Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
File:                     7N10boF0dtVXj7y-1XTXwa0mQfE.mft (raw, json)
Hash identifier:          lTHOB7/Slot8YbU7m84CDt6Jm11IHfOLl5RO6q0FXv8=
Subject key identifier:   78:E8:18:07:68:EC:DC:25:3C:40:9F:2C:6E:08:04:13:0B:A7:18:26
Authority key identifier: EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
Certificate issuer:       /CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Certificate serial:       0196A65494B5377ED0EC8F64566647113FF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
Manifest number:          1527
Signing time:             Tue 06 May 2025 16:01:22 +0000
Manifest this update:     Tue 06 May 2025 16:01:22 +0000
Manifest next update:     Wed 07 May 2025 16:01:22 +0000
Files and hashes:         1: 7N10boF0dtVXj7y-1XTXwa0mQfE.crl (hash: A/krPa4rGd1BlYIcS5SICRZY68QBBzyy6cNwXKtrQAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 16:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:54:94:b5:37:7e:d0:ec:8f:64:56:66:47:11:3f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
        Validity
            Not Before: May  6 16:01:22 2025 GMT
            Not After : May  7 16:01:22 2025 GMT
        Subject: CN=78e8180768ecdc253c409f2c6e0804130ba71826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f7:7c:08:d6:be:2d:cf:a3:37:62:48:eb:45:
                    00:4d:d8:d2:d7:0c:a8:00:ef:17:a7:d7:e7:4e:b9:
                    4f:be:ab:c9:6d:ab:90:ea:9e:81:68:04:78:27:30:
                    bd:10:d6:0c:09:6b:53:08:1e:e1:da:58:6b:45:43:
                    96:5c:c1:0b:13:3e:07:55:10:32:ba:54:23:f3:fa:
                    58:55:a3:40:e8:a2:82:1e:40:c7:56:88:96:a2:f2:
                    1c:d4:6f:bf:62:f4:e0:6f:b5:9a:96:d2:62:96:c3:
                    92:25:c3:6b:95:ed:51:84:4e:ea:c4:92:8a:8a:07:
                    e7:82:7c:01:32:c8:76:25:87:d8:46:1d:2e:f6:28:
                    d8:d1:45:c7:5a:4b:b7:57:2e:2d:b9:68:ce:af:3e:
                    88:09:88:a2:ae:0a:eb:84:d6:34:24:03:1a:4b:ab:
                    c9:f9:bd:08:76:a7:c5:56:ee:7b:38:83:f4:6f:f1:
                    be:30:e8:a3:43:4b:25:e0:c0:26:25:be:0e:4b:9e:
                    43:b6:f6:b0:b9:d1:16:b9:a9:b0:37:9a:a6:c0:c2:
                    ac:17:42:05:95:61:aa:1b:4b:b3:79:80:23:3c:24:
                    0c:bd:d5:be:1c:45:b2:67:56:92:19:a9:d0:a5:f1:
                    53:d9:f4:15:74:ff:55:84:67:a2:61:85:09:c7:e3:
                    ef:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E8:18:07:68:EC:DC:25:3C:40:9F:2C:6E:08:04:13:0B:A7:18:26
            X509v3 Authority Key Identifier:
                keyid:EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:56:40:d9:fb:b7:6a:a4:75:72:7d:61:8f:80:6e:fc:9d:1f:
         a4:04:20:bd:07:bd:83:5c:72:93:45:31:01:05:6f:a6:d0:3d:
         46:58:de:6c:52:23:f1:72:9d:f9:6e:96:6d:91:e0:d8:d2:db:
         39:fa:23:71:5c:ae:8a:bc:6d:0f:ea:dd:80:66:72:2f:97:c3:
         f0:7f:79:99:d9:b8:38:bb:8d:23:3c:5f:88:b4:5f:38:06:9f:
         b6:bf:26:d5:1c:1f:8a:d0:6f:a1:93:48:86:71:57:df:83:b6:
         2c:53:76:7f:1e:39:18:eb:ed:01:f3:22:6d:0f:1e:f5:5d:b8:
         f2:41:36:d5:08:f5:b4:b6:83:c5:05:fb:c9:c2:b6:f1:5b:1a:
         ee:30:88:ac:95:57:1b:a6:9a:c9:6e:d8:3c:26:b2:f5:1c:50:
         df:a2:f4:21:3b:fc:24:04:1a:15:ec:b0:44:2f:86:14:a2:4c:
         e4:19:d5:6e:a7:6d:7d:fa:02:64:e2:be:8e:31:1d:2a:fb:f1:
         c7:c0:f3:87:28:ba:ab:28:1a:66:43:59:bf:25:0e:f2:78:51:
         70:c5:3f:2b:00:72:d9:d2:3a:c7:e3:d6:e0:36:df:43:91:39:
         db:39:9b:c7:aa:08:c2:76:da:e3:1a:c6:a4:0a:2c:31:57:ca:
         6f:d2:30:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZamVJS1N37Q7I9kVmZHET/0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZGQ3NDZlODE3NDc2ZDU1NzhmYmNiZWQ1NzRkN2MxYWQy
NjQxZjEwHhcNMjUwNTA2MTYwMTIyWhcNMjUwNTA3MTYwMTIyWjAzMTEwLwYDVQQD
Eyg3OGU4MTgwNzY4ZWNkYzI1M2M0MDlmMmM2ZTA4MDQxMzBiYTcxODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfd8CNa+Lc+jN2JI60UATdjS1wyo
AO8Xp9fnTrlPvqvJbauQ6p6BaAR4JzC9ENYMCWtTCB7h2lhrRUOWXMELEz4HVRAy
ulQj8/pYVaNA6KKCHkDHVoiWovIc1G+/YvTgb7WaltJilsOSJcNrle1RhE7qxJKK
igfngnwBMsh2JYfYRh0u9ijY0UXHWku3Vy4tuWjOrz6ICYiirgrrhNY0JAMaS6vJ
+b0IdqfFVu57OIP0b/G+MOijQ0sl4MAmJb4OS55DtvawudEWuamwN5qmwMKsF0IF
lWGqG0uzeYAjPCQMvdW+HEWyZ1aSGanQpfFT2fQVdP9VhGeiYYUJx+Pv0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjoGAdo7NwlPECfLG4IBBMLpxgmMB8GA1UdIwQY
MBaAFOzddG6BdHbVV4+8vtV018GtJkHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN04xMGJvRjBkdFZYajd5LTFYVFh3YTBtUWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xYzdiZTgtNTczZC00NTE5LWEyMTEt
MjM4MzNmZTAwOWFhLzEvN04xMGJvRjBkdFZYajd5LTFYVFh3YTBtUWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8xYzdiZTgtNTczZC00NTE5LWEyMTEtMjM4MzNmZTAwOWFh
LzEvN04xMGJvRjBkdFZYajd5LTFYVFh3YTBtUWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFZA2fu3
aqR1cn1hj4Bu/J0fpAQgvQe9g1xyk0UxAQVvptA9RljebFIj8XKd+W6WbZHg2NLb
OfojcVyuirxtD+rdgGZyL5fD8H95mdm4OLuNIzxfiLRfOAaftr8m1RwfitBvoZNI
hnFX34O2LFN2fx45GOvtAfMibQ8e9V248kE21Qj1tLaDxQX7ycK28Vsa7jCIrJVX
G6aayW7YPCay9RxQ36L0ITv8JAQaFeywRC+GFKJM5BnVbqdtffoCZOK+jjEdKvvx
x8Dzhyi6qygaZkNZvyUO8nhRcMU/KwBy2dI6x+PW4DbfQ5E52zmbx6oIwnba4xrG
pAosMVfKb9Iwfg==
-----END CERTIFICATE-----
Generated at Wed May 7 02:25:16 2025 by rpki-client