Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
File:                     pyREUNHHhV34SPNDGOHwlIkA2NU.mft (raw, json)
Hash identifier:          a57dnbOLuqXpmRV0MZSW61bynOEDRDSDoCE4bMzHjaU=
Subject key identifier:   DB:EC:A0:F7:79:13:67:80:13:58:1B:38:34:35:50:8C:2E:9D:72:DD
Authority key identifier: A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5
Certificate issuer:       /CN=a7244450d1c7855df848f34318e1f0948900d8d5
Certificate serial:       0196802284C5780CF090DB9D8D1208F49C42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
Manifest number:          0333
Signing time:             Tue 29 Apr 2025 06:01:07 +0000
Manifest this update:     Tue 29 Apr 2025 06:01:07 +0000
Manifest next update:     Wed 30 Apr 2025 06:01:07 +0000
Files and hashes:         1: pyREUNHHhV34SPNDGOHwlIkA2NU.crl (hash: MIU79+NyLcb1VHU2PixiZ2lCXuRXjh/v4vYZJtfwa2Y=)
                          2: slYjYuIFo0w5rC10sA14jjDYTj4.roa (hash: vyn3c0KUGlBUpj99ofdIph6Rnk7SAht9bfr6EHYuHzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:22:84:c5:78:0c:f0:90:db:9d:8d:12:08:f4:9c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7244450d1c7855df848f34318e1f0948900d8d5
        Validity
            Not Before: Apr 29 06:01:07 2025 GMT
            Not After : Apr 30 06:01:07 2025 GMT
        Subject: CN=dbeca0f77913678013581b383435508c2e9d72dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5e:11:db:f0:e9:6e:dd:40:e5:b2:ab:68:53:
                    8d:6a:89:3f:1e:75:74:96:ca:7c:c6:6b:67:80:e3:
                    59:ac:bf:71:6f:8d:b7:cf:c5:71:f9:35:5b:c9:e0:
                    0c:0b:d5:6c:d5:39:6d:96:66:0f:de:f5:72:33:17:
                    71:19:15:d3:e6:aa:f6:42:0c:a9:38:a6:07:98:9f:
                    35:de:84:a3:dc:43:cf:b6:d7:a7:ad:5e:a4:ab:a2:
                    72:31:1a:1f:33:7f:fb:7c:b1:04:ef:9f:3b:45:0f:
                    ff:60:fc:03:fe:35:10:08:e4:c9:5a:d3:56:b0:02:
                    16:91:39:76:9b:94:c9:c7:8a:e4:aa:63:93:c4:6e:
                    75:27:74:48:3f:3d:ae:1d:7d:8b:e6:a6:dd:d5:75:
                    1d:a7:bf:29:be:6b:d4:35:df:8b:17:70:3e:66:9b:
                    9d:8f:b3:55:d2:1e:5b:2a:79:83:66:eb:11:38:90:
                    7d:e1:76:63:7f:a5:6e:29:07:8f:5a:fe:95:e5:bb:
                    6e:7e:8a:f0:a3:14:1b:f1:04:55:4d:44:45:3a:fb:
                    99:28:7b:54:45:f0:d9:61:82:67:71:bc:1c:0f:6c:
                    e2:39:d8:03:33:23:bc:86:c2:9f:92:83:91:96:d1:
                    dd:69:f7:8e:a5:e2:0b:31:8a:2b:be:73:aa:26:3e:
                    92:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EC:A0:F7:79:13:67:80:13:58:1B:38:34:35:50:8C:2E:9D:72:DD
            X509v3 Authority Key Identifier:
                keyid:A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:7b:47:f0:59:fb:63:f6:61:7c:24:e9:01:8e:5f:3f:6a:a2:
         e7:ce:bb:15:70:90:b6:0b:3c:31:a7:ac:f8:f2:8b:55:d4:1b:
         28:18:c9:10:9f:bc:00:21:8c:9f:9c:aa:68:a3:29:6d:bf:99:
         89:d1:2f:f0:9a:ba:f3:10:5b:97:2f:ff:c7:fa:8c:63:5d:7b:
         65:7b:99:43:59:b7:48:04:5f:76:ab:e9:79:4d:19:f7:b0:94:
         c8:c0:09:dd:a5:20:4d:a6:ab:5b:f6:4b:72:4c:26:14:9f:39:
         7c:e1:e0:c0:f8:9e:01:08:bf:88:1d:3e:00:c8:04:b8:a5:9b:
         be:66:48:f9:ef:0e:15:27:66:23:5d:74:5d:f7:f3:1b:fc:3a:
         96:16:45:5d:f6:18:76:f4:2c:44:e6:b5:4e:01:83:39:ef:0a:
         2f:48:14:d8:f7:c7:2a:9d:26:7f:5f:48:77:60:45:d1:cf:ad:
         52:39:73:81:ae:1c:fc:34:41:d7:3d:17:14:fd:fc:0f:9d:b8:
         da:b8:60:f3:23:06:98:46:ae:b9:63:52:c4:c0:d0:4c:4d:15:
         36:2f:49:d3:07:32:f7:1d:e7:b5:84:bd:65:34:2f:91:2e:6b:
         e4:50:8c:aa:92:15:df:88:57:77:f9:42:2f:64:1c:0b:10:44:
         03:4b:b3:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAIoTFeAzwkNudjRII9JxCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MjQ0NDUwZDFjNzg1NWRmODQ4ZjM0MzE4ZTFmMDk0ODkw
MGQ4ZDUwHhcNMjUwNDI5MDYwMTA3WhcNMjUwNDMwMDYwMTA3WjAzMTEwLwYDVQQD
EyhkYmVjYTBmNzc5MTM2NzgwMTM1ODFiMzgzNDM1NTA4YzJlOWQ3MmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV4R2/Dpbt1A5bKraFONaok/HnV0
lsp8xmtngONZrL9xb423z8Vx+TVbyeAMC9Vs1TltlmYP3vVyMxdxGRXT5qr2Qgyp
OKYHmJ813oSj3EPPttenrV6kq6JyMRofM3/7fLEE7587RQ//YPwD/jUQCOTJWtNW
sAIWkTl2m5TJx4rkqmOTxG51J3RIPz2uHX2L5qbd1XUdp78pvmvUNd+LF3A+Zpud
j7NV0h5bKnmDZusROJB94XZjf6VuKQePWv6V5btuforwoxQb8QRVTURFOvuZKHtU
RfDZYYJncbwcD2ziOdgDMyO8hsKfkoORltHdafeOpeILMYorvnOqJj6S0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvsoPd5E2eAE1gbODQ1UIwunXLdMB8GA1UdIwQY
MBaAFKckRFDRx4Vd+EjzQxjh8JSJANjVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHlSRVVOSEhoVjM0U1BOREdPSHdsSWtBMk5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84ZWU1Y2MtZTlhMy00YzU2LWFlOWEt
MTY4YzMzMDZjMDQyLzEvcHlSRVVOSEhoVjM0U1BOREdPSHdsSWtBMk5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84ZWU1Y2MtZTlhMy00YzU2LWFlOWEtMTY4YzMzMDZjMDQy
LzEvcHlSRVVOSEhoVjM0U1BOREdPSHdsSWtBMk5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHtH8Fn7
Y/ZhfCTpAY5fP2qi5867FXCQtgs8Maes+PKLVdQbKBjJEJ+8ACGMn5yqaKMpbb+Z
idEv8Jq68xBbly//x/qMY117ZXuZQ1m3SARfdqvpeU0Z97CUyMAJ3aUgTaarW/ZL
ckwmFJ85fOHgwPieAQi/iB0+AMgEuKWbvmZI+e8OFSdmI110XffzG/w6lhZFXfYY
dvQsROa1TgGDOe8KL0gU2PfHKp0mf19Id2BF0c+tUjlzga4c/DRB1z0XFP38D524
2rhg8yMGmEauuWNSxMDQTE0VNi9J0wcy9x3ntYS9ZTQvkS5r5FCMqpIV34hXd/lC
L2QcCxBEA0uzdA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 08:16:39 2025 by rpki-client