Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.mft
File:                     TitWhe45Z_zPVK8VDpg_D4AlWpI.mft (raw, json)
Hash identifier:          1/5C53YzT5c6KERZH3JsjqWrJ7UXU9nmgyYYgoUa8zY=
Subject key identifier:   ED:CC:35:7B:C2:BE:F9:EB:BA:B7:00:84:E1:46:8E:55:0B:5F:27:1A
Authority key identifier: 4E:2B:56:85:EE:39:67:FC:CF:54:AF:15:0E:98:3F:0F:80:25:5A:92
Certificate issuer:       /CN=4e2b5685ee3967fccf54af150e983f0f80255a92
Certificate serial:       019677FB18F8BA956F4741B8D898A2DD896D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TitWhe45Z_zPVK8VDpg_D4AlWpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.mft
Manifest number:          0904
Signing time:             Sun 27 Apr 2025 16:01:06 +0000
Manifest this update:     Sun 27 Apr 2025 16:01:06 +0000
Manifest next update:     Mon 28 Apr 2025 16:01:06 +0000
Files and hashes:         1: TitWhe45Z_zPVK8VDpg_D4AlWpI.crl (hash: rDEj2wYRG5FLsD8jjr7hoL65ECp1co4KVIxU77dA+W8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TitWhe45Z_zPVK8VDpg_D4AlWpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:fb:18:f8:ba:95:6f:47:41:b8:d8:98:a2:dd:89:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2b5685ee3967fccf54af150e983f0f80255a92
        Validity
            Not Before: Apr 27 16:01:06 2025 GMT
            Not After : Apr 28 16:01:06 2025 GMT
        Subject: CN=edcc357bc2bef9ebbab70084e1468e550b5f271a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ad:ed:90:33:0a:4b:29:46:66:7c:7e:30:f2:
                    8e:4b:97:7f:39:f0:c5:3d:4d:09:28:22:ca:dc:3c:
                    ba:3c:3d:69:3c:71:1d:f2:68:d4:35:49:7c:81:af:
                    7b:6f:64:dd:75:b0:44:ae:fb:88:33:f9:d9:5b:af:
                    f7:0f:44:16:8d:27:ef:9b:d9:b3:fb:18:12:85:51:
                    61:ad:29:fe:3c:d2:57:5a:49:80:74:d3:d6:66:ec:
                    ce:57:e0:3c:22:1d:34:bb:b1:53:31:44:ae:64:f9:
                    98:d8:a4:30:8e:2f:08:9e:25:18:8c:18:27:26:fa:
                    ae:df:db:2e:3e:9d:c7:0e:83:bd:49:62:06:38:dc:
                    dd:6b:fd:21:c1:bc:68:27:33:e7:2e:63:80:12:58:
                    1a:a7:18:46:c4:c4:22:5c:b6:fc:d1:48:bd:11:ef:
                    b9:d5:79:34:83:97:1a:1f:c8:3a:cc:14:d0:d2:56:
                    28:e9:22:49:ce:78:80:d9:5b:f5:60:8a:79:d7:27:
                    da:0a:85:97:0b:2f:59:df:94:e8:25:1c:60:db:5a:
                    53:90:0b:e2:36:95:6c:78:a2:12:95:7b:91:3f:57:
                    81:bc:1b:23:01:ff:90:01:74:d4:71:f9:e4:0c:13:
                    2f:98:28:34:94:7f:ed:7d:e6:11:ca:40:4f:75:db:
                    7b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CC:35:7B:C2:BE:F9:EB:BA:B7:00:84:E1:46:8E:55:0B:5F:27:1A
            X509v3 Authority Key Identifier:
