Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.mft
File:                     _Me2AVe1RTWEdeJXCMbizAbbres.mft (raw, json)
Hash identifier:          M6GVJkoIUKdV9y4L45jKKj+43qD1WFSqOEPJ+9AhKkU=
Subject key identifier:   92:78:00:9B:05:EA:DD:E0:E6:DA:02:AD:00:E3:43:72:F5:32:28:3B
Authority key identifier: FC:C7:B6:01:57:B5:45:35:84:75:E2:57:08:C6:E2:CC:06:DB:AD:EB
Certificate issuer:       /CN=fcc7b60157b545358475e25708c6e2cc06dbadeb
Certificate serial:       019579107FD1BFC3214454A91B471E3DF0D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Me2AVe1RTWEdeJXCMbizAbbres.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.mft
Manifest number:          0113
Signing time:             Sun 09 Mar 2025 04:01:19 +0000
Manifest this update:     Sun 09 Mar 2025 04:01:19 +0000
Manifest next update:     Mon 10 Mar 2025 04:01:19 +0000
Files and hashes:         1: _Me2AVe1RTWEdeJXCMbizAbbres.crl (hash: 4t1VQMqVzauzRAupAatVZd1gjyNMwFC0AvpUyrdmsSU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Me2AVe1RTWEdeJXCMbizAbbres.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 10 Mar 2025 04:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:79:10:7f:d1:bf:c3:21:44:54:a9:1b:47:1e:3d:f0:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcc7b60157b545358475e25708c6e2cc06dbadeb
        Validity
            Not Before: Mar  9 04:01:19 2025 GMT
            Not After : Mar 10 04:01:19 2025 GMT
        Subject: CN=9278009b05eadde0e6da02ad00e34372f532283b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d8:d6:31:2e:cb:61:8c:28:c3:97:ba:97:b0:
                    9d:26:70:3e:df:b8:e7:8d:61:d1:46:e4:8c:65:c3:
                    ef:42:dd:14:20:50:b0:94:b7:20:a9:fa:7e:e5:e2:
                    d6:cd:8f:8a:aa:07:cd:28:ab:45:f5:77:87:f8:2c:
                    c2:b3:13:ad:33:c9:77:7e:42:aa:23:94:88:aa:a1:
                    27:f7:c8:b6:0e:82:4a:bd:6b:e7:cb:1b:5f:21:33:
                    60:fa:84:39:58:b8:92:bf:13:15:7b:d4:ef:7c:0c:
                    d3:8f:fe:68:ea:58:c1:90:6e:c3:6b:7b:e2:85:ab:
                    9a:85:6b:a3:dd:f6:03:39:42:0a:e8:a6:f8:3d:d9:
                    27:e0:d2:5d:35:ab:0a:50:35:c5:ce:d5:0c:0c:ee:
                    a1:fc:0c:b1:a4:53:19:ba:44:eb:ff:42:89:91:0d:
                    ba:96:08:37:4b:22:27:74:a5:fa:ca:26:41:1b:66:
                    24:58:43:7a:16:a7:2b:0a:c6:b6:44:65:6a:44:08:
                    37:18:58:52:1b:df:7d:17:19:76:2d:93:2e:67:75:
                    9e:1c:a6:b6:3e:54:aa:08:41:42:77:1a:7d:c1:e8:
                    5d:03:d2:e7:57:79:05:5b:da:7f:d4:cf:a2:fa:ba:
                    bc:03:d9:7f:ef:e9:f6:8d:cc:b5:00:14:bb:61:73:
                    4d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:78:00:9B:05:EA:DD:E0:E6:DA:02:AD:00:E3:43:72:F5:32:28:3B
            X509v3 Authority Key Identifier:
                keyid:FC:C7:B6:01:57:B5:45:35:84:75:E2:57:08:C6:E2:CC:06:DB:AD:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Me2AVe1RTWEdeJXCMbizAbbres.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:2c:5e:6a:60:b1:7b:36:f6:98:73:e4:f2:5d:cc:57:2e:8a:
         19:88:15:7a:e9:41:75:2e:a4:6f:35:d0:e7:b9:ac:a9:c8:d4:
         3e:fc:ee:ce:57:e7:5f:bc:d9:76:29:98:30:35:63:7c:d9:70:
         c2:24:63:85:f2:0b:f8:62:79:8e:d9:92:34:42:5e:25:bf:61:
         f3:91:1f:8d:03:c3:35:57:1c:80:fd:d1:f4:08:e5:da:86:47:
         b1:e3:15:5a:97:51:09:92:ee:c9:2b:ca:83:e3:13:eb:ba:2b:
         71:2d:c1:f3:6f:bf:62:42:ce:d3:9e:6c:83:94:52:b6:b8:9f:
         39:84:ef:5e:93:88:67:c2:d2:20:7c:c8:ef:3a:72:e0:b4:7e:
         61:76:87:2d:62:83:e1:bc:53:fd:40:61:fe:85:e0:8c:30:da:
         4b:d8:22:43:53:91:05:b9:59:06:1c:f6:91:e4:49:37:a2:69:
         87:b3:ca:52:c0:f7:9f:be:88:bc:bd:2f:07:b9:c3:7d:4a:6a:
         4a:8c:18:d1:03:2e:ff:0a:0d:ac:9a:41:e3:ef:01:8e:32:4f:
         1e:e7:98:d9:07:d2:46:be:e0:0b:93:20:9d:19:df:bc:8e:69:
         e2:e5:92:a2:67:3d:aa:80:68:2d:de:0b:d6:ff:e7:c0:3d:c8:
         2c:3b:97:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZV5EH/Rv8MhRFSpG0cePfDRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYzdiNjAxNTdiNTQ1MzU4NDc1ZTI1NzA4YzZlMmNjMDZk
YmFkZWIwHhcNMjUwMzA5MDQwMTE5WhcNMjUwMzEwMDQwMTE5WjAzMTEwLwYDVQQD
Eyg5Mjc4MDA5YjA1ZWFkZGUwZTZkYTAyYWQwMGUzNDM3MmY1MzIyODNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztjWMS7LYYwow5e6l7CdJnA+37jn
jWHRRuSMZcPvQt0UIFCwlLcgqfp+5eLWzY+KqgfNKKtF9XeH+CzCsxOtM8l3fkKq
I5SIqqEn98i2DoJKvWvnyxtfITNg+oQ5WLiSvxMVe9TvfAzTj/5o6ljBkG7Da3vi
hauahWuj3fYDOUIK6Kb4Pdkn4NJdNasKUDXFztUMDO6h/AyxpFMZukTr/0KJkQ26
lgg3SyIndKX6yiZBG2YkWEN6FqcrCsa2RGVqRAg3GFhSG999Fxl2LZMuZ3WeHKa2
PlSqCEFCdxp9wehdA9LnV3kFW9p/1M+i+rq8A9l/7+n2jcy1ABS7YXNNKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJ4AJsF6t3g5toCrQDjQ3L1Mig7MB8GA1UdIwQY
MBaAFPzHtgFXtUU1hHXiVwjG4swG263rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX01lMkFWZTFSVFdFZGVKWENNYml6QWJicmVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS85MDIyOWYtOTg4Mi00NjU5LWFmZjQt
Mjk0ODJjMWVkNTgwLzEvX01lMkFWZTFSVFdFZGVKWENNYml6QWJicmVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS85MDIyOWYtOTg4Mi00NjU5LWFmZjQtMjk0ODJjMWVkNTgw
LzEvX01lMkFWZTFSVFdFZGVKWENNYml6QWJicmVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbSxeamCx
ezb2mHPk8l3MVy6KGYgVeulBdS6kbzXQ57msqcjUPvzuzlfnX7zZdimYMDVjfNlw
wiRjhfIL+GJ5jtmSNEJeJb9h85EfjQPDNVccgP3R9Ajl2oZHseMVWpdRCZLuySvK
g+MT67orcS3B82+/YkLO055sg5RStrifOYTvXpOIZ8LSIHzI7zpy4LR+YXaHLWKD
4bxT/UBh/oXgjDDaS9giQ1ORBblZBhz2keRJN6Jph7PKUsD3n76IvL0vB7nDfUpq
SowY0QMu/woNrJpB4+8BjjJPHueY2QfSRr7gC5MgnRnfvI5p4uWSomc9qoBoLd4L
1v/nwD3ILDuX6A==
-----END CERTIFICATE-----
Generated at Sun Mar 9 11:44:01 2025 by rpki-client