Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft
File:                     d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft (raw, json)
Hash identifier:          TW9CxS6kwouTuA3AqU0JOgG3PbTQcqc80uUywGkzBV4=
Subject key identifier:   DC:7B:34:69:80:4B:80:9B:35:D9:2F:D7:93:12:3D:97:F0:71:0C:20
Authority key identifier: 77:DB:FB:3D:64:EB:10:C7:82:56:2A:37:85:5B:07:32:BD:18:EB:3F
Certificate issuer:       /CN=77dbfb3d64eb10c782562a37855b0732bd18eb3f
Certificate serial:       0196797B6E7A4CCAF445FCD0F9B5F3AC223D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft
Manifest number:          1512
Signing time:             Sun 27 Apr 2025 23:00:54 +0000
Manifest this update:     Sun 27 Apr 2025 23:00:54 +0000
Manifest next update:     Mon 28 Apr 2025 23:00:54 +0000
Files and hashes:         1: d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl (hash: 3XPHTCPkNxNRyLlliwgzlbHo9xcnq8dKtQxmMVO0GcQ=)
                          2: xYbOIUhhi8f6Ezx2QKpd4kQNixI.roa (hash: sEUW5djd1NzJ3pooD+mv2egmXyQ8A1sExKT4CHNq2Vo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:7b:6e:7a:4c:ca:f4:45:fc:d0:f9:b5:f3:ac:22:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77dbfb3d64eb10c782562a37855b0732bd18eb3f
        Validity
            Not Before: Apr 27 23:00:54 2025 GMT
            Not After : Apr 28 23:00:54 2025 GMT
        Subject: CN=dc7b3469804b809b35d92fd793123d97f0710c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:72:e6:50:e5:da:c9:1e:0e:61:b0:58:bd:49:
                    74:10:e1:24:92:e4:92:23:37:9b:96:29:b9:71:51:
                    bc:67:77:a2:e6:6b:35:07:6f:e2:1e:d9:27:ef:ca:
                    00:b9:37:19:41:77:b2:61:57:67:3a:25:c1:a6:18:
                    57:36:ec:b4:e8:94:79:cd:e3:f6:7d:1e:44:75:f8:
                    e1:00:bf:87:de:35:23:00:9c:fe:66:17:d2:2f:16:
                    dc:1f:ee:d5:aa:3c:6b:15:30:8d:06:aa:11:d1:b1:
                    d6:f6:f4:93:60:2a:88:26:d6:fe:9d:6f:95:f8:60:
                    24:82:09:08:a3:41:0b:19:bd:4d:96:02:f3:dc:3c:
                    06:0b:83:24:4c:2d:0e:f4:64:25:8f:2b:48:b9:d8:
                    53:53:be:a5:1f:69:c9:e2:70:39:36:26:9f:44:9f:
                    94:27:26:81:48:93:4b:6a:21:83:b5:cc:fe:4e:0c:
                    2c:9b:0e:02:48:84:27:57:cb:34:a1:55:40:c2:a4:
                    f7:9f:d5:48:ab:d7:ed:81:0d:3e:db:3d:5e:fc:12:
                    7d:49:bf:aa:78:ac:be:09:79:e7:df:51:a2:09:b2:
                    15:5e:c1:6f:06:b9:a5:09:11:a6:32:fd:91:d3:99:
                    40:c8:ed:b7:b7:cd:6b:da:b4:fa:cc:22:23:60:7e:
                    f0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7B:34:69:80:4B:80:9B:35:D9:2F:D7:93:12:3D:97:F0:71:0C:20
            X509v3 Authority Key Identifier:
