Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
File:                     rD5tWdR-c37cMaZfMQUUzUuV04c.mft (raw, json)
Hash identifier:          yAn/wrtk4f+j/f8kCzDA8dam36hNqPwN8PXioxSwHHk=
Subject key identifier:   4D:22:18:27:F6:F0:DB:7D:AB:95:F5:4C:95:B4:00:99:65:0B:87:EB
Authority key identifier: AC:3E:6D:59:D4:7E:73:7E:DC:31:A6:5F:31:05:14:CD:4B:95:D3:87
Certificate issuer:       /CN=ac3e6d59d47e737edc31a65f310514cd4b95d387
Certificate serial:       0196463228A1E9E32B0FAD4762D1291CCA73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
Manifest number:          14F1
Signing time:             Fri 18 Apr 2025 00:00:14 +0000
Manifest this update:     Fri 18 Apr 2025 00:00:14 +0000
Manifest next update:     Sat 19 Apr 2025 00:00:14 +0000
Files and hashes:         1: rD5tWdR-c37cMaZfMQUUzUuV04c.crl (hash: ENKgVq7F7p0timhJ9FdrpUUTgqm8Q4xasrO7FYp/i9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 00:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:46:32:28:a1:e9:e3:2b:0f:ad:47:62:d1:29:1c:ca:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac3e6d59d47e737edc31a65f310514cd4b95d387
        Validity
            Not Before: Apr 18 00:00:14 2025 GMT
            Not After : Apr 19 00:00:14 2025 GMT
        Subject: CN=4d221827f6f0db7dab95f54c95b40099650b87eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:81:c2:e3:62:c7:c2:9e:ee:5e:d5:2c:64:bc:
                    9b:72:ea:bd:70:9a:1c:67:b2:78:03:d4:fe:5a:ea:
                    0a:9f:04:14:3b:dd:07:9f:6d:1d:87:50:d9:c7:a1:
                    7d:ea:ae:8d:92:4e:40:8f:93:71:9d:c4:ea:65:ad:
                    e8:a4:26:73:da:2f:17:36:6d:98:f3:4a:1e:b0:c8:
                    69:25:e2:43:45:54:82:dc:45:da:af:b4:ef:24:9a:
                    39:96:c7:70:de:de:7c:5c:3b:c0:13:0f:0e:57:65:
                    f9:99:75:00:0d:d4:e8:77:48:1e:6f:a8:0c:b0:e1:
                    8a:2c:bc:3c:80:82:52:ac:11:2e:a9:22:3d:08:b6:
                    5b:a4:25:3a:24:f0:eb:ca:74:78:16:78:60:f2:0e:
                    f0:1a:fe:57:7c:13:da:7b:71:16:23:13:ea:c3:b5:
                    d0:59:56:03:3d:72:d3:22:f3:15:74:e5:91:9f:a0:
                    d4:64:5d:a7:60:b1:71:17:c3:47:b4:47:cf:51:ed:
                    0d:9d:ec:f5:66:3b:a5:42:8c:4c:bf:e7:00:c8:48:
                    d5:0c:18:84:7a:9a:0d:08:66:56:e0:16:82:60:5f:
                    82:9a:12:d9:25:b1:01:03:10:45:2b:83:ec:b6:60:
                    0b:90:06:c6:67:9a:5f:db:97:97:1c:9f:dc:27:37:
                    d3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:22:18:27:F6:F0:DB:7D:AB:95:F5:4C:95:B4:00:99:65:0B:87:EB
            X509v3 Authority Key Identifier:
                keyid:AC:3E:6D:59:D4:7E:73:7E:DC:31:A6:5F:31:05:14:CD:4B:95:D3:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:83:08:d3:ce:55:a3:cb:bc:86:34:73:e7:8b:63:ad:2b:7e:
         b2:0b:ef:b7:4c:4d:77:2b:51:b1:07:72:ad:6e:95:f4:ae:81:
         1f:04:66:95:a9:bd:3f:8a:9c:09:49:4f:e2:c7:3f:8e:fb:9d:
         9f:d1:cc:86:08:22:94:f7:f5:0f:b9:ee:84:e7:48:b2:63:eb:
         d7:9f:05:09:30:06:97:df:57:89:16:22:9b:47:78:22:65:e8:
         52:3d:34:bf:1e:5e:a9:50:cd:4d:8e:52:5d:32:4d:a7:78:e6:
         a7:d7:c6:20:7f:d3:d2:c3:ca:7a:0d:bd:36:69:6f:f4:fd:2f:
         51:a4:ba:d2:39:65:3e:47:4b:a3:f6:62:26:d1:c9:f4:12:af:
         64:85:e0:e8:89:37:80:d0:9b:2f:52:b4:b8:0c:0c:a9:7f:19:
         5f:3c:ec:31:95:28:1a:e4:54:67:32:00:03:53:71:66:ee:6b:
         4b:91:d5:1a:71:a8:92:1e:be:79:07:4e:c4:7a:ec:1e:6f:f6:
         c6:ba:d3:04:d9:f7:ce:3d:84:02:58:e0:26:0f:e2:fe:4d:29:
         d8:42:f9:f1:fe:a5:58:9c:6d:b7:70:07:cd:ff:af:ea:ba:09:
         5b:50:a1:0a:1d:a1:02:a9:9a:b6:f9:14:48:5f:43:31:9d:c0:
         32:f5:5f:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZGMiih6eMrD61HYtEpHMpzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjM2U2ZDU5ZDQ3ZTczN2VkYzMxYTY1ZjMxMDUxNGNkNGI5
NWQzODcwHhcNMjUwNDE4MDAwMDE0WhcNMjUwNDE5MDAwMDE0WjAzMTEwLwYDVQQD
Eyg0ZDIyMTgyN2Y2ZjBkYjdkYWI5NWY1NGM5NWI0MDA5OTY1MGI4N2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoHC42LHwp7uXtUsZLybcuq9cJoc
Z7J4A9T+WuoKnwQUO90Hn20dh1DZx6F96q6Nkk5Aj5NxncTqZa3opCZz2i8XNm2Y
80oesMhpJeJDRVSC3EXar7TvJJo5lsdw3t58XDvAEw8OV2X5mXUADdTod0geb6gM
sOGKLLw8gIJSrBEuqSI9CLZbpCU6JPDrynR4Fnhg8g7wGv5XfBPae3EWIxPqw7XQ
WVYDPXLTIvMVdOWRn6DUZF2nYLFxF8NHtEfPUe0Nnez1ZjulQoxMv+cAyEjVDBiE
epoNCGZW4BaCYF+CmhLZJbEBAxBFK4PstmALkAbGZ5pf25eXHJ/cJzfT5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0iGCf28Nt9q5X1TJW0AJllC4frMB8GA1UdIwQY
MBaAFKw+bVnUfnN+3DGmXzEFFM1LldOHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckQ1dFdkUi1jMzdjTWFaZk1RVVV6VXVWMDRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS82ZTEwMDMtODE5YS00MzkyLTkzOGEt
NWFlNTNjMjFiOGNkLzEvckQ1dFdkUi1jMzdjTWFaZk1RVVV6VXVWMDRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS82ZTEwMDMtODE5YS00MzkyLTkzOGEtNWFlNTNjMjFiOGNk
LzEvckQ1dFdkUi1jMzdjTWFaZk1RVVV6VXVWMDRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcoMI085V
o8u8hjRz54tjrSt+sgvvt0xNdytRsQdyrW6V9K6BHwRmlam9P4qcCUlP4sc/jvud
n9HMhggilPf1D7nuhOdIsmPr158FCTAGl99XiRYim0d4ImXoUj00vx5eqVDNTY5S
XTJNp3jmp9fGIH/T0sPKeg29Nmlv9P0vUaS60jllPkdLo/ZiJtHJ9BKvZIXg6Ik3
gNCbL1K0uAwMqX8ZXzzsMZUoGuRUZzIAA1NxZu5rS5HVGnGokh6+eQdOxHrsHm/2
xrrTBNn3zj2EAljgJg/i/k0p2EL58f6lWJxtt3AHzf+v6roJW1ChCh2hAqmatvkU
SF9DMZ3AMvVfRQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 06:52:27 2025 by rpki-client