Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
File:                     RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft (raw, json)
Hash identifier:          TivYjpYOWGwfkkOy9D4K+Lzt5eceyf+29Cd5bvnMMzk=
Subject key identifier:   FC:0D:81:50:0E:1A:AD:0A:A4:00:27:4D:99:3B:B1:F5:68:E3:59:07
Authority key identifier: 44:2C:8F:D6:C7:76:B7:85:66:BB:7C:30:4E:25:FB:7D:2A:29:32:C3
Certificate issuer:       /CN=442c8fd6c776b78566bb7c304e25fb7d2a2932c3
Certificate serial:       019655387E5E2341EDC3A808537143D36517
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RCyP1sd2t4Vmu3wwTiX7fSopMsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
Manifest number:          14FA
Signing time:             Sun 20 Apr 2025 22:01:27 +0000
Manifest this update:     Sun 20 Apr 2025 22:01:27 +0000
Manifest next update:     Mon 21 Apr 2025 22:01:27 +0000
Files and hashes:         1: RCyP1sd2t4Vmu3wwTiX7fSopMsM.crl (hash: 7OUin86Xeo0bq/FqrhXpl6SFc0OGTN2gT5hIQiOY/ds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RCyP1sd2t4Vmu3wwTiX7fSopMsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 22:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:38:7e:5e:23:41:ed:c3:a8:08:53:71:43:d3:65:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=442c8fd6c776b78566bb7c304e25fb7d2a2932c3
        Validity
            Not Before: Apr 20 22:01:27 2025 GMT
            Not After : Apr 21 22:01:27 2025 GMT
        Subject: CN=fc0d81500e1aad0aa400274d993bb1f568e35907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d1:97:a4:78:66:64:d6:b5:4a:f2:1b:f5:74:
                    94:58:54:4e:f4:fd:0d:20:d6:4e:51:cf:58:0e:74:
                    29:35:9e:a8:87:87:d6:75:98:24:52:28:65:c3:e6:
                    33:5b:3f:49:b2:bf:31:ac:f4:77:95:78:c2:d8:eb:
                    90:3a:31:19:3b:6a:0a:3f:bb:49:93:99:9e:6e:bf:
                    f4:90:25:f9:74:8e:3f:72:06:30:a5:24:a5:e2:2b:
                    5d:e2:e2:64:6d:7a:2c:b7:32:ea:32:f6:07:6f:d3:
                    45:8c:af:25:ae:38:16:b6:66:40:a8:9e:ce:55:39:
                    e6:9e:3e:d1:cb:d9:e5:e4:cd:07:26:42:ce:d2:62:
                    68:65:6d:c7:38:ec:8f:c0:62:36:df:e7:0c:a2:a2:
                    25:a8:4c:e8:6e:c7:00:0b:e8:c0:64:18:98:5b:23:
                    9e:56:47:78:54:fb:09:8a:6c:5e:bd:f5:7f:f2:9e:
                    b3:d4:ff:bc:40:7a:5f:c7:7b:f3:81:96:be:ca:25:
                    cb:9a:bf:bd:78:da:62:a1:83:9f:44:d7:1a:f7:81:
                    2b:a1:fb:23:f0:e8:84:ca:7a:66:66:5c:83:03:18:
                    0e:ba:1a:65:b1:21:ef:62:ca:9e:56:82:e9:24:ae:
                    fd:8e:0a:55:c3:4c:e8:c1:96:e3:84:51:85:a7:a4:
                    7f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0D:81:50:0E:1A:AD:0A:A4:00:27:4D:99:3B:B1:F5:68:E3:59:07
            X509v3 Authority Key Identifier:
                keyid:44:2C:8F:D6:C7:76:B7:85:66:BB:7C:30:4E:25:FB:7D:2A:29:32:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCyP1sd2t4Vmu3wwTiX7fSopMsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:9d:14:40:51:43:0e:c6:40:21:ba:e0:f6:0b:2d:e8:14:01:
         57:22:e7:8d:1d:d8:4f:20:4b:7a:90:66:67:ec:91:d0:c6:71:
         f6:c1:75:d6:b7:e8:6a:fb:c7:f3:6e:fa:14:18:d0:88:8d:bf:
         90:ed:89:33:af:96:d4:a2:75:ed:02:2c:78:71:63:d0:de:63:
         15:b9:0d:99:b4:b6:6a:e7:24:5f:6d:58:43:36:6d:09:ef:2f:
         bf:6e:93:e8:d4:d7:20:7d:5e:e1:a0:75:0a:4a:57:85:e9:b6:
         26:0a:3e:ef:ba:76:75:10:0b:33:41:e3:89:83:64:02:68:22:
         a2:99:56:42:7e:76:be:6e:15:d2:c1:3c:b2:ad:bb:55:39:c5:
         af:19:5d:08:71:d9:8d:46:da:6d:bc:56:6f:e1:1d:19:25:b8:
         e8:7f:a1:f8:76:98:1b:74:d7:4f:8a:b6:2a:05:53:57:ef:53:
         3f:7c:4a:35:4d:bd:21:e9:1b:a2:9b:5e:74:41:ec:99:8e:81:
         c3:d0:e7:34:8d:dd:c2:cb:5d:07:1f:7e:d9:77:ed:49:2f:1c:
         fd:ea:dd:d8:dd:7e:09:89:61:4a:7b:6a:c0:7c:b4:0e:2a:36:
         ef:df:56:a8:32:a1:28:08:ef:de:05:42:f8:76:46:4f:a2:72:
         a2:bb:7b:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVOH5eI0Htw6gIU3FD02UXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MmM4ZmQ2Yzc3NmI3ODU2NmJiN2MzMDRlMjVmYjdkMmEy
OTMyYzMwHhcNMjUwNDIwMjIwMTI3WhcNMjUwNDIxMjIwMTI3WjAzMTEwLwYDVQQD
EyhmYzBkODE1MDBlMWFhZDBhYTQwMDI3NGQ5OTNiYjFmNTY4ZTM1OTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNGXpHhmZNa1SvIb9XSUWFRO9P0N
INZOUc9YDnQpNZ6oh4fWdZgkUihlw+YzWz9Jsr8xrPR3lXjC2OuQOjEZO2oKP7tJ
k5mebr/0kCX5dI4/cgYwpSSl4itd4uJkbXostzLqMvYHb9NFjK8lrjgWtmZAqJ7O
VTnmnj7Ry9nl5M0HJkLO0mJoZW3HOOyPwGI23+cMoqIlqEzobscAC+jAZBiYWyOe
Vkd4VPsJimxevfV/8p6z1P+8QHpfx3vzgZa+yiXLmr+9eNpioYOfRNca94Erofsj
8OiEynpmZlyDAxgOuhplsSHvYsqeVoLpJK79jgpVw0zowZbjhFGFp6R/hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwNgVAOGq0KpAAnTZk7sfVo41kHMB8GA1UdIwQY
MBaAFEQsj9bHdreFZrt8ME4l+30qKTLDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkN5UDFzZDJ0NFZtdTN3d1RpWDdmU29wTXNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jOTMyMWMtYTBhMi00OWMxLWE5NzQt
ODA0ZDg5ZTJhMDAxLzEvUkN5UDFzZDJ0NFZtdTN3d1RpWDdmU29wTXNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jOTMyMWMtYTBhMi00OWMxLWE5NzQtODA0ZDg5ZTJhMDAx
LzEvUkN5UDFzZDJ0NFZtdTN3d1RpWDdmU29wTXNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfp0UQFFD
DsZAIbrg9gst6BQBVyLnjR3YTyBLepBmZ+yR0MZx9sF11rfoavvH8276FBjQiI2/
kO2JM6+W1KJ17QIseHFj0N5jFbkNmbS2auckX21YQzZtCe8vv26T6NTXIH1e4aB1
CkpXhem2Jgo+77p2dRALM0HjiYNkAmgioplWQn52vm4V0sE8sq27VTnFrxldCHHZ
jUbabbxWb+EdGSW46H+h+HaYG3TXT4q2KgVTV+9TP3xKNU29IekboptedEHsmY6B
w9DnNI3dwstdBx9+2XftSS8c/erd2N1+CYlhSntqwHy0Dio2799WqDKhKAjv3gVC
+HZGT6Jyort7gA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:28:05 2025 by rpki-client