Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
File:                     DJpALskLW0dezJv0scZrI4ITIU4.mft (raw, json)
Hash identifier:          DQf/b/k45NSsff0BJ9AsyygjkeYa1Sg364KH7kGn8OY=
Subject key identifier:   E3:AF:68:21:C0:21:09:A1:99:C1:0B:AB:69:0D:85:8A:CA:18:7C:19
Authority key identifier: 0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
Certificate issuer:       /CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Certificate serial:       0196827E6A93E7FEAA1513FB2101AC37D4E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
Manifest number:          1515
Signing time:             Tue 29 Apr 2025 17:00:44 +0000
Manifest this update:     Tue 29 Apr 2025 17:00:44 +0000
Manifest next update:     Wed 30 Apr 2025 17:00:44 +0000
Files and hashes:         1: DJpALskLW0dezJv0scZrI4ITIU4.crl (hash: zS+SIE7LfbmET6H6Yc4kc4kev0xNk88ECJo3KmFMV7A=)
                          2: Zq2Gqix4-qvuYOb17f6YN_l9GEA.roa (hash: Wf/420eSD8VWWCAKz9KngjlA14TpkC9t4fqu9jJME/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:7e:6a:93:e7:fe:aa:15:13:fb:21:01:ac:37:d4:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
        Validity
            Not Before: Apr 29 17:00:44 2025 GMT
            Not After : Apr 30 17:00:44 2025 GMT
        Subject: CN=e3af6821c02109a199c10bab690d858aca187c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:7c:65:4e:e1:ab:e2:d9:e0:43:7b:ef:c2:ee:
                    29:ac:27:dd:a5:40:4b:4d:81:4b:f1:72:79:e8:e7:
                    36:aa:af:8d:01:b5:08:55:51:c8:83:7b:35:0d:98:
                    d4:30:19:f7:33:62:35:36:be:33:35:3c:1a:75:5f:
                    f6:63:97:df:ee:c0:44:98:7f:fd:9a:3e:b3:d5:b8:
                    85:b7:40:90:bb:c0:9c:1b:dd:11:79:cc:47:1d:11:
                    e0:d5:46:5b:fe:71:19:b8:75:0f:a0:57:a7:8a:15:
                    3d:8f:95:f4:25:06:e4:a7:0d:04:63:0c:4a:d4:ba:
                    7f:4d:4b:83:f3:40:18:b9:41:ea:24:6c:fc:1c:13:
                    02:fd:ab:d4:2b:75:1a:94:24:1f:22:63:c5:c4:90:
                    af:72:15:31:01:ae:db:07:b7:f2:91:ff:91:31:7b:
                    33:7b:26:9b:25:7d:9a:a7:ac:01:08:18:16:fd:a5:
                    23:1b:6d:8a:5c:5e:a8:2e:23:44:d4:5c:69:cf:2a:
                    ae:00:48:1c:27:48:8e:b9:aa:62:37:a2:f7:25:88:
                    33:fa:e2:d0:21:30:08:8d:e3:04:54:44:97:07:bf:
                    d8:a0:72:0b:91:05:ed:dd:5c:02:a1:20:25:84:1b:
                    bb:d1:d6:01:13:7a:dd:1e:e7:c5:53:b9:28:c5:c4:
                    6a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AF:68:21:C0:21:09:A1:99:C1:0B:AB:69:0D:85:8A:CA:18:7C:19