                keyid:77:DB:FB:3D:64:EB:10:C7:82:56:2A:37:85:5B:07:32:BD:18:EB:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:fe:03:45:3c:98:7f:e7:18:e3:a6:60:8d:90:a9:ed:8e:1f:
         73:29:c2:5b:33:27:16:85:64:13:cb:c7:d2:1e:79:4f:b4:a9:
         3a:72:55:5c:ce:d1:18:79:55:44:2f:fe:52:ea:13:75:eb:a9:
         47:11:ed:a3:4a:2f:d5:70:66:3a:c2:a2:cc:5d:0f:a1:9c:a6:
         a3:20:57:94:e9:b3:aa:20:87:d4:a0:0e:d1:35:e5:35:ab:18:
         c8:12:49:01:4a:52:08:89:7f:84:13:f1:9b:80:86:88:9a:d3:
         97:6f:12:31:2e:7e:92:54:f5:5c:82:f8:12:8b:f1:52:42:f5:
         b3:56:02:1a:23:e8:36:74:90:6b:f5:2a:1b:fb:6c:2e:d1:13:
         1d:e1:62:6d:05:2e:9c:c5:91:06:fe:42:47:c4:b6:76:6f:c7:
         a5:7b:7c:87:cc:b4:f5:55:9b:6e:34:33:a5:f2:c2:e2:a3:c6:
         10:76:30:66:ef:50:1e:36:d7:a8:ef:56:e2:b9:8f:16:25:45:
         da:bb:76:cd:20:6b:bd:e0:46:15:2e:19:5c:e8:bc:65:1d:07:
         39:39:be:1b:83:53:aa:8a:57:06:28:db:f9:1c:05:df:14:08:
         2e:b1:10:18:a0:e0:ee:00:05:8d:4d:99:0b:d2:32:50:d0:1d:
         7e:ee:64:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5e256TMr0RfzQ+bXzrCI9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZGJmYjNkNjRlYjEwYzc4MjU2MmEzNzg1NWIwNzMyYmQx
OGViM2YwHhcNMjUwNDI3MjMwMDU0WhcNMjUwNDI4MjMwMDU0WjAzMTEwLwYDVQQD
EyhkYzdiMzQ2OTgwNGI4MDliMzVkOTJmZDc5MzEyM2Q5N2YwNzEwYzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HLmUOXayR4OYbBYvUl0EOEkkuSS
Izeblim5cVG8Z3ei5ms1B2/iHtkn78oAuTcZQXeyYVdnOiXBphhXNuy06JR5zeP2
fR5EdfjhAL+H3jUjAJz+ZhfSLxbcH+7VqjxrFTCNBqoR0bHW9vSTYCqIJtb+nW+V
+GAkggkIo0ELGb1NlgLz3DwGC4MkTC0O9GQljytIudhTU76lH2nJ4nA5NiafRJ+U
JyaBSJNLaiGDtcz+Tgwsmw4CSIQnV8s0oVVAwqT3n9VIq9ftgQ0+2z1e/BJ9Sb+q
eKy+CXnn31GiCbIVXsFvBrmlCRGmMv2R05lAyO23t81r2rT6zCIjYH7wtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNx7NGmAS4CbNdkv15MSPZfwcQwgMB8GA1UdIwQY
MBaAFHfb+z1k6xDHglYqN4VbBzK9GOs/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDl2N1BXVHJFTWVDVmlvM2hWc0hNcjBZNno4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZTZjNDgtNGJkZC00ZTYwLTkxMGEt
NTRiNDFlNGZjNjNiLzEvZDl2N1BXVHJFTWVDVmlvM2hWc0hNcjBZNno4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZTZjNDgtNGJkZC00ZTYwLTkxMGEtNTRiNDFlNGZjNjNi
LzEvZDl2N1BXVHJFTWVDVmlvM2hWc0hNcjBZNno4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/4DRTyY
f+cY46ZgjZCp7Y4fcynCWzMnFoVkE8vH0h55T7SpOnJVXM7RGHlVRC/+UuoTdeup
RxHto0ov1XBmOsKizF0PoZymoyBXlOmzqiCH1KAO0TXlNasYyBJJAUpSCIl/hBPx
m4CGiJrTl28SMS5+klT1XIL4EovxUkL1s1YCGiPoNnSQa/UqG/tsLtETHeFibQUu
nMWRBv5CR8S2dm/HpXt8h8y09VWbbjQzpfLC4qPGEHYwZu9QHjbXqO9W4rmPFiVF
2rt2zSBrveBGFS4ZXOi8ZR0HOTm+G4NTqopXBijb+RwF3xQILrEQGKDg7gAFjU2Z
C9IyUNAdfu5k/g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:27:16 2025 by rpki-client