46:b7:f2:d0:b2:d3:51:79:13:be:2c:5b:
                    73:30:99:7a:fe:36:8d:bf:a6:fe:65:16:ff:8d:92:
                    53:ef:f2:4f:33:2a:e8:5a:20:70:97:43:4c:e0:23:
                    13:6a:ba:7a:06:69:7b:ea:ce:2b:e1:ac:41:6c:50:
                    f4:c3:6f:a3:0c:3b:6a:97:95:69:18:54:8a:18:82:
                    da:44:10:0a:3b:ba:f5:c3:bc:e3:cf:1d:9c:8d:57:
                    aa:d5:50:35:52:84:ca:0c:ff:c8:b4:86:28:39:4d:
                    fe:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6C:A7:C6:7A:CC:7E:3E:09:D2:43:DB:92:71:A3:99:76:DA:4D:D5
            X509v3 Authority Key Identifier:
                keyid:5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:1a:f3:a1:1c:c7:c1:df:2a:03:53:8e:e2:ec:21:1d:f4:69:
         3a:ef:23:6b:32:e7:a7:bb:82:f3:b8:ec:52:30:d0:04:f7:ae:
         17:62:8e:d0:68:e9:90:35:c1:7e:83:fe:f5:f8:fe:3d:4d:c0:
         ad:65:5e:a0:bd:85:22:d5:a4:62:fd:7e:78:ab:2d:e4:ee:a5:
         15:12:69:18:78:22:4b:2d:a7:78:fe:1d:03:fd:80:8d:18:4d:
         f8:cc:cb:b4:a6:f9:b6:de:3a:b1:75:8e:fe:d7:59:52:bc:7c:
         04:4b:e7:dd:6d:9f:e3:2e:a3:85:09:6a:76:88:0a:b7:da:9f:
         70:8d:11:a0:d6:3d:21:f2:a5:b4:8f:c3:be:30:65:8f:db:9f:
         97:92:2b:47:00:a0:87:dc:57:4a:8e:62:49:fa:2b:b5:03:76:
         c0:52:6e:d9:18:9c:bb:16:16:d6:29:c5:e8:fe:2b:68:ab:4b:
         c9:c9:96:03:b5:f8:99:3d:9f:dc:d9:a3:ff:b5:48:91:ae:42:
         6a:68:13:71:0f:74:6c:24:02:cf:8b:43:89:9d:0b:0f:44:bf:
         26:b6:91:4f:09:34:54:ee:96:a4:86:7a:d9:ac:b3:1b:f5:1d:
         b9:4d:cc:50:51:c1:37:7e:c3:18:0b:b4:18:99:17:f3:90:65:
         ab:dd:86:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUJOvsSA+z1gRAw3cxOpjgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMzNkZGE2ZGVmYzkzY2Y4MjUxNjQ5NGQ5ZjM0ODhkNmM0
YWQ5ZGMwHhcNMjUwNDIwMTcwMDI3WhcNMjUwNDIxMTcwMDI3WjAzMTEwLwYDVQQD
EyhlNTZjYTdjNjdhY2M3ZTNlMDlkMjQzZGI5MjcxYTM5OTc2ZGE0ZGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4oyRpnc4ZvY0fC/BymJP1cgXY+h
H7EQzxt/aQ08IL6x8WQyFcNowPTknjM9KLQcRSv0GLY7ri4/vM/qONx29xCABHdp
sxhlSfqjKzZkrIc+PhzNX0dohMv4ZWxoqosAESyT+/xl62M/3OKxfeomuptJjor9
R8bejn9zQw3kQrBo8RI5P1jmezE5kRSXqPJYASjx4nURBkVGt/LQstNReRO+LFtz
MJl6/jaNv6b+ZRb/jZJT7/JPMyroWiBwl0NM4CMTarp6Bml76s4r4axBbFD0w2+j
DDtql5VpGFSKGILaRBAKO7r1w7zjzx2cjVeq1VA1UoTKDP/ItIYoOU3+rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVsp8Z6zH4+CdJD25Jxo5l22k3VMB8GA1UdIwQY
MBaAFF4z3abe/JPPglFklNnzSI1sStncMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGpQZHB0NzhrOC1DVVdTVTJmTklqV3hLMmR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zMDNhNDMtMTAwMy00MmQ2LTk2YjAt
NjZiODZmYzc4MWEyLzEvWGpQZHB0NzhrOC1DVVdTVTJmTklqV3hLMmR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zMDNhNDMtMTAwMy00MmQ2LTk2YjAtNjZiODZmYzc4MWEy
LzEvWGpQZHB0NzhrOC1DVVdTVTJmTklqV3hLMmR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxrzoRzH
wd8qA1OO4uwhHfRpOu8jazLnp7uC87jsUjDQBPeuF2KO0GjpkDXBfoP+9fj+PU3A
rWVeoL2FItWkYv1+eKst5O6lFRJpGHgiSy2neP4dA/2AjRhN+MzLtKb5tt46sXWO
/tdZUrx8BEvn3W2f4y6jhQlqdogKt9qfcI0RoNY9IfKltI/DvjBlj9ufl5IrRwCg
h9xXSo5iSfortQN2wFJu2RicuxYW1inF6P4raKtLycmWA7X4mT2f3Nmj/7VIka5C
amgTcQ90bCQCz4tDiZ0LD0S/JraRTwk0VO6WpIZ62ayzG/UduU3MUFHBN37DGAu0
GJkX85Blq92GgQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:48:40 2025 by rpki-client