Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
File:                     8W6j8DMLITLQ33UvUfDgv-89G64.mft (raw, json)
Hash identifier:          hQqy9yNDXMhVVyN4Wn2SM3iCGNsXHagkae8EVKa8f2k=
Subject key identifier:   79:0B:BE:2E:C5:81:94:C9:7F:F5:12:91:94:BB:88:26:83:6D:BC:18
Authority key identifier: F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE
Certificate issuer:       /CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
Certificate serial:       019674C2A74C379136BCCCB69D01E9430E7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
Manifest number:          1510
Signing time:             Sun 27 Apr 2025 01:00:35 +0000
Manifest this update:     Sun 27 Apr 2025 01:00:35 +0000
Manifest next update:     Mon 28 Apr 2025 01:00:35 +0000
Files and hashes:         1: 8W6j8DMLITLQ33UvUfDgv-89G64.crl (hash: PmXmKydT53HIeA15Wcz4bP8OabVFSvvZ6ZHr4NcVLQ8=)
                          2: Im2JQRLROW71vKm8r2oO6Xo1LEY.roa (hash: MahGrn/8hOcGcxLx7I6GfG5YqTkwO2eBFakKNoAC1GA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:c2:a7:4c:37:91:36:bc:cc:b6:9d:01:e9:43:0e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
        Validity
            Not Before: Apr 27 01:00:35 2025 GMT
            Not After : Apr 28 01:00:35 2025 GMT
        Subject: CN=790bbe2ec58194c97ff5129194bb8826836dbc18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fe:34:d5:e8:c7:d6:7a:28:3d:32:83:00:2d:
                    c0:03:6a:36:d3:0e:f5:25:10:52:d3:c1:65:b2:18:
                    b9:33:4c:9b:58:1e:de:82:42:5c:ac:0b:d7:f0:1f:
                    6e:6e:66:4c:d9:79:1e:02:b9:ad:6d:75:0e:0a:1c:
                    83:f6:cd:83:6a:9f:b0:c5:4e:e1:30:e6:dd:09:d1:
                    41:ff:c9:19:9f:25:ec:31:3f:b9:83:6f:89:b8:56:
                    e2:29:f5:96:71:5c:a5:31:b9:b6:f1:b0:ca:d9:2e:
                    aa:5e:f9:0f:7b:12:63:fa:c5:bf:53:41:bc:b2:2e:
                    40:b1:1a:99:0d:60:50:99:e9:d1:8a:52:0a:13:e0:
                    f9:00:0f:41:61:18:e6:7a:ad:87:72:ee:1f:95:4c:
                    b8:13:05:d3:22:15:17:b7:66:05:d9:4a:1d:5d:4f:
                    a2:f5:3c:ec:7d:35:91:a2:5f:da:8c:96:2e:60:01:
                    94:a0:ae:88:d6:8b:49:8f:c0:e7:11:4d:1c:01:7a:
                    00:0d:94:ab:ca:e0:a0:fc:47:08:94:3d:16:fe:eb:
                    41:84:43:ef:bd:b4:d8:8e:b1:fd:f0:40:6b:37:a9:
                    19:25:84:43:ea:f7:48:74:0c:5a:e1:c6:6a:c5:73:
                    9d:d1:fa:a2:ca:49:2b:0b:24:30:66:ad:e4:53:3c:
                    ac:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0B:BE:2E:C5:81:94:C9:7F:F5:12:91:94:BB:88:26:83:6D:BC:18
            X509v3 Authority Key Identifier:
                keyid:F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:8b:76:1d:f5:43:5e:41:68:c1:11:63:b0:6a:a1:f0:88:e4:
         ea:e3:83:41:ae:54:5c:d6:c9:21:a3:cb:49:7a:7b:46:b4:68:
         e0:03:21:eb:93:19:cd:79:bc:85:a6:64:be:97:08:34:93:73:
         9d:9d:ee:7e:fc:cb:a2:40:f6:6d:cf:57:f8:89:84:cf:e0:18:
         e0:68:db:d1:5e:8a:6c:4e:df:40:72:f8:02:2c:f0:43:c1:1e:
         e4:09:f5:07:73:2e:fd:d9:22:ba:12:8d:6f:ac:47:85:22:9a:
         02:04:82:9f:b9:4f:d7:24:59:0e:c5:a8:fa:c2:6d:90:7e:53:
         ed:cc:d9:2d:01:6b:13:71:2b:eb:42:48:f0:7c:00:14:7a:ae:
         a4:ee:2a:41:9c:4a:01:46:d8:a3:75:fd:d5:4a:02:da:9b:6d:
         3d:63:59:c8:40:c8:9f:46:cd:09:e8:40:d2:a8:c6:f2:c0:c8:
         32:68:6e:6f:78:6f:c0:7c:c9:16:73:31:61:bb:1f:3b:d4:fe:
         a0:f7:43:6f:fa:7d:d9:90:d9:93:49:a9:ed:41:aa:94:dd:87:
         46:74:45:a3:ee:cd:01:fb:df:78:3e:92:b7:48:cb:f1:16:b7:
         ff:2c:39:65:ca:e2:c6:6d:0b:74:28:4f:92:41:97:90:59:f9:
         a9:fb:ec:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0wqdMN5E2vMy2nQHpQw57MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNmVhM2YwMzMwYjIxMzJkMGRmNzUyZjUxZjBlMGJmZWYz
ZDFiYWUwHhcNMjUwNDI3MDEwMDM1WhcNMjUwNDI4MDEwMDM1WjAzMTEwLwYDVQQD
Eyg3OTBiYmUyZWM1ODE5NGM5N2ZmNTEyOTE5NGJiODgyNjgzNmRiYzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0v401ejH1nooPTKDAC3AA2o20w71
JRBS08Flshi5M0ybWB7egkJcrAvX8B9ubmZM2XkeArmtbXUOChyD9s2Dap+wxU7h
MObdCdFB/8kZnyXsMT+5g2+JuFbiKfWWcVylMbm28bDK2S6qXvkPexJj+sW/U0G8
si5AsRqZDWBQmenRilIKE+D5AA9BYRjmeq2Hcu4flUy4EwXTIhUXt2YF2UodXU+i
9TzsfTWRol/ajJYuYAGUoK6I1otJj8DnEU0cAXoADZSryuCg/EcIlD0W/utBhEPv
vbTYjrH98EBrN6kZJYRD6vdIdAxa4cZqxXOd0fqiykkrCyQwZq3kUzysgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkLvi7FgZTJf/USkZS7iCaDbbwYMB8GA1UdIwQY
MBaAFPFuo/AzCyEy0N91L1Hw4L/vPRuuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFc2ajhETUxJVExRMzNVdlVmRGd2LTg5RzY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lODY2N2EtYjdmZC00ZWE4LWJhZTkt
NjAwN2JiYWQ4NmQ2LzEvOFc2ajhETUxJVExRMzNVdlVmRGd2LTg5RzY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9lODY2N2EtYjdmZC00ZWE4LWJhZTktNjAwN2JiYWQ4NmQ2
LzEvOFc2ajhETUxJVExRMzNVdlVmRGd2LTg5RzY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIt2HfVD
XkFowRFjsGqh8Ijk6uODQa5UXNbJIaPLSXp7RrRo4AMh65MZzXm8haZkvpcINJNz
nZ3ufvzLokD2bc9X+ImEz+AY4Gjb0V6KbE7fQHL4AizwQ8Ee5An1B3Mu/dkiuhKN
b6xHhSKaAgSCn7lP1yRZDsWo+sJtkH5T7czZLQFrE3Er60JI8HwAFHqupO4qQZxK
AUbYo3X91UoC2pttPWNZyEDIn0bNCehA0qjG8sDIMmhub3hvwHzJFnMxYbsfO9T+
oPdDb/p92ZDZk0mp7UGqlN2HRnRFo+7NAfvfeD6St0jL8Ra3/yw5Zcrixm0LdChP
kkGXkFn5qfvsfg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:40:23 2025 by rpki-client