Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
File:                     5jEQtJQcMhHihW_w6K39FXgqyXM.mft (raw, json)
Hash identifier:          V8xIpMRFw3V46APTdznI8p0Iv7dq8CWY3lCovaeuung=
Subject key identifier:   DD:96:B7:39:AE:EE:37:8F:CC:5B:7F:11:AB:07:16:14:0B:31:C4:2A
Authority key identifier: E6:31:10:B4:94:1C:32:11:E2:85:6F:F0:E8:AD:FD:15:78:2A:C9:73
Certificate issuer:       /CN=e63110b4941c3211e2856ff0e8adfd15782ac973
Certificate serial:       01969115884E619C88D29D8856D0A17CBFA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
Manifest number:          0C7D
Signing time:             Fri 02 May 2025 13:00:29 +0000
Manifest this update:     Fri 02 May 2025 13:00:29 +0000
Manifest next update:     Sat 03 May 2025 13:00:29 +0000
Files and hashes:         1: 5jEQtJQcMhHihW_w6K39FXgqyXM.crl (hash: u0txRGI4/4zsTmky/xVETMA/SJjRwvd1rAqwACmfc8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:91:15:88:4e:61:9c:88:d2:9d:88:56:d0:a1:7c:bf:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e63110b4941c3211e2856ff0e8adfd15782ac973
        Validity
            Not Before: May  2 13:00:29 2025 GMT
            Not After : May  3 13:00:29 2025 GMT
        Subject: CN=dd96b739aeee378fcc5b7f11ab0716140b31c42a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:83:f0:2b:2b:b1:33:10:26:0d:58:81:a1:93:
                    6b:b9:48:22:46:af:55:ef:3c:13:6b:07:d7:bd:9d:
                    06:26:d6:f7:fb:7d:f3:e8:a2:d4:c1:c2:93:19:2f:
                    84:5a:9a:5f:37:32:be:25:c0:b8:c4:fc:93:8d:37:
                    99:a3:af:c0:49:ed:80:a6:bd:21:c5:d6:20:89:99:
                    a0:76:62:e7:53:0d:52:32:ca:b2:49:df:f0:0e:16:
                    e4:aa:07:94:6d:2a:88:cc:42:30:99:f9:4b:f3:93:
                    d9:63:71:3c:49:7e:36:27:95:d6:a4:fa:7f:8e:db:
                    aa:f6:e0:c2:c5:ab:f4:6b:78:cc:53:e8:d1:db:95:
                    02:12:57:73:85:73:3f:d2:cb:ae:6c:fa:2b:a5:91:
                    28:4d:7c:3a:57:03:1c:20:d3:df:8d:77:41:17:5e:
                    ec:6d:9d:24:cd:8e:fa:97:17:35:fa:a3:c1:93:07:
                    a4:42:2a:16:ff:bd:40:c1:b4:3d:6a:60:1a:58:36:
                    2d:3f:b1:d5:f1:42:50:e3:c0:25:66:ff:b8:19:20:
                    ca:7b:5a:f4:f8:56:e9:1e:3c:ed:6e:fa:4a:ee:a3:
                    24:48:7d:b0:80:89:95:10:90:09:fc:24:fa:d9:e2:
                    b2:c0:f3:ae:8c:73:70:76:0a:9c:7a:ca:7d:ed:07:
                    ef:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:96:B7:39:AE:EE:37:8F:CC:5B:7F:11:AB:07:16:14:0B:31:C4:2A
            X509v3 Authority Key Identifier:
                keyid:E6:31:10:B4:94:1C:32:11:E2:85:6F:F0:E8:AD:FD:15:78:2A:C9:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:25:10:90:ca:d0:ee:de:a3:a6:9d:d1:d8:6b:f2:13:b3:72:
         b9:9d:44:a8:fa:d1:31:bb:2d:b0:82:da:9a:94:53:cb:f4:47:
         35:93:8f:15:5d:6f:e3:99:5d:1c:4f:2c:e2:1d:9b:e0:43:a8:
         78:24:44:fe:ba:ad:3b:64:6a:b3:e0:47:34:0a:ce:29:68:c6:
         29:6b:79:5e:44:54:06:6c:33:1e:09:b9:2b:31:bf:7b:29:20:
         b8:e5:4b:69:13:ac:32:0d:f4:39:15:38:76:30:d0:08:ae:0e:
         17:29:9e:1e:19:54:5d:a9:f6:ae:d3:12:2c:e6:4c:57:cc:b5:
         a7:02:84:6e:3b:e6:57:92:8d:86:bf:46:7b:3f:9c:c0:0e:8b:
         48:11:c8:46:db:21:6a:8c:3a:4c:eb:2d:b3:1b:c1:93:eb:e1:
         fc:54:41:fe:1f:da:3a:bb:c1:6d:32:f2:70:d7:33:c0:9d:f4:
         32:c6:1f:35:9e:44:3f:43:92:54:70:ba:2f:be:f7:8d:16:b1:
         1e:a9:fd:3b:0e:b5:b6:ec:4f:da:c3:50:4f:07:ac:df:36:a5:
         41:b7:98:88:5a:83:82:61:91:24:32:75:76:48:48:6e:ca:af:
         01:90:09:61:66:0c:b2:3b:f4:b6:cf:5b:83:5c:bc:36:d3:7a:
         f7:24:a0:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaRFYhOYZyI0p2IVtChfL+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MzExMGI0OTQxYzMyMTFlMjg1NmZmMGU4YWRmZDE1Nzgy
YWM5NzMwHhcNMjUwNTAyMTMwMDI5WhcNMjUwNTAzMTMwMDI5WjAzMTEwLwYDVQQD
EyhkZDk2YjczOWFlZWUzNzhmY2M1YjdmMTFhYjA3MTYxNDBiMzFjNDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoPwKyuxMxAmDViBoZNruUgiRq9V
7zwTawfXvZ0GJtb3+33z6KLUwcKTGS+EWppfNzK+JcC4xPyTjTeZo6/ASe2Apr0h
xdYgiZmgdmLnUw1SMsqySd/wDhbkqgeUbSqIzEIwmflL85PZY3E8SX42J5XWpPp/
jtuq9uDCxav0a3jMU+jR25UCEldzhXM/0suubPorpZEoTXw6VwMcINPfjXdBF17s
bZ0kzY76lxc1+qPBkwekQioW/71AwbQ9amAaWDYtP7HV8UJQ48AlZv+4GSDKe1r0
+FbpHjztbvpK7qMkSH2wgImVEJAJ/CT62eKywPOujHNwdgqcesp97QfvKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2Wtzmu7jePzFt/EasHFhQLMcQqMB8GA1UdIwQY
MBaAFOYxELSUHDIR4oVv8Oit/RV4KslzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWpFUXRKUWNNaEhpaFdfdzZLMzlGWGdxeVhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8yNDNmYjAtZjM5MS00Yzk2LWIwM2Et
OTE1ZTYxNDMzYjNiLzEvNWpFUXRKUWNNaEhpaFdfdzZLMzlGWGdxeVhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8yNDNmYjAtZjM5MS00Yzk2LWIwM2EtOTE1ZTYxNDMzYjNi
LzEvNWpFUXRKUWNNaEhpaFdfdzZLMzlGWGdxeVhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwSUQkMrQ
7t6jpp3R2GvyE7NyuZ1EqPrRMbstsILampRTy/RHNZOPFV1v45ldHE8s4h2b4EOo
eCRE/rqtO2Rqs+BHNArOKWjGKWt5XkRUBmwzHgm5KzG/eykguOVLaROsMg30ORU4
djDQCK4OFymeHhlUXan2rtMSLOZMV8y1pwKEbjvmV5KNhr9Gez+cwA6LSBHIRtsh
aow6TOstsxvBk+vh/FRB/h/aOrvBbTLycNczwJ30MsYfNZ5EP0OSVHC6L773jRax
Hqn9Ow61tuxP2sNQTwes3zalQbeYiFqDgmGRJDJ1dkhIbsqvAZAJYWYMsjv0ts9b
g1y8NtN69ySgUw==
-----END CERTIFICATE-----
Generated at Fri May 2 22:42:31 2025 by rpki-client