Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
File:                     MIVZam3hzL6mZbRWxNLM0JZJmx8.mft (raw, json)
Hash identifier:          s2A9f790xGmXfP5i5IqB1A8BJC7L1q5ZyestPtaczU0=
Subject key identifier:   6D:CC:13:F6:6C:B9:46:16:8A:E5:BC:70:76:45:B1:84:2F:01:E3:FD
Authority key identifier: 30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F
Certificate issuer:       /CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
Certificate serial:       01965726DFB3E38E87FF5C0C88EFA8CE650B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
Manifest number:          08E5
Signing time:             Mon 21 Apr 2025 07:01:27 +0000
Manifest this update:     Mon 21 Apr 2025 07:01:27 +0000
Manifest next update:     Tue 22 Apr 2025 07:01:27 +0000
Files and hashes:         1: MIVZam3hzL6mZbRWxNLM0JZJmx8.crl (hash: M83YpIaWgxsv2QGHQgruiQJa0VS98GfDN1modTf2uvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 07:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:57:26:df:b3:e3:8e:87:ff:5c:0c:88:ef:a8:ce:65:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
        Validity
            Not Before: Apr 21 07:01:27 2025 GMT
            Not After : Apr 22 07:01:27 2025 GMT
        Subject: CN=6dcc13f66cb946168ae5bc707645b1842f01e3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e8:be:57:1f:83:6e:fd:49:73:ff:2f:78:ba:
                    2b:65:23:ab:aa:ed:12:03:bf:eb:77:f7:d4:c4:a1:
                    12:28:16:e9:d3:ff:62:4e:a3:61:06:5f:95:b1:8a:
                    4d:a4:2b:7a:8d:86:44:fb:dd:8d:cb:88:74:db:4d:
                    96:a7:8a:9d:19:6c:17:54:36:54:01:d4:ec:ab:3d:
                    64:54:14:d7:42:9c:c1:aa:3d:94:f9:de:a4:7a:db:
                    21:a2:00:26:ca:97:f2:cb:71:3d:04:64:7b:94:b3:
                    7a:8c:84:d8:4e:ce:c9:86:f9:1e:a3:62:0b:17:48:
                    06:d8:1a:af:03:75:47:3f:ee:f2:e0:0b:a7:f2:23:
                    1f:69:43:22:b5:b6:3a:b0:52:51:fc:1d:7b:5d:a7:
                    4a:b9:71:3b:d6:d9:fd:45:8a:f5:4e:ac:ab:38:fe:
                    5d:0c:3a:67:6a:cc:f0:26:ba:6d:df:8e:aa:44:b5:
                    8c:04:c2:7c:2e:18:ee:39:51:53:31:e3:5b:a4:5e:
                    7c:00:ae:31:ce:54:e7:60:ff:62:68:2c:e5:32:07:
                    59:b3:36:24:ec:c2:65:ec:c6:de:33:66:aa:2c:39:
                    3b:0b:e6:2e:71:0d:e1:c9:8c:cf:45:b8:48:f7:b4:
                    9f:6c:25:a8:6b:02:4d:39:db:7f:d4:82:1e:7a:77:
                    0e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CC:13:F6:6C:B9:46:16:8A:E5:BC:70:76:45:B1:84:2F:01:E3:FD
            X509v3 Authority Key Identifier:
