Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
File:                     Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft (raw, json)
Hash identifier:          dyGHtgG7yFt3FWjCsJcCIUjTT9Bef6queIJ19aOsM54=
Subject key identifier:   91:17:EC:D2:78:A9:CB:9A:A5:0B:A7:CA:B5:F1:0F:76:18:6F:01:90
Authority key identifier: 46:F6:EE:BF:80:BD:64:DF:F5:AB:10:12:B9:0A:55:68:65:A8:48:DB
Certificate issuer:       /CN=46f6eebf80bd64dff5ab1012b90a556865a848db
Certificate serial:       01967642DA6DD9E2E58BA68EAFF2CA335BC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
Manifest number:          03B1
Signing time:             Sun 27 Apr 2025 08:00:14 +0000
Manifest this update:     Sun 27 Apr 2025 08:00:14 +0000
Manifest next update:     Mon 28 Apr 2025 08:00:14 +0000
Files and hashes:         1: Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl (hash: UoI+NYX+wPjxr8pucUo8LtH5hrC08Qjvz6JSTkbY6XM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:42:da:6d:d9:e2:e5:8b:a6:8e:af:f2:ca:33:5b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46f6eebf80bd64dff5ab1012b90a556865a848db
        Validity
            Not Before: Apr 27 08:00:14 2025 GMT
            Not After : Apr 28 08:00:14 2025 GMT
        Subject: CN=9117ecd278a9cb9aa50ba7cab5f10f76186f0190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a1:c3:3a:da:69:ea:4f:61:93:73:a1:50:d8:
                    f1:f4:c0:ef:8a:01:34:2d:e0:7e:bc:69:61:29:77:
                    43:be:d1:75:91:80:5f:14:82:a3:8a:bd:1e:bd:db:
                    4f:4d:71:98:54:75:55:59:b2:ca:14:e3:37:89:2c:
                    52:44:c5:0d:c1:50:82:bb:b4:6d:fb:e1:0b:55:ec:
                    55:36:b6:81:27:4d:04:42:f4:61:9f:51:d8:ca:33:
                    f8:c6:7b:bc:ee:4f:c0:25:35:6f:39:3b:68:00:03:
                    9f:bd:dc:49:f1:89:d7:8b:38:46:c3:98:27:13:ef:
                    c1:ed:7f:f4:72:c5:50:5e:00:ca:1b:6d:b0:07:77:
                    07:1c:9e:81:cb:46:7c:33:03:88:b8:5b:23:01:2d:
                    a4:43:03:bc:d2:48:37:b1:1a:1a:78:57:a1:a5:e6:
                    92:e3:d8:6b:03:0a:0b:f0:29:28:b4:bb:25:b0:bc:
                    19:d1:3f:1b:69:a4:9b:d3:f9:a7:ab:b4:2b:a7:7f:
                    4c:b7:c9:39:72:6c:f6:20:a1:39:3c:28:86:32:d3:
                    1e:cc:f0:61:f3:95:42:8c:63:99:ac:b2:e8:af:f3:
                    04:2e:34:1d:5d:3b:55:67:99:5b:8a:67:48:3b:d7:
                    0d:7c:49:36:22:26:95:ef:78:67:65:de:35:92:41:
                    ee:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:17:EC:D2:78:A9:CB:9A:A5:0B:A7:CA:B5:F1:0F:76:18:6F:01:90
            X509v3 Authority Key Identifier:
