Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
File:                     nVK4OxL6igcTLMgIM6ED4J2L0E8.mft (raw, json)
Hash identifier:          aJORdcuNl80blfTWuFqO/bDOj3VmMZEGULEFamJaSc4=
Subject key identifier:   D2:1F:0C:FF:82:32:04:A5:41:1C:5E:66:78:FC:46:8D:DD:B9:0C:26
Authority key identifier: 9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F
Certificate issuer:       /CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
Certificate serial:       01958F988946956B33122E8F24EAE2510DD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
Manifest number:          018F
Signing time:             Thu 13 Mar 2025 13:01:33 +0000
Manifest this update:     Thu 13 Mar 2025 13:01:33 +0000
Manifest next update:     Fri 14 Mar 2025 13:01:33 +0000
Files and hashes:         1: nVK4OxL6igcTLMgIM6ED4J2L0E8.crl (hash: d9VSRieDPezus13eSTGjbVTfzmDhptmkCVtO2sodlBo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8f:98:89:46:95:6b:33:12:2e:8f:24:ea:e2:51:0d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
        Validity
            Not Before: Mar 13 13:01:33 2025 GMT
            Not After : Mar 14 13:01:33 2025 GMT
        Subject: CN=d21f0cff823204a5411c5e6678fc468dddb90c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9f:f0:cf:6c:fa:3b:02:90:9e:2b:9d:63:d2:
                    c9:76:cd:68:78:ed:b3:4c:71:07:a5:e4:46:57:38:
                    19:02:c5:88:b5:66:78:4e:10:56:d6:fe:9e:8c:cc:
                    1a:a6:30:da:a9:b2:b1:01:7d:7b:f7:bb:40:7d:5d:
                    60:90:12:9a:6c:5f:ed:de:e4:72:7b:bf:85:ef:63:
                    56:7d:5f:99:46:d4:75:81:8a:41:9a:71:01:76:94:
                    8a:99:a5:69:6e:ff:e4:49:04:97:18:ab:8b:ea:50:
                    7d:ca:fa:e7:9b:d1:47:a6:1b:c7:d1:28:ba:96:c7:
                    a7:ff:98:3f:47:67:da:cf:02:2a:78:b4:e7:a3:91:
                    dc:9a:24:12:ca:bb:27:ba:fe:8d:fa:98:e6:f2:a5:
                    e3:bc:e6:f9:d0:0f:f7:26:38:6c:51:22:52:12:3a:
                    62:ac:e5:14:3d:4d:5d:e1:6e:94:21:75:73:f8:c9:
                    12:e7:df:f4:32:f7:87:f0:88:5c:c5:db:a6:cc:96:
                    b7:1d:aa:79:bb:3d:24:ff:58:8c:15:bb:ca:73:b3:
                    1d:1c:79:ed:20:98:1d:de:40:f8:f2:6a:3a:f1:16:
                    d6:ac:b3:59:12:55:14:7e:9b:a9:d0:cb:75:db:0f:
                    39:96:8b:bc:d7:c0:f6:bf:f0:ed:47:11:62:27:4e:
                    2e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1F:0C:FF:82:32:04:A5:41:1C:5E:66:78:FC:46:8D:DD:B9:0C:26
            X509v3 Authority Key Identifier:
