Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
File:                     8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft (raw, json)
Hash identifier:          9PuH5pMFULoZ5Z5oREP7XE6On7uItDaJficKAKmoxGE=
Subject key identifier:   12:FC:4A:E1:2B:73:B1:67:9E:5E:2E:EA:C8:F7:A4:01:6B:87:3F:3C
Authority key identifier: F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
Certificate issuer:       /CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
Certificate serial:       01958F2A1DBCE8C9D678B663954D10A9776A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
Manifest number:          0B77
Signing time:             Thu 13 Mar 2025 11:00:56 +0000
Manifest this update:     Thu 13 Mar 2025 11:00:56 +0000
Manifest next update:     Fri 14 Mar 2025 11:00:56 +0000
Files and hashes:         1: 8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl (hash: eM65vr+rNbMw4ek2yPVXb1KOI845U+6UBeIpX/5DB64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8f:2a:1d:bc:e8:c9:d6:78:b6:63:95:4d:10:a9:77:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
        Validity
            Not Before: Mar 13 11:00:56 2025 GMT
            Not After : Mar 14 11:00:56 2025 GMT
        Subject: CN=12fc4ae12b73b1679e5e2eeac8f7a4016b873f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c0:72:b0:14:a3:03:9d:f1:b4:37:92:67:42:
                    a2:dc:e8:93:9f:86:d2:cc:b6:f0:e7:96:f9:e2:b9:
                    a1:11:7c:4b:3a:e3:6b:69:b3:4f:8f:81:1f:c0:56:
                    67:dc:ed:78:41:db:99:11:8e:90:06:78:21:a5:19:
                    d6:d4:5f:0b:81:81:66:17:ee:26:34:9e:19:01:a2:
                    52:25:41:b2:5b:d1:04:09:c3:20:e8:b5:b1:f2:5a:
                    8a:ca:89:b3:6c:cb:32:69:c8:c2:b7:15:b4:ad:53:
                    e4:39:02:e8:a1:33:8b:72:44:48:d5:ae:f9:ca:ab:
                    73:4b:c8:70:39:4e:dd:39:86:4c:52:67:b9:f5:42:
                    fe:a6:29:3c:21:0e:38:63:96:11:90:09:ea:48:4b:
                    23:b9:41:77:0c:06:90:5c:17:54:c8:14:28:69:d4:
                    f7:a5:05:cf:27:fd:7d:09:34:56:14:25:78:6b:2b:
                    7a:71:68:c6:81:47:c7:1e:7d:b6:7e:c6:b6:8e:20:
                    db:8b:7f:b6:40:d4:e9:b6:d7:8b:8d:ce:69:65:32:
                    2e:ef:ba:0d:53:02:76:a6:3c:14:6b:ec:4c:d7:78:
                    fa:c0:97:2b:be:11:e2:a0:14:e5:ea:1f:5f:a6:16:
                    83:19:9c:12:ba:71:c1:34:9f:57:ec:3b:ef:f9:c5:
                    9b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FC:4A:E1:2B:73:B1:67:9E:5E:2E:EA:C8:F7:A4:01:6B:87:3F:3C
            X509v3 Authority Key Identifier:
                keyid:F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:7b:9f:37:73:d9:74:ce:38:c7:1a:7c:a9:49:cd:3c:86:db:
         68:fa:45:95:cc:14:45:39:5d:d5:9e:dd:d4:74:0e:a1:d1:5e:
         0c:b2:45:35:1d:e4:c7:0e:ad:a1:07:ad:80:08:19:84:c0:b5:
         3d:dd:da:62:81:d2:c6:68:ff:a8:78:f9:a7:a3:ab:99:7d:b9:
         61:ef:d8:30:d6:84:85:d8:41:25:96:70:9e:1c:f7:32:ef:59:
         6b:53:f3:05:f9:5c:0b:92:0f:93:2a:60:24:27:a7:3a:15:b6:
         d5:87:4d:e0:14:68:b7:32:e4:6c:dd:02:ea:21:61:f0:36:b9:
         d1:42:0a:3e:6e:0a:79:7d:e9:ff:18:d3:ab:46:c2:f0:c2:91:
         2d:3d:f7:80:22:a6:2a:c9:7e:ff:e7:6b:ac:a3:9a:3a:c5:af:
         a8:b0:28:d0:ef:d7:2f:54:4a:18:cb:fc:74:2d:0c:64:ef:cc:
         2b:46:46:34:42:d6:a5:c6:c2:09:97:10:0b:d3:b8:8c:82:fe:
         56:74:53:09:0a:cf:4c:5b:78:77:d2:5f:9b:2e:a3:b0:46:38:
         ce:25:24:cc:02:9c:c5:6a:48:b0:6e:e9:be:b1:8c:46:7f:a2:
         71:76:cd:9f:68:95:d1:03:d0:5d:79:9d:3e:48:57:56:8a:c4:
         db:78:09:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWPKh286MnWeLZjlU0QqXdqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZTZmMTVlZjc1MjY0OWYzYjExODdkZTY4M2ZlODNiMWNl
NjlmMDMwHhcNMjUwMzEzMTEwMDU2WhcNMjUwMzE0MTEwMDU2WjAzMTEwLwYDVQQD
EygxMmZjNGFlMTJiNzNiMTY3OWU1ZTJlZWFjOGY3YTQwMTZiODczZjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8BysBSjA53xtDeSZ0Ki3OiTn4bS
zLbw55b54rmhEXxLOuNrabNPj4EfwFZn3O14QduZEY6QBnghpRnW1F8LgYFmF+4m
NJ4ZAaJSJUGyW9EECcMg6LWx8lqKyomzbMsyacjCtxW0rVPkOQLooTOLckRI1a75
yqtzS8hwOU7dOYZMUme59UL+pik8IQ44Y5YRkAnqSEsjuUF3DAaQXBdUyBQoadT3
pQXPJ/19CTRWFCV4ayt6cWjGgUfHHn22fsa2jiDbi3+2QNTptteLjc5pZTIu77oN
UwJ2pjwUa+xM13j6wJcrvhHioBTl6h9fphaDGZwSunHBNJ9X7Dvv+cWbrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBL8SuErc7Fnnl4u6sj3pAFrhz88MB8GA1UdIwQY
MBaAFPHm8V73UmSfOxGH3mg/6Dsc5p8DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGVieFh2ZFNaSjg3RVlmZWFEX29PeHptbndNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wNGE0MmEtZDQ1NC00YTZlLWJjYmQt
NzdlNmQzNjNiMTkyLzEvOGVieFh2ZFNaSjg3RVlmZWFEX29PeHptbndNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wNGE0MmEtZDQ1NC00YTZlLWJjYmQtNzdlNmQzNjNiMTky
LzEvOGVieFh2ZFNaSjg3RVlmZWFEX29PeHptbndNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3ufN3PZ
dM44xxp8qUnNPIbbaPpFlcwURTld1Z7d1HQOodFeDLJFNR3kxw6toQetgAgZhMC1
Pd3aYoHSxmj/qHj5p6OrmX25Ye/YMNaEhdhBJZZwnhz3Mu9Za1PzBflcC5IPkypg
JCenOhW21YdN4BRotzLkbN0C6iFh8Da50UIKPm4KeX3p/xjTq0bC8MKRLT33gCKm
Ksl+/+drrKOaOsWvqLAo0O/XL1RKGMv8dC0MZO/MK0ZGNELWpcbCCZcQC9O4jIL+
VnRTCQrPTFt4d9Jfmy6jsEY4ziUkzAKcxWpIsG7pvrGMRn+icXbNn2iV0QPQXXmd
PkhXVorE23gJKQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:24:25 2025 by rpki-client