Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
File:                     c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft (raw, json)
Hash identifier:          UDut4IIQMCfxtMe+wFs0XqWxcBLmognyPD9RyGeE6yg=
Subject key identifier:   35:98:02:DF:26:A4:76:B7:14:58:36:1B:1E:BA:78:09:24:4D:E5:D0
Authority key identifier: 73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C
Certificate issuer:       /CN=735655dc6779d095fcb08b61abeb86b0cd99a78c
Certificate serial:       01967AC50795750C0D993DB6BFF88E8CD5BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
Manifest number:          09C6
Signing time:             Mon 28 Apr 2025 05:00:54 +0000
Manifest this update:     Mon 28 Apr 2025 05:00:54 +0000
Manifest next update:     Tue 29 Apr 2025 05:00:54 +0000
Files and hashes:         1: c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl (hash: wp5nsMTOinIK1WagT3k2+CclNTaTm9Xc0YoxVyTGAiY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7a:c5:07:95:75:0c:0d:99:3d:b6:bf:f8:8e:8c:d5:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735655dc6779d095fcb08b61abeb86b0cd99a78c
        Validity
            Not Before: Apr 28 05:00:54 2025 GMT
            Not After : Apr 29 05:00:54 2025 GMT
        Subject: CN=359802df26a476b71458361b1eba7809244de5d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:be:5f:08:53:60:80:66:e3:91:5a:69:57:1b:
                    f9:5b:0d:99:bd:ec:a4:3f:3f:9b:03:b3:c5:e7:4e:
                    d6:3e:aa:5d:41:23:9f:1a:65:f3:bd:3b:75:3e:cf:
                    8a:d6:29:0b:9a:53:36:8b:8e:c6:06:e5:bc:81:36:
                    74:84:f6:87:9d:3d:75:c0:b9:e1:82:e3:86:e9:7b:
                    09:c3:29:e6:cc:00:93:a6:a4:c3:82:81:a3:39:a3:
                    f0:5a:8e:cd:97:8e:bc:a7:da:e5:9b:1a:7a:68:a7:
                    0b:a6:7f:d5:64:56:dc:ed:41:fe:b5:4f:73:89:c6:
                    03:e4:46:a1:6c:0e:1f:31:1c:94:a8:fb:00:b1:74:
                    6d:d2:03:e0:7d:4f:c6:31:c3:d6:fb:e5:11:df:32:
                    c2:c8:dc:86:27:01:67:db:0f:60:b3:14:b3:c9:7a:
                    48:6a:ec:58:f6:4c:df:92:d8:9a:0a:83:11:5f:74:
                    3f:82:fb:68:d5:3f:54:ee:50:31:57:ff:0b:1e:c0:
                    37:37:27:d6:2a:e5:45:da:5d:a1:f5:3b:56:80:37:
                    34:4b:7e:fc:7d:56:8d:9d:7d:11:53:d7:2f:48:0d:
                    8a:ec:87:da:db:51:de:ad:fd:24:84:e9:3e:7d:92:
                    71:50:a2:1f:88:75:b3:1a:17:71:55:bb:60:a2:26:
                    32:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:98:02:DF:26:A4:76:B7:14:58:36:1B:1E:BA:78:09:24:4D:E5:D0
            X509v3 Authority Key Identifier:
                keyid:73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:09:68:c8:74:d0:65:75:9d:b6:9d:66:ec:3c:e7:ee:44:fd:
         71:81:36:d2:a8:4c:a7:16:35:f9:e0:7a:e9:36:2e:fc:9a:90:
         bb:a8:67:d2:bf:26:30:ce:b9:ed:1d:25:29:01:d2:7a:9d:ee:
         dd:77:41:cf:81:96:a1:cf:30:55:27:77:5a:e4:40:6c:0b:b0:
         1e:9f:60:22:d9:c8:04:35:52:9f:60:d6:f6:1e:6f:6f:34:a3:
         f3:06:46:61:14:bc:fd:2f:a3:94:48:ff:0d:34:24:c8:95:eb:
         d1:05:78:a5:e0:d1:49:d1:f0:c5:b0:97:04:6d:dd:d1:f8:ca:
         e7:3b:0c:1b:ca:05:e9:b6:10:60:d9:09:c6:45:90:0b:d7:de:
         aa:58:bc:47:e0:2a:87:47:69:21:4b:f8:ba:75:e4:ca:77:70:
         c7:80:74:22:df:89:35:c9:1d:fd:f9:eb:1c:47:13:c0:58:ef:
         d9:78:0a:87:9d:a0:df:b0:e0:fe:e1:fa:83:f6:05:12:f4:a8:
         68:b4:85:d9:59:6a:c4:22:6b:22:84:e0:a8:af:d6:61:a8:fd:
         19:2b:e4:23:c1:02:18:cb:cc:83:1a:27:77:4e:98:56:70:cc:
         c7:87:dd:45:01:e7:ca:7f:4a:c8:31:a8:fd:4b:02:b4:3c:cf:
         93:72:3b:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6xQeVdQwNmT22v/iOjNW/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNTY1NWRjNjc3OWQwOTVmY2IwOGI2MWFiZWI4NmIwY2Q5
OWE3OGMwHhcNMjUwNDI4MDUwMDU0WhcNMjUwNDI5MDUwMDU0WjAzMTEwLwYDVQQD
EygzNTk4MDJkZjI2YTQ3NmI3MTQ1ODM2MWIxZWJhNzgwOTI0NGRlNWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+75fCFNggGbjkVppVxv5Ww2Zveyk
Pz+bA7PF507WPqpdQSOfGmXzvTt1Ps+K1ikLmlM2i47GBuW8gTZ0hPaHnT11wLnh
guOG6XsJwynmzACTpqTDgoGjOaPwWo7Nl468p9rlmxp6aKcLpn/VZFbc7UH+tU9z
icYD5EahbA4fMRyUqPsAsXRt0gPgfU/GMcPW++UR3zLCyNyGJwFn2w9gsxSzyXpI
auxY9kzfktiaCoMRX3Q/gvto1T9U7lAxV/8LHsA3NyfWKuVF2l2h9TtWgDc0S378
fVaNnX0RU9cvSA2K7Ifa21Herf0khOk+fZJxUKIfiHWzGhdxVbtgoiYyawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWYAt8mpHa3FFg2Gx66eAkkTeXQMB8GA1UdIwQY
MBaAFHNWVdxnedCV/LCLYavrhrDNmaeMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzFaVjNHZDUwSlg4c0l0aHEtdUdzTTJacDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jYzhhNTMtMDJkOS00YTFmLTkwN2Ut
M2I4NmEzZDAwZmU5LzEvYzFaVjNHZDUwSlg4c0l0aHEtdUdzTTJacDR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jYzhhNTMtMDJkOS00YTFmLTkwN2UtM2I4NmEzZDAwZmU5
LzEvYzFaVjNHZDUwSlg4c0l0aHEtdUdzTTJacDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAloyHTQ
ZXWdtp1m7Dzn7kT9cYE20qhMpxY1+eB66TYu/JqQu6hn0r8mMM657R0lKQHSep3u
3XdBz4GWoc8wVSd3WuRAbAuwHp9gItnIBDVSn2DW9h5vbzSj8wZGYRS8/S+jlEj/
DTQkyJXr0QV4peDRSdHwxbCXBG3d0fjK5zsMG8oF6bYQYNkJxkWQC9feqli8R+Aq
h0dpIUv4unXkyndwx4B0It+JNckd/fnrHEcTwFjv2XgKh52g37Dg/uH6g/YFEvSo
aLSF2VlqxCJrIoTgqK/WYaj9GSvkI8ECGMvMgxond06YVnDMx4fdRQHnyn9KyDGo
/UsCtDzPk3I7Rg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:17:01 2025 by rpki-client