                keyid:4E:2B:56:85:EE:39:67:FC:CF:54:AF:15:0E:98:3F:0F:80:25:5A:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TitWhe45Z_zPVK8VDpg_D4AlWpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:49:5d:1a:9d:fa:81:91:3a:82:bd:98:3a:1d:1f:e8:8f:0f:
         b4:f9:16:82:5b:fe:5a:06:b8:6a:29:12:4d:ef:86:28:f9:08:
         68:43:eb:15:9c:8f:26:89:d8:6d:03:82:19:8a:20:6d:8a:d0:
         83:62:56:d2:e9:3e:66:e3:86:f4:c9:9d:3b:89:e0:b7:55:45:
         a6:ad:42:a7:cc:c5:63:26:6d:7a:fa:c7:ac:4e:f3:e6:0e:ca:
         2b:6e:c2:d4:24:d4:d7:fd:01:ce:c1:5a:aa:22:64:44:42:7c:
         7e:21:5b:3a:f3:c7:ca:2a:ab:fa:02:59:43:33:1f:86:f0:9a:
         2a:5b:67:d6:80:95:36:3a:fa:2b:8c:87:42:b0:9c:73:76:5f:
         10:7b:09:78:1f:05:41:45:c6:0c:bb:75:bf:ef:48:f0:40:78:
         cd:0a:40:8e:87:6a:76:92:4d:ed:04:f5:5b:68:db:0e:07:0e:
         f3:ce:ca:bf:d9:4c:5c:7e:d8:e9:6e:52:43:54:d8:ab:a5:bf:
         9f:5b:87:bd:f0:a5:e8:a5:68:be:fe:27:4a:22:86:9f:8b:e4:
         1f:0e:25:1f:12:fa:f7:fb:2a:af:37:ea:11:21:8b:51:63:34:
         77:53:e9:d9:e0:ad:a8:19:ce:e1:73:b3:5b:74:11:0d:c4:0a:
         80:8c:d4:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+xj4upVvR0G42Jii3YltMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMmI1Njg1ZWUzOTY3ZmNjZjU0YWYxNTBlOTgzZjBmODAy
NTVhOTIwHhcNMjUwNDI3MTYwMTA2WhcNMjUwNDI4MTYwMTA2WjAzMTEwLwYDVQQD
EyhlZGNjMzU3YmMyYmVmOWViYmFiNzAwODRlMTQ2OGU1NTBiNWYyNzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK3tkDMKSylGZnx+MPKOS5d/OfDF
PU0JKCLK3Dy6PD1pPHEd8mjUNUl8ga97b2TddbBErvuIM/nZW6/3D0QWjSfvm9mz
+xgShVFhrSn+PNJXWkmAdNPWZuzOV+A8Ih00u7FTMUSuZPmY2KQwji8IniUYjBgn
Jvqu39suPp3HDoO9SWIGONzda/0hwbxoJzPnLmOAElgapxhGxMQiXLb80Ui9Ee+5
1Xk0g5caH8g6zBTQ0lYo6SJJzniA2Vv1YIp51yfaCoWXCy9Z35ToJRxg21pTkAvi
NpVseKISlXuRP1eBvBsjAf+QAXTUcfnkDBMvmCg0lH/tfeYRykBPddt7AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3MNXvCvvnrurcAhOFGjlULXycaMB8GA1UdIwQY
MBaAFE4rVoXuOWf8z1SvFQ6YPw+AJVqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGl0V2hlNDVaX3pQVks4VkRwZ19ENEFsV3BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85MjA2MmUtZmQ3ZC00MjA0LWI1NmUt
NmEwY2U1MmM3YWJkLzEvVGl0V2hlNDVaX3pQVks4VkRwZ19ENEFsV3BJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi85MjA2MmUtZmQ3ZC00MjA0LWI1NmUtNmEwY2U1MmM3YWJk
LzEvVGl0V2hlNDVaX3pQVks4VkRwZ19ENEFsV3BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZUldGp36
gZE6gr2YOh0f6I8PtPkWglv+Wga4aikSTe+GKPkIaEPrFZyPJonYbQOCGYogbYrQ
g2JW0uk+ZuOG9MmdO4ngt1VFpq1Cp8zFYyZtevrHrE7z5g7KK27C1CTU1/0BzsFa
qiJkREJ8fiFbOvPHyiqr+gJZQzMfhvCaKltn1oCVNjr6K4yHQrCcc3ZfEHsJeB8F
QUXGDLt1v+9I8EB4zQpAjodqdpJN7QT1W2jbDgcO887Kv9lMXH7Y6W5SQ1TYq6W/
n1uHvfCl6KVovv4nSiKGn4vkHw4lHxL69/sqrzfqESGLUWM0d1Pp2eCtqBnO4XOz
W3QRDcQKgIzU0A==
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:56:59 2025 by rpki-client