Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
File:                     UEReUkREIxk_SV-8xFd05Mjke9s.mft (raw, json)
Hash identifier:          2YaMJsxa41SpV8N0G4twOBlFropO+57cGlwTNjm9fls=
Subject key identifier:   D5:CD:DF:9E:59:42:97:03:60:DA:69:3D:C7:31:20:12:06:E8:0C:9A
Authority key identifier: 50:44:5E:52:44:44:23:19:3F:49:5F:BC:C4:57:74:E4:C8:E4:7B:DB
Certificate issuer:       /CN=50445e52444423193f495fbcc45774e4c8e47bdb
Certificate serial:       01964BFDC3D14A67D09B34D0B2F8B21082F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
Manifest number:          0C8A
Signing time:             Sat 19 Apr 2025 03:00:43 +0000
Manifest this update:     Sat 19 Apr 2025 03:00:43 +0000
Manifest next update:     Sun 20 Apr 2025 03:00:43 +0000
Files and hashes:         1: UEReUkREIxk_SV-8xFd05Mjke9s.crl (hash: XPgs6Xjy42byTs9Z7T8x+MHZpP8VOoeJOAlt8wF0ADo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 03:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:fd:c3:d1:4a:67:d0:9b:34:d0:b2:f8:b2:10:82:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50445e52444423193f495fbcc45774e4c8e47bdb
        Validity
            Not Before: Apr 19 03:00:43 2025 GMT
            Not After : Apr 20 03:00:43 2025 GMT
        Subject: CN=d5cddf9e5942970360da693dc731201206e80c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:74:bf:8c:fa:94:98:53:a4:2b:ff:c0:eb:95:
                    72:6c:5e:5b:60:9b:f4:7f:11:e5:39:26:da:33:97:
                    a3:8a:dd:2a:d1:ef:29:86:31:f9:99:c2:0f:d3:00:
                    9b:1c:bd:b5:02:9e:27:15:df:17:17:1b:73:08:68:
                    89:8e:d6:ad:c9:8a:47:f7:4c:8a:17:a0:ba:ff:7e:
                    52:cd:0d:33:0c:41:3d:83:12:a3:15:a8:30:08:bf:
                    36:96:db:94:c5:bf:de:aa:8a:a5:49:5a:7b:b7:7b:
                    db:07:0d:c4:2b:44:b4:14:8e:d1:4e:26:0e:98:78:
                    f5:04:e1:76:5a:66:8e:ac:de:95:02:c5:c2:df:ef:
                    e8:40:76:fc:31:71:97:7e:81:e4:77:3e:b7:a0:63:
                    ce:a1:88:a3:ec:25:e1:9c:43:80:56:7a:85:68:88:
                    3f:12:a5:7f:a9:dc:d7:dc:a2:16:79:d8:7a:5b:25:
                    09:17:83:e6:19:20:17:9a:0b:67:e9:1d:78:8e:4e:
                    3e:dc:53:79:c3:0d:4b:f7:84:58:3f:7b:09:4e:7f:
                    05:c1:b2:d6:b0:ca:6f:6e:e2:54:dd:f0:01:d1:14:
                    fc:75:fe:51:86:9a:ba:28:af:2c:ac:97:f4:a0:a7:
                    5d:c3:4d:05:2b:73:2a:ac:00:14:7b:ca:68:5a:30:
                    de:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CD:DF:9E:59:42:97:03:60:DA:69:3D:C7:31:20:12:06:E8:0C:9A
            X509v3 Authority Key Identifier:
                keyid:50:44:5E:52:44:44:23:19:3F:49:5F:BC:C4:57:74:E4:C8:E4:7B:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:66:c6:65:d7:a5:b1:8a:fd:6c:8e:dd:5a:ae:5e:8e:f1:1c:
         ab:15:61:29:c9:9c:92:be:01:05:d4:b2:c9:33:d9:4b:ee:80:
         3f:89:5c:81:a8:62:21:1b:41:e0:04:25:60:2c:26:ba:17:c5:
         95:fe:41:4c:7e:75:8a:0d:c4:7d:24:80:9d:d8:ae:ec:74:60:
         d4:9a:b0:16:6b:e7:43:59:28:e8:7b:15:e9:05:e2:a2:48:77:
         30:4a:5a:1c:50:4a:c3:fd:25:f8:6b:f3:4b:29:db:ad:9a:82:
         8a:3a:36:7b:3d:ca:36:32:2e:9b:1a:0f:b9:28:85:9a:8a:e7:
         04:3b:5a:1f:57:ef:4b:ee:f8:d5:b7:25:ff:2d:fe:ce:38:fd:
         e5:d8:ac:b5:9e:bd:45:c7:76:39:99:a0:02:6d:5c:df:1b:b4:
         8a:84:a9:b0:90:68:ec:de:0a:a1:14:ee:70:5d:39:20:dd:2a:
         af:ef:3d:89:8e:26:30:6c:17:8f:a6:09:31:e2:d4:7d:a5:62:
         b4:07:4f:9d:4f:92:37:39:06:79:58:aa:ba:b9:e4:0d:23:91:
         6f:7c:8e:34:a7:8f:c1:b3:05:73:dd:d9:98:8a:00:b4:81:99:
         c3:fc:32:6d:b5:08:f3:a1:02:a7:da:cd:ac:f3:e2:38:60:0c:
         35:d6:9f:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZL/cPRSmfQmzTQsviyEIL3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNDQ1ZTUyNDQ0NDIzMTkzZjQ5NWZiY2M0NTc3NGU0Yzhl
NDdiZGIwHhcNMjUwNDE5MDMwMDQzWhcNMjUwNDIwMDMwMDQzWjAzMTEwLwYDVQQD
EyhkNWNkZGY5ZTU5NDI5NzAzNjBkYTY5M2RjNzMxMjAxMjA2ZTgwYzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nS/jPqUmFOkK//A65VybF5bYJv0
fxHlOSbaM5ejit0q0e8phjH5mcIP0wCbHL21Ap4nFd8XFxtzCGiJjtatyYpH90yK
F6C6/35SzQ0zDEE9gxKjFagwCL82ltuUxb/eqoqlSVp7t3vbBw3EK0S0FI7RTiYO
mHj1BOF2WmaOrN6VAsXC3+/oQHb8MXGXfoHkdz63oGPOoYij7CXhnEOAVnqFaIg/
EqV/qdzX3KIWedh6WyUJF4PmGSAXmgtn6R14jk4+3FN5ww1L94RYP3sJTn8FwbLW
sMpvbuJU3fAB0RT8df5Rhpq6KK8srJf0oKddw00FK3MqrAAUe8poWjDetwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXN355ZQpcDYNppPccxIBIG6AyaMB8GA1UdIwQY
MBaAFFBEXlJERCMZP0lfvMRXdOTI5HvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUVSZVVrUkVJeGtfU1YtOHhGZDA1TWprZTlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83ZDAzMDQtNWY0OS00YTQxLWI4ZjEt
ZjgzOTljMDhlMzliLzEvVUVSZVVrUkVJeGtfU1YtOHhGZDA1TWprZTlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS83ZDAzMDQtNWY0OS00YTQxLWI4ZjEtZjgzOTljMDhlMzli
LzEvVUVSZVVrUkVJeGtfU1YtOHhGZDA1TWprZTlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqWbGZdel
sYr9bI7dWq5ejvEcqxVhKcmckr4BBdSyyTPZS+6AP4lcgahiIRtB4AQlYCwmuhfF
lf5BTH51ig3EfSSAndiu7HRg1JqwFmvnQ1ko6HsV6QXiokh3MEpaHFBKw/0l+Gvz
SynbrZqCijo2ez3KNjIumxoPuSiFmornBDtaH1fvS+741bcl/y3+zjj95distZ69
Rcd2OZmgAm1c3xu0ioSpsJBo7N4KoRTucF05IN0qr+89iY4mMGwXj6YJMeLUfaVi
tAdPnU+SNzkGeViqurnkDSORb3yONKePwbMFc93ZmIoAtIGZw/wybbUI86ECp9rN
rPPiOGAMNdafjQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:42:21 2025 by rpki-client