                keyid:46:F6:EE:BF:80:BD:64:DF:F5:AB:10:12:B9:0A:55:68:65:A8:48:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:c5:31:fd:ba:95:d1:51:6f:63:9e:39:58:85:e6:b9:86:51:
         5c:dc:01:33:65:0d:f0:33:60:e8:0a:17:36:94:1a:a0:0c:48:
         1c:f8:1d:a5:93:54:9a:1c:3f:f9:58:cd:80:a0:19:db:16:f1:
         e9:60:95:a7:33:55:f3:ca:84:5b:c3:d0:0d:89:c3:4e:ed:7c:
         7c:3f:57:0a:b3:4d:c2:16:fa:44:6d:71:88:95:f9:5a:b5:0f:
         79:f7:51:39:97:86:55:f4:49:9a:63:b1:65:35:e7:6d:22:41:
         11:2f:7f:e8:8c:31:f8:e0:84:16:54:88:90:cb:56:e7:1e:8a:
         ab:ad:c4:e0:0e:ea:b9:54:fb:8a:42:00:ef:38:29:63:23:8c:
         0d:5b:98:a8:8f:aa:67:e3:2d:49:4d:e8:20:2d:97:72:48:a5:
         6d:ae:03:47:e1:3e:2e:59:58:46:e2:7d:15:57:a1:09:3f:42:
         0f:36:aa:da:39:1b:fc:57:26:9c:66:b2:3e:2d:5c:37:cf:c8:
         48:42:ed:bd:31:6b:c7:b1:99:18:06:84:de:9f:dc:7e:35:24:
         16:13:55:56:15:88:90:bc:27:78:37:25:c1:40:77:fa:69:dd:
         76:ad:ca:ad:d3:2a:55:d0:2c:d0:05:51:0a:81:ca:41:60:c0:
         00:b0:af:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2Qtpt2eLli6aOr/LKM1vEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZjZlZWJmODBiZDY0ZGZmNWFiMTAxMmI5MGE1NTY4NjVh
ODQ4ZGIwHhcNMjUwNDI3MDgwMDE0WhcNMjUwNDI4MDgwMDE0WjAzMTEwLwYDVQQD
Eyg5MTE3ZWNkMjc4YTljYjlhYTUwYmE3Y2FiNWYxMGY3NjE4NmYwMTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06HDOtpp6k9hk3OhUNjx9MDvigE0
LeB+vGlhKXdDvtF1kYBfFIKjir0evdtPTXGYVHVVWbLKFOM3iSxSRMUNwVCCu7Rt
++ELVexVNraBJ00EQvRhn1HYyjP4xnu87k/AJTVvOTtoAAOfvdxJ8YnXizhGw5gn
E+/B7X/0csVQXgDKG22wB3cHHJ6By0Z8MwOIuFsjAS2kQwO80kg3sRoaeFehpeaS
49hrAwoL8CkotLslsLwZ0T8baaSb0/mnq7Qrp39Mt8k5cmz2IKE5PCiGMtMezPBh
85VCjGOZrLLor/MELjQdXTtVZ5lbimdIO9cNfEk2IiaV73hnZd41kkHuHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEX7NJ4qcuapQunyrXxD3YYbwGQMB8GA1UdIwQY
MBaAFEb27r+AvWTf9asQErkKVWhlqEjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnZidXY0QzlaTl8xcXhBU3VRcFZhR1dvU05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81NzhmYWEtMGEwMy00NmFjLWJiNWMt
OWJkYmI2MjZiNTk1LzEvUnZidXY0QzlaTl8xcXhBU3VRcFZhR1dvU05zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81NzhmYWEtMGEwMy00NmFjLWJiNWMtOWJkYmI2MjZiNTk1
LzEvUnZidXY0QzlaTl8xcXhBU3VRcFZhR1dvU05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm8Ux/bqV
0VFvY545WIXmuYZRXNwBM2UN8DNg6AoXNpQaoAxIHPgdpZNUmhw/+VjNgKAZ2xbx
6WCVpzNV88qEW8PQDYnDTu18fD9XCrNNwhb6RG1xiJX5WrUPefdROZeGVfRJmmOx
ZTXnbSJBES9/6Iwx+OCEFlSIkMtW5x6Kq63E4A7quVT7ikIA7zgpYyOMDVuYqI+q
Z+MtSU3oIC2Xckilba4DR+E+LllYRuJ9FVehCT9CDzaq2jkb/FcmnGayPi1cN8/I
SELtvTFrx7GZGAaE3p/cfjUkFhNVVhWIkLwneDclwUB3+mnddq3KrdMqVdAs0AVR
CoHKQWDAALCvzA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:58:41 2025 by rpki-client