Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
File:                     MLepUygLb5mPwRxHy-kbgmM2TrA.mft (raw, json)
Hash identifier:          O2D8cJEzhsYKEj0N3tjypQw/058wrfJJM8pDbDfUwnM=
Subject key identifier:   DA:F3:9B:63:29:3F:64:9B:6F:CA:83:55:0A:B1:BD:90:12:D4:B2:A8
Authority key identifier: 30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0
Certificate issuer:       /CN=30b7a953280b6f998fc11c47cbe91b8263364eb0
Certificate serial:       01964E23182F1C47A73C89DDB39D9A0433B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
Manifest number:          03D7
Signing time:             Sat 19 Apr 2025 13:00:44 +0000
Manifest this update:     Sat 19 Apr 2025 13:00:44 +0000
Manifest next update:     Sun 20 Apr 2025 13:00:44 +0000
Files and hashes:         1: MLepUygLb5mPwRxHy-kbgmM2TrA.crl (hash: gXMyj/Se7TdXc03BOxWtYk+/yXX9vRNZxdmdJFcQsPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:23:18:2f:1c:47:a7:3c:89:dd:b3:9d:9a:04:33:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30b7a953280b6f998fc11c47cbe91b8263364eb0
        Validity
            Not Before: Apr 19 13:00:44 2025 GMT
            Not After : Apr 20 13:00:44 2025 GMT
        Subject: CN=daf39b63293f649b6fca83550ab1bd9012d4b2a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e7:8d:c5:02:83:da:73:66:17:54:18:6f:19:
                    ac:ca:a4:1a:a4:33:54:c3:db:2c:d9:4e:15:0f:73:
                    76:6b:5b:f0:08:71:b2:e6:f9:f4:d2:b9:0d:77:41:
                    43:11:69:00:4e:50:80:97:cb:5e:16:7a:a8:20:62:
                    57:2a:9c:f3:d4:07:0b:b1:f6:0c:a0:59:fd:87:b9:
                    49:6e:a8:2e:f2:5b:24:74:7b:f8:10:2b:55:2a:9f:
                    d8:c2:fa:c5:02:6a:1b:2d:4f:02:27:83:10:d4:e8:
                    a1:eb:88:bd:1d:67:23:79:a0:af:b1:48:40:3c:07:
                    ed:11:1e:4f:a7:11:e7:67:45:50:4c:06:40:a3:c8:
                    b9:f6:c6:78:2f:13:c2:fe:41:e2:6e:ef:5c:38:bf:
                    14:02:fe:a6:a5:dc:47:5e:65:13:1b:cb:ea:df:77:
                    67:e8:84:89:d2:28:a8:9c:96:7b:27:52:be:2c:0c:
                    54:7b:55:5c:bb:13:8e:1f:34:b1:81:c8:8c:e7:fe:
                    f9:3e:c8:6b:57:0e:cd:ea:33:21:06:f3:c9:af:86:
                    6c:3a:06:6f:5a:d3:f6:9d:11:41:3c:29:c7:e2:bf:
                    47:ee:93:a9:db:d4:8c:78:b8:51:3f:a8:d6:4e:65:
                    4c:f1:12:57:a2:90:a8:90:6e:0e:f0:1a:0f:29:0a:
                    e9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F3:9B:63:29:3F:64:9B:6F:CA:83:55:0A:B1:BD:90:12:D4:B2:A8
            X509v3 Authority Key Identifier:
                keyid:30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:dc:a9:1c:cd:8f:95:22:a0:48:e8:af:2c:48:6f:5c:25:fd:
         86:72:bf:c7:80:b5:84:f0:56:ca:70:3c:0d:38:38:bb:f4:b8:
         b5:a9:35:f1:3b:2f:6e:f3:e2:d2:0c:61:5d:85:f7:26:53:03:
         9f:b2:30:34:5e:5e:d0:d5:4a:41:45:5f:b2:03:c4:24:85:2b:
         80:b2:fe:06:85:96:3d:92:b6:6e:36:06:61:56:df:a8:58:5a:
         2a:47:20:9c:cb:7d:fd:a3:58:72:c6:00:74:bf:25:69:20:41:
         89:79:69:bd:40:c5:14:f2:f8:76:89:d6:3c:c0:04:69:bd:ae:
         11:90:74:e0:22:67:27:0e:fe:27:74:e4:15:66:8d:da:e7:74:
         a1:37:36:85:1e:74:34:51:66:b2:50:80:08:f4:e3:c9:de:5f:
         ef:6e:f7:2e:17:96:7e:4c:42:ee:ff:56:f0:db:64:ec:b4:2d:
         95:ae:6e:21:d6:9a:28:e7:2e:bd:74:0f:83:d0:68:32:68:10:
         94:8b:18:3d:29:3e:32:6e:31:b6:2a:16:dc:b3:79:a5:c0:61:
         6b:4b:16:14:ce:d4:6a:f9:46:a1:c2:63:90:1b:f4:e8:d5:2a:
         32:61:42:b0:85:8e:5e:a8:94:a2:30:29:75:1a:e9:7f:26:08:
         12:18:e8:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOIxgvHEenPInds52aBDO3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYjdhOTUzMjgwYjZmOTk4ZmMxMWM0N2NiZTkxYjgyNjMz
NjRlYjAwHhcNMjUwNDE5MTMwMDQ0WhcNMjUwNDIwMTMwMDQ0WjAzMTEwLwYDVQQD
EyhkYWYzOWI2MzI5M2Y2NDliNmZjYTgzNTUwYWIxYmQ5MDEyZDRiMmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOeNxQKD2nNmF1QYbxmsyqQapDNU
w9ss2U4VD3N2a1vwCHGy5vn00rkNd0FDEWkATlCAl8teFnqoIGJXKpzz1AcLsfYM
oFn9h7lJbqgu8lskdHv4ECtVKp/YwvrFAmobLU8CJ4MQ1Oih64i9HWcjeaCvsUhA
PAftER5PpxHnZ0VQTAZAo8i59sZ4LxPC/kHibu9cOL8UAv6mpdxHXmUTG8vq33dn
6ISJ0iionJZ7J1K+LAxUe1VcuxOOHzSxgciM5/75PshrVw7N6jMhBvPJr4ZsOgZv
WtP2nRFBPCnH4r9H7pOp29SMeLhRP6jWTmVM8RJXopCokG4O8BoPKQrpWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrzm2MpP2Sbb8qDVQqxvZAS1LKoMB8GA1UdIwQY
MBaAFDC3qVMoC2+Zj8EcR8vpG4JjNk6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUxlcFV5Z0xiNW1Qd1J4SHkta2JnbU0yVHJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kZmIzZmYtYmUzYy00MTg1LTllMDgt
OWM3MTY5YjdhMmU0LzEvTUxlcFV5Z0xiNW1Qd1J4SHkta2JnbU0yVHJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kZmIzZmYtYmUzYy00MTg1LTllMDgtOWM3MTY5YjdhMmU0
LzEvTUxlcFV5Z0xiNW1Qd1J4SHkta2JnbU0yVHJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdypHM2P
lSKgSOivLEhvXCX9hnK/x4C1hPBWynA8DTg4u/S4tak18TsvbvPi0gxhXYX3JlMD
n7IwNF5e0NVKQUVfsgPEJIUrgLL+BoWWPZK2bjYGYVbfqFhaKkcgnMt9/aNYcsYA
dL8laSBBiXlpvUDFFPL4donWPMAEab2uEZB04CJnJw7+J3TkFWaN2ud0oTc2hR50
NFFmslCACPTjyd5f7273LheWfkxC7v9W8Ntk7LQtla5uIdaaKOcuvXQPg9BoMmgQ
lIsYPSk+Mm4xtioW3LN5pcBha0sWFM7UavlGocJjkBv06NUqMmFCsIWOXqiUojAp
dRrpfyYIEhjo7A==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:13:57 2025 by rpki-client