            X509v3 Authority Key Identifier:
                keyid:0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:05:39:13:d4:5d:d0:58:67:4c:80:60:72:60:13:f0:7f:b3:
         5e:19:5e:d4:1b:f8:97:b7:1f:55:33:17:18:6a:68:19:51:2c:
         99:48:ae:99:0e:3d:03:37:57:1a:63:b8:e8:68:e3:c8:54:bb:
         c4:28:7e:ad:f0:02:ec:0c:a0:cd:34:73:5e:e1:80:4e:36:80:
         3d:bd:23:c6:71:5c:45:5d:2d:b0:61:be:f3:11:bf:75:5c:25:
         f0:f1:bb:51:23:b2:4a:0c:22:9c:68:db:4f:e7:dc:8f:ba:f5:
         b3:0d:e7:be:d6:70:ef:2c:02:ea:11:5e:b2:71:d3:5e:76:b5:
         b9:68:d9:44:dd:9c:5e:fa:96:4c:8b:43:b4:9e:99:63:7c:01:
         d6:b9:95:e0:3f:59:6f:c2:98:70:be:42:87:8e:cb:1e:61:1a:
         0c:d1:79:d4:7f:04:32:52:27:89:be:ba:6e:46:15:da:c2:2f:
         5e:2e:5a:7e:7a:45:3d:94:03:f9:66:25:07:71:6d:95:ee:86:
         e7:2d:2d:f6:4b:99:e9:d2:a0:26:1f:01:b3:fe:e9:b2:c7:13:
         28:6a:94:7e:8d:28:4f:d4:fe:ab:d7:c8:c6:b4:2a:2a:3e:68:
         ef:fb:b1:92:23:b3:de:c1:25:c0:91:25:04:55:8c:ac:f9:af:
         bf:9b:ee:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCfmqT5/6qFRP7IQGsN9ThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjOWE0MDJlYzkwYjViNDc1ZWNjOWJmNGIxYzY2YjIzODIx
MzIxNGUwHhcNMjUwNDI5MTcwMDQ0WhcNMjUwNDMwMTcwMDQ0WjAzMTEwLwYDVQQD
EyhlM2FmNjgyMWMwMjEwOWExOTljMTBiYWI2OTBkODU4YWNhMTg3YzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HxlTuGr4tngQ3vvwu4prCfdpUBL
TYFL8XJ56Oc2qq+NAbUIVVHIg3s1DZjUMBn3M2I1Nr4zNTwadV/2Y5ff7sBEmH/9
mj6z1biFt0CQu8CcG90RecxHHRHg1UZb/nEZuHUPoFenihU9j5X0JQbkpw0EYwxK
1Lp/TUuD80AYuUHqJGz8HBMC/avUK3UalCQfImPFxJCvchUxAa7bB7fykf+RMXsz
eyabJX2ap6wBCBgW/aUjG22KXF6oLiNE1FxpzyquAEgcJ0iOuapiN6L3JYgz+uLQ
ITAIjeMEVESXB7/YoHILkQXt3VwCoSAlhBu70dYBE3rdHufFU7koxcRq2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOvaCHAIQmhmcELq2kNhYrKGHwZMB8GA1UdIwQY
MBaAFAyaQC7JC1tHXsyb9LHGayOCEyFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iMGY3YmYtNjg0NC00YmE0LWIzM2Qt
Nzc4NjlhNmJmZTU0LzEvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9iMGY3YmYtNjg0NC00YmE0LWIzM2QtNzc4NjlhNmJmZTU0
LzEvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbwU5E9Rd
0FhnTIBgcmAT8H+zXhle1Bv4l7cfVTMXGGpoGVEsmUiumQ49AzdXGmO46GjjyFS7
xCh+rfAC7AygzTRzXuGATjaAPb0jxnFcRV0tsGG+8xG/dVwl8PG7USOySgwinGjb
T+fcj7r1sw3nvtZw7ywC6hFesnHTXna1uWjZRN2cXvqWTItDtJ6ZY3wB1rmV4D9Z
b8KYcL5Ch47LHmEaDNF51H8EMlInib66bkYV2sIvXi5afnpFPZQD+WYlB3Ftle6G
5y0t9kuZ6dKgJh8Bs/7psscTKGqUfo0oT9T+q9fIxrQqKj5o7/uxkiOz3sElwJEl
BFWMrPmvv5vumQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:05:38 2025 by rpki-client