                keyid:30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:27:72:c7:80:5a:95:9d:c8:01:3f:f4:bb:b6:4b:fb:c6:8c:
         bc:15:10:04:cb:50:62:19:d6:c5:7a:4e:59:f4:a3:bf:37:b2:
         ef:a8:f6:76:e7:90:9a:df:74:43:fe:cd:1e:8d:de:c8:27:f2:
         85:af:d2:e4:f2:66:a0:7d:79:c9:c9:17:f6:ce:49:72:63:aa:
         00:e9:b8:ab:93:5c:b0:37:fb:31:29:aa:05:f8:4a:f5:b9:ae:
         28:53:37:25:33:11:b3:91:a0:d6:23:f4:df:9b:4a:c7:f0:5f:
         4f:29:4b:b8:3f:ce:d6:e6:3b:f3:c9:e7:94:d5:80:cf:c5:9f:
         35:42:ef:ea:44:d0:5b:44:7b:98:24:14:8c:40:47:86:b4:cc:
         53:21:80:47:d1:38:c1:90:f6:6e:94:c1:13:29:e8:f9:04:07:
         97:98:0b:05:91:6f:9f:ae:61:7c:ef:18:77:a6:ac:f6:76:65:
         fc:05:4e:37:73:92:ed:7f:b9:3e:9e:5f:80:ea:2c:e9:90:c6:
         39:2a:24:a5:7d:33:7e:ea:22:68:23:f9:82:3b:80:b8:45:6b:
         85:a7:fd:54:3d:ba:81:a0:24:ec:fb:f7:92:c9:5a:83:7e:a0:
         bb:eb:7b:39:c6:40:83:6d:78:39:73:03:49:26:a0:bb:5c:9b:
         b2:31:48:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXJt+z446H/1wMiO+ozmULMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwODU1OTZhNmRlMWNjYmVhNjY1YjQ1NmM0ZDJjY2QwOTY0
OTliMWYwHhcNMjUwNDIxMDcwMTI3WhcNMjUwNDIyMDcwMTI3WjAzMTEwLwYDVQQD
Eyg2ZGNjMTNmNjZjYjk0NjE2OGFlNWJjNzA3NjQ1YjE4NDJmMDFlM2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOi+Vx+Dbv1Jc/8veLorZSOrqu0S
A7/rd/fUxKESKBbp0/9iTqNhBl+VsYpNpCt6jYZE+92Ny4h0202Wp4qdGWwXVDZU
AdTsqz1kVBTXQpzBqj2U+d6ketshogAmypfyy3E9BGR7lLN6jITYTs7Jhvkeo2IL
F0gG2BqvA3VHP+7y4Aun8iMfaUMitbY6sFJR/B17XadKuXE71tn9RYr1TqyrOP5d
DDpnaszwJrpt346qRLWMBMJ8LhjuOVFTMeNbpF58AK4xzlTnYP9iaCzlMgdZszYk
7MJl7MbeM2aqLDk7C+YucQ3hyYzPRbhI97SfbCWoawJNOdt/1IIeencO0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3ME/ZsuUYWiuW8cHZFsYQvAeP9MB8GA1UdIwQY
MBaAFDCFWWpt4cy+pmW0VsTSzNCWSZsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUlWWmFtM2h6TDZtWmJSV3hOTE0wSlpKbXg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wZjY1ZmUtMjYyZi00NzRkLThjYjYt
OGNjYjY3NGEzODc1LzEvTUlWWmFtM2h6TDZtWmJSV3hOTE0wSlpKbXg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8wZjY1ZmUtMjYyZi00NzRkLThjYjYtOGNjYjY3NGEzODc1
LzEvTUlWWmFtM2h6TDZtWmJSV3hOTE0wSlpKbXg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECdyx4Ba
lZ3IAT/0u7ZL+8aMvBUQBMtQYhnWxXpOWfSjvzey76j2dueQmt90Q/7NHo3eyCfy
ha/S5PJmoH15yckX9s5JcmOqAOm4q5NcsDf7MSmqBfhK9bmuKFM3JTMRs5Gg1iP0
35tKx/BfTylLuD/O1uY788nnlNWAz8WfNULv6kTQW0R7mCQUjEBHhrTMUyGAR9E4
wZD2bpTBEyno+QQHl5gLBZFvn65hfO8Yd6as9nZl/AVON3OS7X+5Pp5fgOos6ZDG
OSokpX0zfuoiaCP5gjuAuEVrhaf9VD26gaAk7Pv3kslag36gu+t7OcZAg214OXMD
SSagu1ybsjFIHA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:24 2025 by rpki-client