Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
File:                     eAl9X3eghkNQCkNtDpjwM9D1SPk.mft (raw, json)
Hash identifier:          960gPr49pqr7RBrmVFT0KTUu5sHbL3vWzCzy2GTD9Sg=
Subject key identifier:   80:36:8A:93:D8:A1:4B:57:13:42:1C:A7:B3:D9:DC:4B:E8:EF:6F:49
Authority key identifier: 78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9
Certificate issuer:       /CN=78097d5f77a08643500a436d0e98f033d0f548f9
Certificate serial:       0194C4D13F0119B1FBCB4F2E4ECB7D081238
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
Manifest number:          142D
Signing time:             Sun 02 Feb 2025 04:00:34 +0000
Manifest this update:     Sun 02 Feb 2025 04:00:34 +0000
Manifest next update:     Mon 03 Feb 2025 04:00:34 +0000
Files and hashes:         1: eAl9X3eghkNQCkNtDpjwM9D1SPk.crl (hash: 0GR7pcrCwsDokMXjfFcDtZdbwfxPq78dVH/BosEWmHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:d1:3f:01:19:b1:fb:cb:4f:2e:4e:cb:7d:08:12:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78097d5f77a08643500a436d0e98f033d0f548f9
        Validity
            Not Before: Feb  2 04:00:34 2025 GMT
            Not After : Feb  3 04:00:34 2025 GMT
        Subject: CN=80368a93d8a14b5713421ca7b3d9dc4be8ef6f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2f:99:4c:59:17:ab:5f:61:63:97:da:9e:47:
                    83:4b:46:3a:75:ed:07:57:ce:31:16:d2:89:93:0a:
                    f8:ac:00:ba:88:43:bf:6d:7a:58:f7:8d:a9:81:8f:
                    bd:30:17:ca:b0:61:8c:a2:80:26:2f:a3:67:18:35:
                    45:b5:b6:1b:d0:a5:a4:1c:06:24:45:44:47:9c:07:
                    86:24:76:92:83:c0:4a:62:3e:79:53:e7:d2:e6:12:
                    0e:5e:20:ec:df:9b:76:ad:94:d8:79:2a:0f:52:e5:
                    a2:69:9a:6c:84:5d:d7:d1:b0:96:52:50:c1:0e:cc:
                    22:2e:ac:c3:70:a7:db:79:ce:69:9c:98:27:22:ff:
                    8d:9f:a5:25:0f:4f:70:40:12:98:eb:f6:b7:d9:49:
                    0b:35:6c:9e:1e:db:76:35:ba:3a:5e:45:9d:8e:d0:
                    e8:f9:0c:16:ac:3d:7b:e9:f1:81:d2:55:c7:28:11:
                    52:63:b9:a6:e4:19:17:97:01:e7:41:30:72:5a:42:
                    04:ae:05:5a:89:fe:b0:db:d2:a8:e6:67:a3:73:72:
                    1e:92:f1:08:91:a1:d1:22:f8:b1:f2:94:b5:a7:98:
                    9e:b9:12:30:92:3b:2f:0a:bd:9b:fc:2d:7c:58:d5:
                    1a:22:34:13:67:19:65:25:40:82:73:51:46:20:87:
                    64:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:36:8A:93:D8:A1:4B:57:13:42:1C:A7:B3:D9:DC:4B:E8:EF:6F:49
            X509v3 Authority Key Identifier:
                keyid:78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:95:b4:2b:a4:05:f5:80:20:f1:b5:38:b7:28:c0:8a:63:72:
         04:bb:02:1e:86:ea:f2:6f:17:9d:00:55:96:57:26:23:dd:5a:
         6a:54:48:7f:df:cd:31:8e:39:e2:97:16:cf:c0:ac:dd:e4:31:
         26:ea:1d:64:c9:fe:ce:9d:50:10:f6:c8:b6:2f:f5:81:43:de:
         31:34:44:85:e8:56:0e:6d:89:e4:70:0c:b5:e4:39:7a:34:09:
         b5:5a:8a:2f:a1:fe:10:80:f7:88:61:08:35:92:9c:c0:da:1f:
         52:0d:61:22:a4:07:be:b7:57:4a:92:cf:92:98:e1:f7:f7:76:
         2a:73:7d:01:48:f2:6d:4c:31:e2:53:0f:7a:b7:5d:2c:02:c9:
         1f:fe:de:8b:05:31:a4:8b:6c:19:09:7a:2a:10:fd:a2:56:20:
         56:89:d0:ba:f1:e4:0f:91:dc:bf:4f:7e:b6:86:74:b8:06:83:
         04:14:9b:1c:c4:03:12:9d:c3:66:54:02:2c:a7:92:98:8f:1d:
         43:58:01:a1:e5:b7:2d:cb:67:e2:5d:19:0a:1b:a6:9a:63:6e:
         7f:4b:8d:d6:3e:24:64:de:1a:16:09:27:4f:ed:c2:25:02:31:
         9b:45:34:a1:97:40:af:34:e0:67:45:59:11:0f:70:a3:ad:d9:
         20:30:79:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0T8BGbH7y08uTst9CBI4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MDk3ZDVmNzdhMDg2NDM1MDBhNDM2ZDBlOThmMDMzZDBm
NTQ4ZjkwHhcNMjUwMjAyMDQwMDM0WhcNMjUwMjAzMDQwMDM0WjAzMTEwLwYDVQQD
Eyg4MDM2OGE5M2Q4YTE0YjU3MTM0MjFjYTdiM2Q5ZGM0YmU4ZWY2ZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi+ZTFkXq19hY5fankeDS0Y6de0H
V84xFtKJkwr4rAC6iEO/bXpY942pgY+9MBfKsGGMooAmL6NnGDVFtbYb0KWkHAYk
RURHnAeGJHaSg8BKYj55U+fS5hIOXiDs35t2rZTYeSoPUuWiaZpshF3X0bCWUlDB
DswiLqzDcKfbec5pnJgnIv+Nn6UlD09wQBKY6/a32UkLNWyeHtt2Nbo6XkWdjtDo
+QwWrD176fGB0lXHKBFSY7mm5BkXlwHnQTByWkIErgVaif6w29Ko5mejc3IekvEI
kaHRIvix8pS1p5ieuRIwkjsvCr2b/C18WNUaIjQTZxllJUCCc1FGIIdkpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIA2ipPYoUtXE0Icp7PZ3Evo729JMB8GA1UdIwQY
MBaAFHgJfV93oIZDUApDbQ6Y8DPQ9Uj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUFsOVgzZWdoa05RQ2tOdERwandNOUQxU1BrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8zNTI1ZDMtODYyZS00OTc4LWE1ZjEt
YTE4ZTQwMDZmODBhLzEvZUFsOVgzZWdoa05RQ2tOdERwandNOUQxU1BrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8zNTI1ZDMtODYyZS00OTc4LWE1ZjEtYTE4ZTQwMDZmODBh
LzEvZUFsOVgzZWdoa05RQ2tOdERwandNOUQxU1BrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZW0K6QF
9YAg8bU4tyjAimNyBLsCHobq8m8XnQBVllcmI91aalRIf9/NMY454pcWz8Cs3eQx
JuodZMn+zp1QEPbIti/1gUPeMTREhehWDm2J5HAMteQ5ejQJtVqKL6H+EID3iGEI
NZKcwNofUg1hIqQHvrdXSpLPkpjh9/d2KnN9AUjybUwx4lMPerddLALJH/7eiwUx
pItsGQl6KhD9olYgVonQuvHkD5Hcv09+toZ0uAaDBBSbHMQDEp3DZlQCLKeSmI8d
Q1gBoeW3Lctn4l0ZChummmNuf0uN1j4kZN4aFgknT+3CJQIxm0U0oZdArzTgZ0VZ
EQ9wo63ZIDB5iA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:47:02 2025 by rpki-client