Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
File:                     FZVEc2Bfo00pH7dD2kFeVdaSINY.mft (raw, json)
Hash identifier:          sIwFacocoxA05LwWAl1qkVQQ9L7dN2ws94gHGAyy/uQ=
Subject key identifier:   5A:F7:71:78:45:4F:84:33:A4:BB:BA:B0:B8:B4:0C:C3:37:C4:35:20
Authority key identifier: 15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6
Certificate issuer:       /CN=15954473605fa34d291fb743da415e55d69220d6
Certificate serial:       019679EA1418A8818D3044D7D5CD938200BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
Manifest number:          06F1
Signing time:             Mon 28 Apr 2025 01:01:45 +0000
Manifest this update:     Mon 28 Apr 2025 01:01:45 +0000
Manifest next update:     Tue 29 Apr 2025 01:01:45 +0000
Files and hashes:         1: FZVEc2Bfo00pH7dD2kFeVdaSINY.crl (hash: PAuCfo2uEzF39SnLECoC+RW2Eyrk+iuWUPUCz5mj5Wk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:ea:14:18:a8:81:8d:30:44:d7:d5:cd:93:82:00:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15954473605fa34d291fb743da415e55d69220d6
        Validity
            Not Before: Apr 28 01:01:45 2025 GMT
            Not After : Apr 29 01:01:45 2025 GMT
        Subject: CN=5af77178454f8433a4bbbab0b8b40cc337c43520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:26:43:9d:be:5a:1d:b3:97:18:da:c8:49:e1:
                    9f:6f:8c:3a:a6:57:7c:f6:59:93:b6:f8:6c:c2:1e:
                    2e:92:90:75:d6:e9:5d:f4:1f:1b:87:bc:cb:85:27:
                    11:e6:82:4a:c3:52:85:88:2d:45:58:b4:88:94:94:
                    39:fc:47:5d:11:3d:14:2b:3d:9c:2a:45:d7:ec:c7:
                    28:e4:b7:f4:83:79:5e:e5:b0:59:23:a1:8a:95:9e:
                    32:11:e1:ca:bf:d7:34:52:ba:95:a8:0f:1d:6e:e7:
                    58:9f:f2:26:0a:fa:b5:15:5e:38:e4:9d:8c:c3:be:
                    54:a7:ef:8a:61:d2:22:3a:d0:19:7e:57:36:1b:17:
                    9a:16:a9:4e:ff:01:f9:79:5a:c5:7a:64:92:97:91:
                    81:df:63:cb:39:69:3d:89:0a:57:d2:9b:8b:89:a0:
                    c2:ec:72:1c:21:19:4b:b3:61:88:79:6f:b9:e0:ac:
                    7a:76:6a:a0:91:2b:6c:84:2b:4b:ba:46:c0:34:c4:
                    07:9f:e8:9c:76:ac:eb:7c:eb:26:6d:10:ab:04:30:
                    b8:49:81:7a:e6:c7:88:2e:a9:51:5a:83:3e:98:7b:
                    54:50:b3:37:db:f0:44:83:86:4b:11:c0:14:a8:4f:
                    d4:7a:09:4a:ae:e6:ef:57:e9:06:0c:ea:f1:1c:af:
                    8a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F7:71:78:45:4F:84:33:A4:BB:BA:B0:B8:B4:0C:C3:37:C4:35:20
            X509v3 Authority Key Identifier:
