Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
File:                     L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft (raw, json)
Hash identifier:          ACJPVl+IpmTjME5EME+lHk0Bi0iLqRDx6zbVRLf6vT0=
Subject key identifier:   6E:08:3D:A5:ED:B8:81:22:93:24:D9:12:64:70:4B:28:8D:80:FB:F1
Authority key identifier: 2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
Certificate issuer:       /CN=2f8f99e88da046df31049d97dd912ae650d56d4e
Certificate serial:       01968A382E2D070B4729ADDC9F7078C2B274
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
Manifest number:          0C53
Signing time:             Thu 01 May 2025 05:00:59 +0000
Manifest this update:     Thu 01 May 2025 05:00:59 +0000
Manifest next update:     Fri 02 May 2025 05:00:59 +0000
Files and hashes:         1: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl (hash: SHtMAQFUWa/8HDDvA2DHLBY+UbzzLD0/eDQnJC1TqH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8a:38:2e:2d:07:0b:47:29:ad:dc:9f:70:78:c2:b2:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8f99e88da046df31049d97dd912ae650d56d4e
        Validity
            Not Before: May  1 05:00:59 2025 GMT
            Not After : May  2 05:00:59 2025 GMT
        Subject: CN=6e083da5edb881229324d91264704b288d80fbf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:37:fd:3b:63:cb:6a:20:35:17:61:fb:af:cb:
                    4e:c7:20:b6:e3:be:43:df:8a:34:f9:d3:f2:d9:e9:
                    50:6b:e9:89:66:18:79:f5:21:15:ed:d0:9b:06:41:
                    c9:3c:33:bd:c1:bf:27:cb:00:1d:f1:b4:79:fb:1b:
                    28:1b:dd:05:6a:d7:08:94:bc:1c:a2:3a:04:eb:c2:
                    9b:45:7c:c2:f9:21:ec:7c:d0:41:44:f6:ec:03:d4:
                    c9:68:cf:19:c1:1e:5a:4a:f7:d0:d2:c1:fc:5b:ce:
                    23:74:77:09:11:93:41:ec:a7:5c:ff:a5:6f:ef:c9:
                    e2:b2:a4:67:23:7a:78:61:f8:2f:33:c6:7d:7c:59:
                    f9:5d:4c:51:14:25:b9:83:14:8f:f3:36:e7:37:a4:
                    b8:37:4c:e6:38:1d:0f:87:9c:31:6e:88:d7:b8:98:
                    7c:c9:ec:58:86:3b:21:21:6f:35:70:df:e7:79:ee:
                    c2:51:b9:37:91:00:c9:f4:6c:c3:15:da:02:b5:b4:
                    23:6e:8a:cc:61:de:59:86:bc:86:05:0d:b5:6d:e4:
                    f8:80:6e:e3:0c:88:c2:5b:49:8b:8e:2d:d8:48:18:
                    30:18:27:50:40:0a:22:6f:c8:01:30:c9:c3:ab:13:
                    a9:9e:0d:2e:71:6e:12:e9:57:8a:8a:5a:68:6f:00:
                    48:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:08:3D:A5:ED:B8:81:22:93:24:D9:12:64:70:4B:28:8D:80:FB:F1
            X509v3 Authority Key Identifier:
                keyid:2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:cc:98:4b:c8:90:cb:de:68:5a:ad:fc:00:a2:48:d6:0a:e3:
         d6:c8:db:ff:a9:6c:6e:89:e6:53:eb:5e:b6:be:45:92:33:f3:
         ce:64:06:fd:c6:34:e5:b8:0e:31:4f:17:b4:ba:55:8a:a4:52:
         8a:b9:8e:e1:98:3a:67:ac:80:4d:04:65:18:63:07:d2:82:7d:
         02:35:da:74:b2:4d:75:a0:bf:9e:9a:80:58:55:30:36:0e:c1:
         ae:11:55:48:70:a4:c1:40:63:22:54:4a:6f:6e:2c:20:ba:5b:
         0a:a3:38:38:7d:59:c5:e4:6a:c0:8c:fa:09:65:00:4a:f7:cf:
         7b:7f:9f:b0:a9:45:50:52:1a:1e:7b:3d:dd:cc:d0:a3:88:c9:
         d5:d0:76:c7:8c:db:78:d7:31:0e:cd:7d:a5:98:66:0b:9e:af:
         1f:40:23:3f:6f:61:5a:43:eb:f6:4f:b3:d9:42:97:fe:bb:1a:
         67:8d:85:a4:d8:45:7b:0f:5f:2b:ce:29:dd:c6:45:6b:6a:ee:
         ec:d6:39:ff:c7:44:77:ad:fa:40:75:76:fd:e1:c1:60:c2:98:
         d1:ce:a4:4f:e4:ae:90:d0:70:b6:fa:bb:16:df:74:01:de:46:
         f0:38:40:0f:4b:7a:b6:58:2c:fb:82:8a:a1:ff:96:2f:00:d9:
         cc:39:fb:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaKOC4tBwtHKa3cn3B4wrJ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOGY5OWU4OGRhMDQ2ZGYzMTA0OWQ5N2RkOTEyYWU2NTBk
NTZkNGUwHhcNMjUwNTAxMDUwMDU5WhcNMjUwNTAyMDUwMDU5WjAzMTEwLwYDVQQD
Eyg2ZTA4M2RhNWVkYjg4MTIyOTMyNGQ5MTI2NDcwNGIyODhkODBmYmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8jf9O2PLaiA1F2H7r8tOxyC2475D
34o0+dPy2elQa+mJZhh59SEV7dCbBkHJPDO9wb8nywAd8bR5+xsoG90FatcIlLwc
ojoE68KbRXzC+SHsfNBBRPbsA9TJaM8ZwR5aSvfQ0sH8W84jdHcJEZNB7Kdc/6Vv
78nisqRnI3p4YfgvM8Z9fFn5XUxRFCW5gxSP8zbnN6S4N0zmOB0Ph5wxbojXuJh8
yexYhjshIW81cN/nee7CUbk3kQDJ9GzDFdoCtbQjborMYd5ZhryGBQ21beT4gG7j
DIjCW0mLji3YSBgwGCdQQAoib8gBMMnDqxOpng0ucW4S6VeKilpobwBIQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4IPaXtuIEikyTZEmRwSyiNgPvxMB8GA1UdIwQY
MBaAFC+PmeiNoEbfMQSdl92RKuZQ1W1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDQtWjZJMmdSdDh4QkoyWDNaRXE1bERWYlU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80NDY3ZTgtOWI5NS00MDUwLWI2Mzkt
MTJkNTJmMWU1NGRiLzEvTDQtWjZJMmdSdDh4QkoyWDNaRXE1bERWYlU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi80NDY3ZTgtOWI5NS00MDUwLWI2MzktMTJkNTJmMWU1NGRi
LzEvTDQtWjZJMmdSdDh4QkoyWDNaRXE1bERWYlU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcyYS8iQ
y95oWq38AKJI1grj1sjb/6lsbonmU+tetr5FkjPzzmQG/cY05bgOMU8XtLpViqRS
irmO4Zg6Z6yATQRlGGMH0oJ9AjXadLJNdaC/npqAWFUwNg7BrhFVSHCkwUBjIlRK
b24sILpbCqM4OH1ZxeRqwIz6CWUASvfPe3+fsKlFUFIaHns93czQo4jJ1dB2x4zb
eNcxDs19pZhmC56vH0AjP29hWkPr9k+z2UKX/rsaZ42FpNhFew9fK84p3cZFa2ru
7NY5/8dEd636QHV2/eHBYMKY0c6kT+SukNBwtvq7Ft90Ad5G8DhAD0t6tlgs+4KK
of+WLwDZzDn7hg==
-----END CERTIFICATE-----
Generated at Thu May 1 11:08:31 2025 by rpki-client