Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
File:                     8G37T34-N0VYDoyPxHAj_7H6kW0.mft (raw, json)
Hash identifier:          DFaLaDrL47wY8wAyOJY9eygnS8xgFg2xWS+6lglToc0=
Subject key identifier:   26:26:04:46:B3:CA:0A:84:AF:45:EB:AB:75:57:C0:8F:0D:67:FE:2E
Authority key identifier: F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D
Certificate issuer:       /CN=f06dfb4f7e3e3745580e8c8fc47023ffb1fa916d
Certificate serial:       0196496A79D329C65F82F228AEB4E3155784
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
Manifest number:          042F
Signing time:             Fri 18 Apr 2025 15:00:36 +0000
Manifest this update:     Fri 18 Apr 2025 15:00:36 +0000
Manifest next update:     Sat 19 Apr 2025 15:00:36 +0000
Files and hashes:         1: 8G37T34-N0VYDoyPxHAj_7H6kW0.crl (hash: A/tb2n72PN6s/LXSR9IT91I3WFLIiV+33VdPeKsuYpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 15:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:6a:79:d3:29:c6:5f:82:f2:28:ae:b4:e3:15:57:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f06dfb4f7e3e3745580e8c8fc47023ffb1fa916d
        Validity
            Not Before: Apr 18 15:00:36 2025 GMT
            Not After : Apr 19 15:00:36 2025 GMT
        Subject: CN=26260446b3ca0a84af45ebab7557c08f0d67fe2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:df:0c:3f:b4:c0:21:17:12:68:e1:b5:7b:b0:
                    36:26:8d:4a:47:f7:fb:13:2b:c7:a9:a5:ef:0e:fd:
                    3c:d7:d0:b6:b3:3f:0d:ff:0f:63:0d:69:6a:f5:3e:
                    4a:b0:69:9f:6a:79:bc:32:a1:99:e9:42:e3:bc:53:
                    7f:b6:76:62:7b:2a:41:de:6f:bf:fe:70:ba:5e:d4:
                    a5:4e:66:22:e3:42:69:ed:b3:92:e0:ce:31:f0:8f:
                    f9:3f:c0:ab:b0:fa:0a:42:8c:b7:2b:bd:33:55:32:
                    32:53:66:6a:71:f4:ff:2e:a5:22:76:0f:9f:eb:78:
                    dc:a3:3b:88:25:29:1b:3f:cc:2e:f0:60:f9:01:76:
                    a7:cd:f1:d0:14:41:bb:ef:f0:f0:3c:18:90:2d:e3:
                    79:28:27:71:de:12:d0:36:77:2d:c3:00:4c:34:c8:
                    ed:b4:23:0f:77:55:5f:73:d5:52:44:17:85:84:43:
                    58:23:a1:6e:b6:b0:76:8e:44:50:ba:14:58:3d:43:
                    09:2b:86:3d:88:51:fa:93:0a:e2:02:31:8f:61:b3:
                    5c:f3:e8:55:5e:e0:c9:99:32:a9:28:3f:ed:47:d1:
                    c1:b6:3f:bf:cb:56:1c:69:fd:d2:f0:7b:b4:49:ab:
                    de:a0:28:f4:73:de:19:c1:e2:e0:cf:1d:e1:5c:b9:
                    ff:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:26:04:46:B3:CA:0A:84:AF:45:EB:AB:75:57:C0:8F:0D:67:FE:2E
            X509v3 Authority Key Identifier:
                keyid:F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:78:5e:fa:1e:fc:fc:48:52:25:10:9d:9b:67:45:28:6b:73:
         50:3d:1c:4e:0b:8a:69:14:6a:e8:92:ff:41:bb:e2:3a:96:c9:
         66:f6:01:ec:9f:3e:af:e9:03:91:55:45:2c:51:ef:32:dd:9d:
         f6:45:06:54:bd:65:d4:cd:0a:b0:9c:98:11:53:d4:6d:e7:2f:
         d2:3e:20:69:3d:38:98:33:39:8d:60:b3:2a:d0:bc:c7:31:7d:
         ca:b6:95:ac:27:ff:9b:d0:2f:19:fe:8e:39:08:4d:d3:96:a6:
         23:e2:11:a8:9a:c3:cf:98:99:02:42:36:4f:e0:fe:d7:b1:5d:
         dd:b4:a3:3f:bf:df:0d:f5:d7:16:b9:27:3d:c7:6e:6e:7b:eb:
         bc:95:08:c4:f7:b7:96:53:91:3a:bf:85:46:e1:a5:11:f0:03:
         4a:4d:a7:8b:7c:4e:14:8e:a8:26:2c:2e:a4:fc:55:fd:e6:f6:
         76:b2:f8:e6:6c:16:ac:4f:90:a9:21:7a:23:78:12:46:e0:09:
         1a:e9:b6:46:95:6c:4d:24:81:08:db:f8:c9:7b:68:4f:ac:1e:
         b4:0b:32:3f:93:c8:44:eb:1d:4b:9b:a3:e9:2a:bd:de:32:c4:
         8d:07:2d:7e:56:2b:9e:96:51:18:a4:f1:fc:b0:28:85:08:03:
         45:f7:32:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZJannTKcZfgvIorrTjFVeEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNmRmYjRmN2UzZTM3NDU1ODBlOGM4ZmM0NzAyM2ZmYjFm
YTkxNmQwHhcNMjUwNDE4MTUwMDM2WhcNMjUwNDE5MTUwMDM2WjAzMTEwLwYDVQQD
EygyNjI2MDQ0NmIzY2EwYTg0YWY0NWViYWI3NTU3YzA4ZjBkNjdmZTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr98MP7TAIRcSaOG1e7A2Jo1KR/f7
EyvHqaXvDv0819C2sz8N/w9jDWlq9T5KsGmfanm8MqGZ6ULjvFN/tnZieypB3m+/
/nC6XtSlTmYi40Jp7bOS4M4x8I/5P8CrsPoKQoy3K70zVTIyU2ZqcfT/LqUidg+f
63jcozuIJSkbP8wu8GD5AXanzfHQFEG77/DwPBiQLeN5KCdx3hLQNnctwwBMNMjt
tCMPd1Vfc9VSRBeFhENYI6FutrB2jkRQuhRYPUMJK4Y9iFH6kwriAjGPYbNc8+hV
XuDJmTKpKD/tR9HBtj+/y1Ycaf3S8Hu0SaveoCj0c94ZweLgzx3hXLn/dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYmBEazygqEr0Xrq3VXwI8NZ/4uMB8GA1UdIwQY
MBaAFPBt+09+PjdFWA6Mj8RwI/+x+pFtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEczN1QzNC1OMFZZRG95UHhIQWpfN0g2a1cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82ZTFkZjgtNmViYy00YjJlLTkxYjQt
YjAzZjk0ODgwNGJlLzEvOEczN1QzNC1OMFZZRG95UHhIQWpfN0g2a1cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82ZTFkZjgtNmViYy00YjJlLTkxYjQtYjAzZjk0ODgwNGJl
LzEvOEczN1QzNC1OMFZZRG95UHhIQWpfN0g2a1cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAynhe+h78
/EhSJRCdm2dFKGtzUD0cTguKaRRq6JL/QbviOpbJZvYB7J8+r+kDkVVFLFHvMt2d
9kUGVL1l1M0KsJyYEVPUbecv0j4gaT04mDM5jWCzKtC8xzF9yraVrCf/m9AvGf6O
OQhN05amI+IRqJrDz5iZAkI2T+D+17Fd3bSjP7/fDfXXFrknPcdubnvrvJUIxPe3
llOROr+FRuGlEfADSk2ni3xOFI6oJiwupPxV/eb2drL45mwWrE+QqSF6I3gSRuAJ
Gum2RpVsTSSBCNv4yXtoT6wetAsyP5PIROsdS5uj6Sq93jLEjQctflYrnpZRGKTx
/LAohQgDRfcyAQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 01:28:52 2025 by rpki-client