Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
File:                     Pc9PDCdz75iQD5w1kHXMph0XwLM.mft (raw, json)
Hash identifier:          34Ru1SbAfgu3u72KvTvPJzsmdfpxVBT9UDudEKfzMeA=
Subject key identifier:   9B:8D:1C:5C:A8:A5:DE:B9:4A:48:45:F8:3E:2D:A6:4B:1B:21:E4:CF
Authority key identifier: 3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3
Certificate issuer:       /CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3
Certificate serial:       019676E7AF7091E85F3CE9A9028EFF5378EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
Manifest number:          150B
Signing time:             Sun 27 Apr 2025 11:00:17 +0000
Manifest this update:     Sun 27 Apr 2025 11:00:17 +0000
Manifest next update:     Mon 28 Apr 2025 11:00:17 +0000
Files and hashes:         1: Pc9PDCdz75iQD5w1kHXMph0XwLM.crl (hash: FhN/H2lmSKTfPY+lrtqZpc3t6jvYHw8syhdvMKhuYWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:e7:af:70:91:e8:5f:3c:e9:a9:02:8e:ff:53:78:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3
        Validity
            Not Before: Apr 27 11:00:17 2025 GMT
            Not After : Apr 28 11:00:17 2025 GMT
        Subject: CN=9b8d1c5ca8a5deb94a4845f83e2da64b1b21e4cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:80:eb:cf:8e:f9:7a:b6:24:d0:16:54:38:8d:
                    75:ab:ff:5b:66:cb:d5:44:6a:72:6e:fd:b5:19:9c:
                    a0:a4:c0:ae:e5:15:41:b8:a7:89:e3:30:2d:bb:d6:
                    a7:8f:cf:4d:20:df:bd:cc:2e:b8:9b:5b:81:ff:f2:
                    db:05:32:e4:90:cb:13:20:09:6b:63:be:83:a7:89:
                    d7:29:68:ab:91:2f:08:87:f1:2a:04:0a:8b:c0:e5:
                    8a:92:50:a6:89:1a:41:62:3c:0a:99:9b:1e:02:6c:
                    32:f8:e8:39:ea:bc:6f:1b:6a:32:de:e3:6a:97:0f:
                    c8:16:35:77:78:ce:aa:3c:71:90:eb:ab:f8:ed:32:
                    6c:73:4a:a2:89:53:21:f7:74:58:56:1c:fe:1c:17:
                    a3:29:42:01:38:7b:d5:9d:93:e5:3d:3d:88:1d:45:
                    d6:1d:9e:b2:24:9c:6c:f8:b3:d3:d8:13:e2:dc:bc:
                    5e:c3:32:be:41:05:61:60:f7:9a:4e:a8:04:ea:c4:
                    3a:a9:ba:f1:9e:19:78:1b:dd:8c:60:d9:3d:57:34:
                    7c:ea:8f:d3:8d:40:41:95:93:72:1d:53:46:cd:fa:
                    b7:0c:d3:5d:40:de:9b:60:1c:6c:cf:c8:72:1c:1b:
                    99:27:b0:45:ac:02:95:7c:00:55:5e:7a:fb:d0:5d:
                    7f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8D:1C:5C:A8:A5:DE:B9:4A:48:45:F8:3E:2D:A6:4B:1B:21:E4:CF
            X509v3 Authority Key Identifier:
                keyid:3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:29:8e:96:e2:8a:15:ad:78:a8:82:a4:f9:04:11:54:96:b2:
         f3:14:69:ee:4f:6c:b1:4d:bc:b8:ed:b7:d2:0e:4d:60:d6:a6:
         2d:97:eb:ab:e8:90:f2:97:ef:a8:82:f1:5c:0d:68:9d:23:8b:
         18:10:9e:5a:c9:ab:5a:f9:4b:1d:52:4c:a5:99:ec:8b:1a:1c:
         b5:9c:f1:1d:fb:87:63:38:c6:8c:ea:f3:c0:cc:5b:cf:bf:80:
         bd:8b:48:bb:15:0b:c2:f8:d9:f5:cb:9f:a5:0b:6e:cd:c3:82:
         02:3c:0c:15:c2:8c:1c:ea:f2:b8:ed:7f:d5:7d:e6:d1:7c:77:
         75:ae:f3:23:1b:0c:a8:0e:6b:10:d3:9a:4f:18:e9:de:17:94:
         ca:b3:f9:00:e4:c1:97:ed:18:8a:54:c9:cc:48:96:16:ac:37:
         b3:00:e0:28:7b:45:57:7f:6e:b3:50:b9:69:f4:6a:bc:c0:6d:
         2d:0f:2e:ef:ce:c4:58:94:a2:91:08:fa:49:9d:8b:18:ed:66:
         d5:b2:5e:04:3a:af:06:ab:f4:5d:ca:e7:83:96:90:ee:27:a6:
         99:11:63:d3:a7:b5:36:04:23:29:ff:43:1d:00:26:47:4a:39:
         e5:a1:75:94:a0:48:b6:ef:21:3e:75:f1:e0:0e:16:ea:f9:73:
         fd:bf:7b:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2569wkehfPOmpAo7/U3jqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkY2Y0ZjBjMjc3M2VmOTg5MDBmOWMzNTkwNzVjY2E2MWQx
N2MwYjMwHhcNMjUwNDI3MTEwMDE3WhcNMjUwNDI4MTEwMDE3WjAzMTEwLwYDVQQD
Eyg5YjhkMWM1Y2E4YTVkZWI5NGE0ODQ1ZjgzZTJkYTY0YjFiMjFlNGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoDrz475erYk0BZUOI11q/9bZsvV
RGpybv21GZygpMCu5RVBuKeJ4zAtu9anj89NIN+9zC64m1uB//LbBTLkkMsTIAlr
Y76Dp4nXKWirkS8Ih/EqBAqLwOWKklCmiRpBYjwKmZseAmwy+Og56rxvG2oy3uNq
lw/IFjV3eM6qPHGQ66v47TJsc0qiiVMh93RYVhz+HBejKUIBOHvVnZPlPT2IHUXW
HZ6yJJxs+LPT2BPi3LxewzK+QQVhYPeaTqgE6sQ6qbrxnhl4G92MYNk9VzR86o/T
jUBBlZNyHVNGzfq3DNNdQN6bYBxsz8hyHBuZJ7BFrAKVfABVXnr70F1/9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJuNHFyopd65SkhF+D4tpksbIeTPMB8GA1UdIwQY
MBaAFD3PTwwnc++YkA+cNZB1zKYdF8CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGM5UERDZHo3NWlRRDV3MWtIWE1waDBYd0xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wOTgxNzItYzk4YS00OGZjLWFmYzYt
M2JkZTczOTZiN2I0LzEvUGM5UERDZHo3NWlRRDV3MWtIWE1waDBYd0xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8wOTgxNzItYzk4YS00OGZjLWFmYzYtM2JkZTczOTZiN2I0
LzEvUGM5UERDZHo3NWlRRDV3MWtIWE1waDBYd0xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmymOluKK
Fa14qIKk+QQRVJay8xRp7k9ssU28uO230g5NYNamLZfrq+iQ8pfvqILxXA1onSOL
GBCeWsmrWvlLHVJMpZnsixoctZzxHfuHYzjGjOrzwMxbz7+AvYtIuxULwvjZ9cuf
pQtuzcOCAjwMFcKMHOryuO1/1X3m0Xx3da7zIxsMqA5rENOaTxjp3heUyrP5AOTB
l+0YilTJzEiWFqw3swDgKHtFV39us1C5afRqvMBtLQ8u787EWJSikQj6SZ2LGO1m
1bJeBDqvBqv0Xcrng5aQ7iemmRFj06e1NgQjKf9DHQAmR0o55aF1lKBItu8hPnXx
4A4W6vlz/b977g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 14:41:37 2025 by rpki-client