Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft
File:                     71j4Vyvdd9mBQRGA4u-aioAsdqw.mft (raw, json)
Hash identifier:          FYoBLjoZShwC0dueIlHPH0dlzACSrQ31/fa/lwgc5S4=
Subject key identifier:   2A:C3:00:81:F0:C1:FB:A2:BB:34:8E:AA:89:79:DB:F5:5A:FB:9E:38
Authority key identifier: EF:58:F8:57:2B:DD:77:D9:81:41:11:80:E2:EF:9A:8A:80:2C:76:AC
Certificate issuer:       /CN=ef58f8572bdd77d981411180e2ef9a8a802c76ac
Certificate serial:       019684DA80C705608222F5955652BC74371E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71j4Vyvdd9mBQRGA4u-aioAsdqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft
Manifest number:          92
Signing time:             Wed 30 Apr 2025 04:00:34 +0000
Manifest this update:     Wed 30 Apr 2025 04:00:34 +0000
Manifest next update:     Thu 01 May 2025 04:00:34 +0000
Files and hashes:         1: 71j4Vyvdd9mBQRGA4u-aioAsdqw.crl (hash: SApFBBJMX89FCrzWzOwnwuu4AeNtsTSzYHqHYiDS5Hk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71j4Vyvdd9mBQRGA4u-aioAsdqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:84:da:80:c7:05:60:82:22:f5:95:56:52:bc:74:37:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef58f8572bdd77d981411180e2ef9a8a802c76ac
        Validity
            Not Before: Apr 30 04:00:34 2025 GMT
            Not After : May  1 04:00:34 2025 GMT
        Subject: CN=2ac30081f0c1fba2bb348eaa8979dbf55afb9e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6b:d8:0c:f7:71:cd:db:79:1e:57:d2:76:b3:
                    4b:23:39:11:06:83:40:88:2b:0a:89:6d:21:c4:4f:
                    95:0c:06:8e:54:c2:ba:9f:f4:e5:9c:4c:ed:50:2a:
                    ed:c7:36:33:e5:ac:cd:ac:82:bc:4c:29:07:e6:e8:
                    34:4a:ce:e1:83:69:c7:5d:9c:6c:fd:18:a8:c6:97:
                    e2:ce:a9:d1:87:c3:6b:98:ff:74:25:df:9b:fd:83:
                    25:10:d6:2f:ba:9f:b6:c4:32:21:23:33:97:24:94:
                    83:6b:dd:60:fe:13:a1:64:d6:66:fd:ec:cb:96:6d:
                    08:30:02:23:3c:86:0b:76:44:92:5a:ce:2d:0d:f0:
                    c5:37:9c:61:37:d2:58:12:ce:d1:cc:96:49:7d:9c:
                    49:d5:3a:51:88:60:5c:68:49:9b:25:55:0f:af:0d:
                    42:4d:25:22:a2:93:c7:e4:8b:cc:b2:3e:50:42:71:
                    ec:e0:f6:48:b1:b5:62:de:51:43:7b:6a:3d:0c:9a:
                    ad:8b:bb:3c:f1:4e:1d:14:b8:ca:77:a0:84:cf:74:
                    77:80:d0:bb:82:d0:5b:ca:bd:78:57:1d:ea:b2:97:
                    05:21:6e:63:31:38:6c:51:ca:5b:bc:9d:80:71:39:
                    d0:6c:30:36:98:30:7d:19:9a:95:94:bb:fa:25:2f:
                    0f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C3:00:81:F0:C1:FB:A2:BB:34:8E:AA:89:79:DB:F5:5A:FB:9E:38
            X509v3 Authority Key Identifier:
