Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
File:                     eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft (raw, json)
Hash identifier:          q4j99skIcGjtVcLVR34W3kUekw+4j4x3hY8D0S0HwTo=
Subject key identifier:   95:55:0F:60:CE:22:AE:9F:18:D7:7D:1B:96:E1:B9:2D:20:F9:E7:B1
Authority key identifier: 79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D
Certificate issuer:       /CN=7995f91e998225015f47063c328e0c501d68b59d
Certificate serial:       0196439F818F989A375079781D5C743E48C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
Manifest number:          0FCD
Signing time:             Thu 17 Apr 2025 12:00:48 +0000
Manifest this update:     Thu 17 Apr 2025 12:00:48 +0000
Manifest next update:     Fri 18 Apr 2025 12:00:48 +0000
Files and hashes:         1: eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl (hash: 895CAQirG6LvPtRuWEQNsqJigKBIDVezhEd9C+iPiwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:43:9f:81:8f:98:9a:37:50:79:78:1d:5c:74:3e:48:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7995f91e998225015f47063c328e0c501d68b59d
        Validity
            Not Before: Apr 17 12:00:48 2025 GMT
            Not After : Apr 18 12:00:48 2025 GMT
        Subject: CN=95550f60ce22ae9f18d77d1b96e1b92d20f9e7b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:75:89:09:1c:02:ce:b3:0d:f0:78:a6:f9:16:
                    95:0d:bb:3a:5f:6a:db:d8:de:be:8c:25:4f:64:1c:
                    7d:7c:05:2e:d4:c8:09:7c:a5:61:24:8e:4a:78:fd:
                    c6:84:f3:ee:5f:9e:22:55:52:a3:ee:4d:52:e1:08:
                    44:41:fa:1a:a8:cc:98:85:2c:56:c2:68:1b:c7:5b:
                    ef:c8:ac:05:29:46:32:0a:6e:5f:1c:2e:a8:1a:e1:
                    1f:d6:da:35:2f:36:36:4a:6b:92:28:77:ac:b2:f8:
                    96:7f:ec:64:85:e5:9a:ad:4b:4e:27:5f:28:a9:e1:
                    8a:97:22:95:11:4b:89:33:fa:af:82:d1:b7:f9:0d:
                    e1:45:8b:1f:8d:96:6c:58:29:61:f0:8e:90:aa:e8:
                    ac:2c:bd:2a:5f:ef:81:a4:40:17:f7:18:42:3c:d8:
                    55:7d:ee:45:0a:4b:96:7b:d2:b3:c6:3e:ca:40:49:
                    3f:1e:ad:de:04:3b:ea:b4:52:f6:62:87:f5:1c:c9:
                    60:45:06:12:03:fc:37:1d:8c:10:ec:c5:f4:78:42:
                    bb:36:5b:3b:6d:8e:a3:13:68:df:43:7d:94:e6:f7:
                    e7:35:0a:c2:53:e3:ce:d3:6b:9e:89:f7:6f:a5:cf:
                    35:81:1e:85:97:9b:c4:ea:6e:24:76:0c:60:3f:fc:
                    e2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:55:0F:60:CE:22:AE:9F:18:D7:7D:1B:96:E1:B9:2D:20:F9:E7:B1
            X509v3 Authority Key Identifier:
                keyid:79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:29:91:62:db:14:1f:34:0b:0e:d9:08:d7:db:63:43:cd:3a:
         8b:7d:5b:4a:f5:60:23:1e:cd:a1:a5:40:2b:1b:bf:4f:e6:69:
         f3:99:d7:45:1e:2c:5c:b1:dd:da:71:59:5d:50:b0:64:12:59:
         0a:2f:43:64:5b:e1:af:44:ba:08:99:ab:8f:0d:bd:27:fa:c4:
         c6:46:29:40:7c:19:29:15:e3:d3:c0:e0:f9:40:0d:97:57:d7:
         67:27:78:a3:7e:68:90:19:06:43:92:be:15:70:29:16:f0:52:
         0d:8e:eb:b0:0a:c0:1d:a7:e1:0f:96:71:3d:79:a3:37:ed:68:
         77:ff:6c:a9:1c:2b:47:5b:59:ed:bc:8f:6f:83:93:e7:fa:a4:
         ea:7c:73:58:3d:1a:81:ff:99:29:c7:08:91:00:c5:1c:95:0d:
         5d:b6:c2:71:fa:2c:c8:37:40:d2:d2:e3:1d:28:c2:3b:eb:2f:
         2a:f9:8c:33:50:3a:55:67:76:40:12:62:a0:9b:0c:a4:15:44:
         cf:a7:ce:9e:e3:63:d6:5f:24:ac:1c:38:cd:94:34:31:e7:b0:
         0f:bd:6f:87:43:b9:51:3f:e4:66:e6:cd:c6:74:87:b6:55:1b:
         8c:02:a8:dd:46:7f:18:bc:e2:bd:32:49:cc:30:0e:a1:26:f3:
         e7:dd:ee:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZDn4GPmJo3UHl4HVx0PkjDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OTVmOTFlOTk4MjI1MDE1ZjQ3MDYzYzMyOGUwYzUwMWQ2
OGI1OWQwHhcNMjUwNDE3MTIwMDQ4WhcNMjUwNDE4MTIwMDQ4WjAzMTEwLwYDVQQD
Eyg5NTU1MGY2MGNlMjJhZTlmMThkNzdkMWI5NmUxYjkyZDIwZjllN2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HWJCRwCzrMN8Him+RaVDbs6X2rb
2N6+jCVPZBx9fAUu1MgJfKVhJI5KeP3GhPPuX54iVVKj7k1S4QhEQfoaqMyYhSxW
wmgbx1vvyKwFKUYyCm5fHC6oGuEf1to1LzY2SmuSKHessviWf+xkheWarUtOJ18o
qeGKlyKVEUuJM/qvgtG3+Q3hRYsfjZZsWClh8I6QquisLL0qX++BpEAX9xhCPNhV
fe5FCkuWe9Kzxj7KQEk/Hq3eBDvqtFL2Yof1HMlgRQYSA/w3HYwQ7MX0eEK7Nls7
bY6jE2jfQ32U5vfnNQrCU+PO02ueifdvpc81gR6Fl5vE6m4kdgxgP/ziMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVVD2DOIq6fGNd9G5bhuS0g+eexMB8GA1UdIwQY
MBaAFHmV+R6ZgiUBX0cGPDKODFAdaLWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVpYNUhwbUNKUUZmUndZOE1vNE1VQjFvdFowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iNDExZjUtYTdmOC00Yjg0LTg1ZTMt
YTA5ZDZjNWQzNTUyLzEvZVpYNUhwbUNKUUZmUndZOE1vNE1VQjFvdFowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9iNDExZjUtYTdmOC00Yjg0LTg1ZTMtYTA5ZDZjNWQzNTUy
LzEvZVpYNUhwbUNKUUZmUndZOE1vNE1VQjFvdFowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCmRYtsU
HzQLDtkI19tjQ806i31bSvVgIx7NoaVAKxu/T+Zp85nXRR4sXLHd2nFZXVCwZBJZ
Ci9DZFvhr0S6CJmrjw29J/rExkYpQHwZKRXj08Dg+UANl1fXZyd4o35okBkGQ5K+
FXApFvBSDY7rsArAHafhD5ZxPXmjN+1od/9sqRwrR1tZ7byPb4OT5/qk6nxzWD0a
gf+ZKccIkQDFHJUNXbbCcfosyDdA0tLjHSjCO+svKvmMM1A6VWd2QBJioJsMpBVE
z6fOnuNj1l8krBw4zZQ0MeewD71vh0O5UT/kZubNxnSHtlUbjAKo3UZ/GLzivTJJ
zDAOoSbz593urQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:21:29 2025 by rpki-client