Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft
File:                     Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft (raw, json)
Hash identifier:          YkMwENTAlgH/6d0wtzJ3mlUbKW3bz9UVA/bZi+5JwOo=
Subject key identifier:   D7:6A:5E:A6:CB:86:86:68:71:C2:04:F5:02:47:6A:0D:46:5A:BB:09
Authority key identifier: 46:6C:FA:4F:88:47:F1:56:1B:55:97:16:70:16:5C:0E:68:B6:27:99
Certificate issuer:       /CN=466cfa4f8847f1561b55971670165c0e68b62799
Certificate serial:       01964A7D34331D238B58969000D4C168280B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft
Manifest number:          0945
Signing time:             Fri 18 Apr 2025 20:00:41 +0000
Manifest this update:     Fri 18 Apr 2025 20:00:41 +0000
Manifest next update:     Sat 19 Apr 2025 20:00:41 +0000
Files and hashes:         1: Rmz6T4hH8VYbVZcWcBZcDmi2J5k.crl (hash: X6Apk/H1/rekpADO4zWEXJq2+bGjU637ArEjg6a3aE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:7d:34:33:1d:23:8b:58:96:90:00:d4:c1:68:28:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466cfa4f8847f1561b55971670165c0e68b62799
        Validity
            Not Before: Apr 18 20:00:41 2025 GMT
            Not After : Apr 19 20:00:41 2025 GMT
        Subject: CN=d76a5ea6cb86866871c204f502476a0d465abb09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b8:59:cc:ab:7d:17:fe:bd:dc:d8:84:83:ee:
                    72:a7:f9:44:4a:67:4b:4d:e7:de:88:c4:52:2c:5e:
                    33:d5:82:07:6f:e6:11:58:7b:21:94:4b:2b:ab:f2:
                    85:21:74:e5:25:62:d4:03:1b:51:62:56:c3:cd:88:
                    7e:a5:68:d6:7a:bf:d2:1f:72:52:55:98:7e:e0:01:
                    d7:c1:8c:83:04:d5:52:4c:f8:85:85:a5:2e:01:43:
                    08:ca:04:f0:8d:c8:22:a3:27:ff:73:90:8c:4d:24:
                    d9:31:97:f0:da:a8:7e:9d:20:83:33:14:1b:38:4a:
                    e7:86:ad:1a:ed:8a:66:ee:34:89:04:d5:78:7a:df:
                    aa:1c:c2:f9:58:5b:9a:bb:b0:59:d4:97:2f:f3:ff:
                    e5:24:41:bb:d7:e4:16:fe:d6:4e:b7:6e:0d:1b:03:
                    fc:32:74:6d:8e:06:23:31:5b:e9:f9:55:19:57:2c:
                    76:72:4f:29:e0:f1:9e:0c:56:f0:90:85:eb:24:3d:
                    cf:b7:69:43:47:55:43:78:ce:9d:19:2b:1b:02:f8:
                    56:e9:cb:9b:a5:f6:00:0d:bd:7b:7d:10:53:79:e4:
                    61:a8:71:2b:15:3d:9a:37:0f:1c:6f:da:a9:68:75:
                    cb:c9:18:25:df:82:e3:1f:ba:01:d0:97:81:82:29:
                    61:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6A:5E:A6:CB:86:86:68:71:C2:04:F5:02:47:6A:0D:46:5A:BB:09
            X509v3 Authority Key Identifier:
                keyid:46:6C:FA:4F:88:47:F1:56:1B:55:97:16:70:16:5C:0E:68:B6:27:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:12:51:45:65:fa:1c:cd:53:da:81:a2:b1:6d:61:f4:ad:9f:
         b8:2a:2f:a1:0b:4a:e9:25:01:59:f5:f8:ff:5e:88:97:11:4b:
         ce:35:06:8e:13:48:2f:fe:10:2d:32:4d:43:21:25:4f:3f:cb:
         24:d0:27:d0:05:bb:ba:27:6d:ef:04:88:b5:69:4f:49:c6:95:
         14:00:e5:e0:8e:19:ec:d2:49:0f:2d:07:16:b5:40:d8:62:b2:
         70:f1:d4:1a:91:ff:c8:c6:32:74:11:77:b0:6b:cd:b6:80:01:
         b9:bb:ee:5d:9e:c1:9e:aa:c5:91:73:db:a0:ad:48:72:56:da:
         a6:a8:23:0b:57:93:e3:34:4f:8d:02:ee:82:c7:4b:0b:62:7f:
         88:ae:f3:c1:8c:4b:de:c3:53:e8:8b:77:95:43:43:62:2a:07:
         38:54:53:a9:d8:c0:84:cd:ad:23:66:b5:53:3e:37:e2:14:e1:
         d5:8f:bb:cb:c1:2f:86:6b:05:80:80:f1:66:87:98:1e:e7:15:
         70:1f:eb:8e:9c:ee:2e:ce:f1:2a:c6:51:9c:cb:6f:8c:7f:a6:
         4f:60:13:29:ff:7b:c2:5e:23:be:78:c7:6a:9e:bd:73:fb:08:
         76:46:3c:1a:cc:ee:a6:6c:61:04:50:84:8f:bd:7b:6b:3b:e5:
         58:7e:3a:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKfTQzHSOLWJaQANTBaCgLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NmNmYTRmODg0N2YxNTYxYjU1OTcxNjcwMTY1YzBlNjhi
NjI3OTkwHhcNMjUwNDE4MjAwMDQxWhcNMjUwNDE5MjAwMDQxWjAzMTEwLwYDVQQD
EyhkNzZhNWVhNmNiODY4NjY4NzFjMjA0ZjUwMjQ3NmEwZDQ2NWFiYjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbhZzKt9F/693NiEg+5yp/lESmdL
TefeiMRSLF4z1YIHb+YRWHshlEsrq/KFIXTlJWLUAxtRYlbDzYh+pWjWer/SH3JS
VZh+4AHXwYyDBNVSTPiFhaUuAUMIygTwjcgioyf/c5CMTSTZMZfw2qh+nSCDMxQb
OErnhq0a7Ypm7jSJBNV4et+qHML5WFuau7BZ1Jcv8//lJEG71+QW/tZOt24NGwP8
MnRtjgYjMVvp+VUZVyx2ck8p4PGeDFbwkIXrJD3Pt2lDR1VDeM6dGSsbAvhW6cub
pfYADb17fRBTeeRhqHErFT2aNw8cb9qpaHXLyRgl34LjH7oB0JeBgilh2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdqXqbLhoZoccIE9QJHag1GWrsJMB8GA1UdIwQY
MBaAFEZs+k+IR/FWG1WXFnAWXA5otieZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm16NlQ0aEg4VlliVlpjV2NCWmNEbWkySjVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC81MDRmZmEtMjkwNS00Nzg1LTkyOTEt
NWIxMWJiMTc5YThiLzEvUm16NlQ0aEg4VlliVlpjV2NCWmNEbWkySjVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC81MDRmZmEtMjkwNS00Nzg1LTkyOTEtNWIxMWJiMTc5YThi
LzEvUm16NlQ0aEg4VlliVlpjV2NCWmNEbWkySjVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBJRRWX6
HM1T2oGisW1h9K2fuCovoQtK6SUBWfX4/16IlxFLzjUGjhNIL/4QLTJNQyElTz/L
JNAn0AW7uidt7wSItWlPScaVFADl4I4Z7NJJDy0HFrVA2GKycPHUGpH/yMYydBF3
sGvNtoABubvuXZ7BnqrFkXPboK1IclbapqgjC1eT4zRPjQLugsdLC2J/iK7zwYxL
3sNT6It3lUNDYioHOFRTqdjAhM2tI2a1Uz434hTh1Y+7y8EvhmsFgIDxZoeYHucV
cB/rjpzuLs7xKsZRnMtvjH+mT2ATKf97wl4jvnjHap69c/sIdkY8GszupmxhBFCE
j717azvlWH46/w==
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:39:36 2025 by rpki-client