                keyid:EF:58:F8:57:2B:DD:77:D9:81:41:11:80:E2:EF:9A:8A:80:2C:76:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71j4Vyvdd9mBQRGA4u-aioAsdqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:65:27:80:3f:34:33:bc:71:9a:14:62:7c:32:49:5e:d6:7a:
         e1:e1:db:60:8d:71:27:e9:79:fe:83:54:ba:66:f9:9e:77:cc:
         b3:1d:a3:f3:b6:a9:de:be:58:16:4f:3c:94:0e:a6:e8:86:98:
         e6:90:d5:70:ea:51:0d:15:d1:b5:71:36:ee:4a:b9:be:f0:9c:
         ab:ff:a8:ae:2a:2b:5a:19:76:48:52:ff:c4:b7:ba:0b:1e:26:
         99:0c:ab:80:9b:cd:e9:90:08:b7:df:ec:56:8f:7b:b3:3f:42:
         8f:ab:42:00:08:1b:92:52:4f:11:9d:f6:17:e3:17:b9:83:ad:
         91:91:26:14:ce:7e:5d:74:28:94:d9:33:a7:09:ae:c4:6b:6b:
         62:60:ff:df:13:95:bf:44:cf:b9:77:cc:d5:a4:4d:df:8f:57:
         e3:e1:df:83:28:0b:c5:1b:23:15:4b:d7:34:fc:86:3f:42:24:
         95:cb:84:b5:0d:66:0f:83:3c:73:f0:31:7a:a6:0b:22:09:4a:
         02:ef:13:d8:a1:66:ff:9e:f6:95:c3:27:cc:63:bf:db:3b:2c:
         75:b5:d3:d3:a7:13:d4:e9:5b:f4:bb:12:da:2e:1d:56:36:ae:
         00:9b:2b:3a:27:f7:59:77:03:23:19:43:1a:50:0d:2b:be:14:
         d4:b7:9e:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaE2oDHBWCCIvWVVlK8dDceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNThmODU3MmJkZDc3ZDk4MTQxMTE4MGUyZWY5YThhODAy
Yzc2YWMwHhcNMjUwNDMwMDQwMDM0WhcNMjUwNTAxMDQwMDM0WjAzMTEwLwYDVQQD
EygyYWMzMDA4MWYwYzFmYmEyYmIzNDhlYWE4OTc5ZGJmNTVhZmI5ZTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWvYDPdxzdt5HlfSdrNLIzkRBoNA
iCsKiW0hxE+VDAaOVMK6n/TlnEztUCrtxzYz5azNrIK8TCkH5ug0Ss7hg2nHXZxs
/RioxpfizqnRh8NrmP90Jd+b/YMlENYvup+2xDIhIzOXJJSDa91g/hOhZNZm/ezL
lm0IMAIjPIYLdkSSWs4tDfDFN5xhN9JYEs7RzJZJfZxJ1TpRiGBcaEmbJVUPrw1C
TSUiopPH5IvMsj5QQnHs4PZIsbVi3lFDe2o9DJqti7s88U4dFLjKd6CEz3R3gNC7
gtBbyr14Vx3qspcFIW5jMThsUcpbvJ2AcTnQbDA2mDB9GZqVlLv6JS8P2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrDAIHwwfuiuzSOqol52/Va+544MB8GA1UdIwQY
MBaAFO9Y+Fcr3XfZgUERgOLvmoqALHasMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFqNFZ5dmRkOW1CUVJHQTR1LWFpb0FzZHF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85YjcxMDgtZTEyZi00ZjhhLWE1ZTAt
MzhlODA1ZmY0YzczLzEvNzFqNFZ5dmRkOW1CUVJHQTR1LWFpb0FzZHF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni85YjcxMDgtZTEyZi00ZjhhLWE1ZTAtMzhlODA1ZmY0Yzcz
LzEvNzFqNFZ5dmRkOW1CUVJHQTR1LWFpb0FzZHF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2UngD80
M7xxmhRifDJJXtZ64eHbYI1xJ+l5/oNUumb5nnfMsx2j87ap3r5YFk88lA6m6IaY
5pDVcOpRDRXRtXE27kq5vvCcq/+oriorWhl2SFL/xLe6Cx4mmQyrgJvN6ZAIt9/s
Vo97sz9Cj6tCAAgbklJPEZ32F+MXuYOtkZEmFM5+XXQolNkzpwmuxGtrYmD/3xOV
v0TPuXfM1aRN349X4+HfgygLxRsjFUvXNPyGP0IklcuEtQ1mD4M8c/AxeqYLIglK
Au8T2KFm/572lcMnzGO/2zssdbXT06cT1Olb9LsS2i4dVjauAJsrOif3WXcDIxlD
GlANK74U1LeeqQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 05:42:05 2025 by rpki-client