                keyid:9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:74:7f:32:bc:1b:d4:1c:7e:c5:0a:85:c0:ff:d5:89:18:fb:
         2d:f4:68:44:db:81:05:03:fe:3a:8d:8e:4a:7b:11:9e:33:69:
         a9:47:5b:b8:b8:88:8e:f7:1a:be:a5:9c:b6:01:6a:2e:b9:7f:
         c4:58:c5:f0:40:64:91:2c:10:66:15:c8:9d:2f:85:0f:d5:e0:
         82:73:7d:2f:8e:bf:5e:86:1c:91:9f:2b:0e:d1:a0:42:03:52:
         a0:d8:63:f3:40:2b:82:40:7c:70:47:64:1b:62:99:07:cd:7a:
         ec:45:13:e3:0d:e1:0b:62:6a:3c:d6:01:6d:2e:98:02:4e:ec:
         4d:ea:ac:04:48:88:4e:0e:2c:69:bd:4e:df:4c:ea:cb:a6:b2:
         01:6e:4c:53:ba:dd:71:72:d9:15:8d:5a:97:0e:7a:16:d5:5b:
         21:82:83:ee:ed:25:7d:a2:10:50:db:72:e1:82:e1:23:ed:ff:
         73:ed:bb:89:f0:e2:bd:74:80:31:e4:81:9f:5d:7b:54:1e:f9:
         01:22:b4:e3:7e:02:c1:b7:c9:72:c6:06:40:7e:c3:97:f3:d0:
         77:65:25:94:e5:c2:51:88:f9:9d:89:06:03:ae:3f:9b:d9:9f:
         eb:2a:be:43:ea:93:bb:b7:d7:ee:bf:af:d9:7e:8d:c3:f5:33:
         b3:34:6d:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWPmIlGlWszEi6PJOriUQ3YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNTJiODNiMTJmYThhMDcxMzJjYzgwODMzYTEwM2UwOWQ4
YmQwNGYwHhcNMjUwMzEzMTMwMTMzWhcNMjUwMzE0MTMwMTMzWjAzMTEwLwYDVQQD
EyhkMjFmMGNmZjgyMzIwNGE1NDExYzVlNjY3OGZjNDY4ZGRkYjkwYzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5/wz2z6OwKQniudY9LJds1oeO2z
THEHpeRGVzgZAsWItWZ4ThBW1v6ejMwapjDaqbKxAX1797tAfV1gkBKabF/t3uRy
e7+F72NWfV+ZRtR1gYpBmnEBdpSKmaVpbv/kSQSXGKuL6lB9yvrnm9FHphvH0Si6
lsen/5g/R2fazwIqeLTno5HcmiQSyrsnuv6N+pjm8qXjvOb50A/3JjhsUSJSEjpi
rOUUPU1d4W6UIXVz+MkS59/0MveH8IhcxdumzJa3Hap5uz0k/1iMFbvKc7MdHHnt
IJgd3kD48mo68RbWrLNZElUUfpup0Mt12w85lou818D2v/DtRxFiJ04ubwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIfDP+CMgSlQRxeZnj8Ro3duQwmMB8GA1UdIwQY
MBaAFJ1SuDsS+ooHEyzICDOhA+Cdi9BPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblZLNE94TDZpZ2NUTE1nSU02RUQ0SjJMMEU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YmEyMzItODkyOS00MTBkLWJkZGQt
ZTRiNmE5ZGY5YTM0LzEvblZLNE94TDZpZ2NUTE1nSU02RUQ0SjJMMEU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83YmEyMzItODkyOS00MTBkLWJkZGQtZTRiNmE5ZGY5YTM0
LzEvblZLNE94TDZpZ2NUTE1nSU02RUQ0SjJMMEU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3R/Mrwb
1Bx+xQqFwP/ViRj7LfRoRNuBBQP+Oo2OSnsRnjNpqUdbuLiIjvcavqWctgFqLrl/
xFjF8EBkkSwQZhXInS+FD9XggnN9L46/XoYckZ8rDtGgQgNSoNhj80ArgkB8cEdk
G2KZB8167EUT4w3hC2JqPNYBbS6YAk7sTeqsBEiITg4sab1O30zqy6ayAW5MU7rd
cXLZFY1alw56FtVbIYKD7u0lfaIQUNty4YLhI+3/c+27ifDivXSAMeSBn117VB75
ASK0434CwbfJcsYGQH7Dl/PQd2UllOXCUYj5nYkGA64/m9mf6yq+Q+qTu7fX7r+v
2X6Nw/UzszRtqg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:33:29 2025 by rpki-client