Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
File:                     1dhc7fCdgveSwYDZClqaI21qcFw.mft (raw, json)
Hash identifier:          ptd5p44m5zT2R+8EFQtK/LksejEO4d4ZAkfPZUiojzA=
Subject key identifier:   3C:53:DD:A8:F8:12:F6:70:66:A7:BD:42:6B:6D:58:01:D4:25:DD:BC
Authority key identifier: D5:D8:5C:ED:F0:9D:82:F7:92:C1:80:D9:0A:5A:9A:23:6D:6A:70:5C
Certificate issuer:       /CN=d5d85cedf09d82f792c180d90a5a9a236d6a705c
Certificate serial:       019691F1600DA35E70FE4652D90BA394DC3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
Manifest number:          151A
Signing time:             Fri 02 May 2025 17:00:37 +0000
Manifest this update:     Fri 02 May 2025 17:00:37 +0000
Manifest next update:     Sat 03 May 2025 17:00:37 +0000
Files and hashes:         1: 1dhc7fCdgveSwYDZClqaI21qcFw.crl (hash: IYHAG+xEkBzE3p+xN5foQSF+v+IB27aro9b3VHqBDYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 14:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:91:f1:60:0d:a3:5e:70:fe:46:52:d9:0b:a3:94:dc:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d85cedf09d82f792c180d90a5a9a236d6a705c
        Validity
            Not Before: May  2 17:00:37 2025 GMT
            Not After : May  3 17:00:37 2025 GMT
        Subject: CN=3c53dda8f812f67066a7bd426b6d5801d425ddbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cc:b2:4e:17:da:fe:e1:a2:6a:35:82:9d:99:
                    15:e0:a5:62:ec:4a:cc:22:bb:ab:e4:ff:ef:2e:9f:
                    79:97:06:a6:9a:68:bf:32:df:69:80:ba:7f:ca:71:
                    4a:b9:55:ef:33:d3:11:ae:b6:5a:fc:36:39:ec:42:
                    6a:c6:1f:f1:61:d0:3a:06:cb:28:bb:d4:25:e9:60:
                    3e:25:2c:47:05:fd:9e:b4:e5:cf:ea:bd:ef:a5:db:
                    00:d3:7c:d6:46:e2:1c:b4:1a:73:56:a1:c3:64:60:
                    c4:3a:fd:1e:8d:fa:4f:2f:a7:5c:b5:f3:4e:bc:f3:
                    65:f6:30:24:1c:8d:72:f8:0c:44:29:7c:0b:c1:87:
                    b0:e2:bc:b5:a9:d8:f5:28:95:04:c8:ac:96:27:5f:
                    1a:51:0b:e0:2c:72:71:17:9f:4e:01:15:e8:eb:ad:
                    47:d7:68:77:28:00:10:83:ff:6e:c4:75:bc:74:07:
                    7e:6e:fc:ef:0b:6c:76:de:11:c9:80:70:7a:10:3f:
                    1f:ba:5e:e2:0c:af:41:e6:e5:81:38:79:0f:36:ed:
                    52:71:24:58:46:9a:14:5c:61:bc:6b:e0:a4:cd:bc:
                    8f:57:0f:b0:8a:29:e4:b7:53:60:ca:03:47:49:5b:
                    77:d2:99:b3:8f:8f:34:2f:0b:53:09:08:c2:b9:e5:
                    0f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:53:DD:A8:F8:12:F6:70:66:A7:BD:42:6B:6D:58:01:D4:25:DD:BC
            X509v3 Authority Key Identifier:
                keyid:D5:D8:5C:ED:F0:9D:82:F7:92:C1:80:D9:0A:5A:9A:23:6D:6A:70:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:9f:42:82:01:07:54:92:bc:e9:c9:23:7c:b1:22:22:be:7f:
         a3:fa:39:20:3a:80:0c:8d:ed:1f:4f:c5:2d:3e:56:60:71:ba:
         00:c7:37:1d:d6:db:f9:14:4d:49:cd:eb:88:c7:eb:35:ef:f2:
         31:8f:45:00:bf:64:47:47:91:1b:c9:9b:e6:d4:12:94:eb:c6:
         5f:74:e7:13:2c:bd:e8:c7:ce:30:5d:d4:30:72:7e:6c:2b:a9:
         ef:2d:20:70:15:35:e2:c6:5a:31:a1:c5:84:61:3f:af:57:f2:
         77:4f:8e:b1:a6:a9:c6:31:37:2f:ca:27:d8:7d:08:d4:e5:81:
         72:22:88:9e:1a:da:36:1b:60:7a:c2:d2:c3:5e:80:b8:2e:38:
         96:03:62:04:2f:a2:88:20:ef:25:12:c3:5a:b3:b0:3f:92:79:
         b8:f8:46:6d:8f:84:93:38:36:7d:5d:86:8f:83:b7:ca:e8:0c:
         a9:c0:0d:52:5b:5b:fc:73:93:ef:2f:91:61:7a:17:ff:4d:e4:
         a5:ac:af:1c:a2:a8:9e:e5:71:b4:dd:fa:74:9c:8a:f6:80:ab:
         a1:08:6e:63:a4:fb:64:e0:02:b3:81:af:08:99:46:54:2e:c9:
         76:05:81:45:fd:21:26:cc:c3:d1:95:b1:f6:36:e5:dd:ee:19:
         d0:e3:33:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaR8WANo15w/kZS2QujlNw7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZDg1Y2VkZjA5ZDgyZjc5MmMxODBkOTBhNWE5YTIzNmQ2
YTcwNWMwHhcNMjUwNTAyMTcwMDM3WhcNMjUwNTAzMTcwMDM3WjAzMTEwLwYDVQQD
EygzYzUzZGRhOGY4MTJmNjcwNjZhN2JkNDI2YjZkNTgwMWQ0MjVkZGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcyyThfa/uGiajWCnZkV4KVi7ErM
Irur5P/vLp95lwammmi/Mt9pgLp/ynFKuVXvM9MRrrZa/DY57EJqxh/xYdA6Bsso
u9Ql6WA+JSxHBf2etOXP6r3vpdsA03zWRuIctBpzVqHDZGDEOv0ejfpPL6dctfNO
vPNl9jAkHI1y+AxEKXwLwYew4ry1qdj1KJUEyKyWJ18aUQvgLHJxF59OARXo661H
12h3KAAQg/9uxHW8dAd+bvzvC2x23hHJgHB6ED8ful7iDK9B5uWBOHkPNu1ScSRY
RpoUXGG8a+CkzbyPVw+wiinkt1NgygNHSVt30pmzj480LwtTCQjCueUPewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxT3aj4EvZwZqe9QmttWAHUJd28MB8GA1UdIwQY
MBaAFNXYXO3wnYL3ksGA2QpamiNtanBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWRoYzdmQ2RndmVTd1lEWkNscWFJMjFxY0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82YTU2NmMtZjk5ZC00ZTcxLWEyNzAt
YjFmN2M3MWIyMDFiLzEvMWRoYzdmQ2RndmVTd1lEWkNscWFJMjFxY0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni82YTU2NmMtZjk5ZC00ZTcxLWEyNzAtYjFmN2M3MWIyMDFi
LzEvMWRoYzdmQ2RndmVTd1lEWkNscWFJMjFxY0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR59CggEH
VJK86ckjfLEiIr5/o/o5IDqADI3tH0/FLT5WYHG6AMc3Hdbb+RRNSc3riMfrNe/y
MY9FAL9kR0eRG8mb5tQSlOvGX3TnEyy96MfOMF3UMHJ+bCup7y0gcBU14sZaMaHF
hGE/r1fyd0+OsaapxjE3L8on2H0I1OWBciKInhraNhtgesLSw16AuC44lgNiBC+i
iCDvJRLDWrOwP5J5uPhGbY+Ekzg2fV2Gj4O3yugMqcANUltb/HOT7y+RYXoX/03k
payvHKKonuVxtN36dJyK9oCroQhuY6T7ZOACs4GvCJlGVC7JdgWBRf0hJszD0ZWx
9jbl3e4Z0OMz/g==
-----END CERTIFICATE-----
Generated at Fri May 2 23:26:18 2025 by rpki-client