                keyid:15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:5c:3a:13:7c:ef:8b:8f:dc:b2:ce:ee:a9:d2:3e:c6:49:ae:
         96:c8:fa:26:ac:02:57:24:fc:ae:7d:8f:74:f0:db:86:f2:42:
         96:5d:12:e9:b3:50:c9:05:e3:8e:96:3f:9d:bf:d8:0c:25:31:
         dd:79:b5:b1:fa:4d:bd:97:80:56:cf:2e:74:55:cf:85:da:34:
         7c:48:7f:64:db:82:ea:16:e8:c2:44:2d:04:5d:11:cf:0a:d9:
         b5:d3:74:b6:4e:77:ad:27:e2:53:07:5f:05:1f:d5:e7:14:66:
         37:95:22:f1:7f:73:99:e5:64:a1:f1:c0:80:86:89:b0:16:03:
         fb:f3:36:2b:7a:e7:5d:5d:ab:ea:ad:90:51:a8:0c:77:f6:43:
         09:72:3d:9e:42:76:56:76:35:50:be:50:41:ee:cf:8e:2e:bf:
         95:16:fb:64:7c:d9:0a:df:08:53:ed:06:95:fd:ea:5f:64:d5:
         73:b1:35:4c:84:43:20:c9:2f:5f:ad:8f:67:87:fe:1a:0d:2d:
         10:ea:7b:59:95:c0:63:ed:bd:b9:53:05:85:bb:12:7c:35:15:
         a9:43:21:ff:72:a9:cb:8e:f3:c6:ac:54:98:36:8b:de:6e:5a:
         56:13:5d:12:f4:82:94:31:ef:d3:fb:14:d5:f5:4f:f0:63:8e:
         7c:53:e7:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ56hQYqIGNMETX1c2TggC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OTU0NDczNjA1ZmEzNGQyOTFmYjc0M2RhNDE1ZTU1ZDY5
MjIwZDYwHhcNMjUwNDI4MDEwMTQ1WhcNMjUwNDI5MDEwMTQ1WjAzMTEwLwYDVQQD
Eyg1YWY3NzE3ODQ1NGY4NDMzYTRiYmJhYjBiOGI0MGNjMzM3YzQzNTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSZDnb5aHbOXGNrISeGfb4w6pld8
9lmTtvhswh4ukpB11uld9B8bh7zLhScR5oJKw1KFiC1FWLSIlJQ5/EddET0UKz2c
KkXX7Mco5Lf0g3le5bBZI6GKlZ4yEeHKv9c0UrqVqA8dbudYn/ImCvq1FV445J2M
w75Up++KYdIiOtAZflc2GxeaFqlO/wH5eVrFemSSl5GB32PLOWk9iQpX0puLiaDC
7HIcIRlLs2GIeW+54Kx6dmqgkStshCtLukbANMQHn+icdqzrfOsmbRCrBDC4SYF6
5seILqlRWoM+mHtUULM32/BEg4ZLEcAUqE/UeglKrubvV+kGDOrxHK+KyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFr3cXhFT4QzpLu6sLi0DMM3xDUgMB8GA1UdIwQY
MBaAFBWVRHNgX6NNKR+3Q9pBXlXWkiDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlpWRWMyQmZvMDBwSDdkRDJrRmVWZGFTSU5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84ZTM0MDYtNjMzYy00ZjI5LTk4ZjQt
YWQ2ZjZhNjkzYWM2LzEvRlpWRWMyQmZvMDBwSDdkRDJrRmVWZGFTSU5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84ZTM0MDYtNjMzYy00ZjI5LTk4ZjQtYWQ2ZjZhNjkzYWM2
LzEvRlpWRWMyQmZvMDBwSDdkRDJrRmVWZGFTSU5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv1w6E3zv
i4/css7uqdI+xkmulsj6JqwCVyT8rn2PdPDbhvJCll0S6bNQyQXjjpY/nb/YDCUx
3Xm1sfpNvZeAVs8udFXPhdo0fEh/ZNuC6hbowkQtBF0RzwrZtdN0tk53rSfiUwdf
BR/V5xRmN5Ui8X9zmeVkofHAgIaJsBYD+/M2K3rnXV2r6q2QUagMd/ZDCXI9nkJ2
VnY1UL5QQe7Pji6/lRb7ZHzZCt8IU+0Glf3qX2TVc7E1TIRDIMkvX62PZ4f+Gg0t
EOp7WZXAY+29uVMFhbsSfDUVqUMh/3Kpy47zxqxUmDaL3m5aVhNdEvSClDHv0/sU
1fVP8GOOfFPnmw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:53:33 2025 by rpki-client