Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
File:                     U0lylWvf-DsNiB4Br9PWxSZR4Es.mft (raw, json)
Hash identifier:          oVDKSrOWjvMzCuVvZ+XvqhJT+/7ifbOqmELOck8c7tA=
Subject key identifier:   54:F6:2A:AB:62:97:F6:1D:C3:3E:30:A0:57:83:8B:95:DA:3B:40:7F
Authority key identifier: 53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B
Certificate issuer:       /CN=534972956bdff83b0d881e01afd3d6c52651e04b
Certificate serial:       019686C8F9AD3758B7F307775EAAFFD6A115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
Manifest number:          05C6
Signing time:             Wed 30 Apr 2025 13:00:40 +0000
Manifest this update:     Wed 30 Apr 2025 13:00:40 +0000
Manifest next update:     Thu 01 May 2025 13:00:40 +0000
Files and hashes:         1: U0lylWvf-DsNiB4Br9PWxSZR4Es.crl (hash: WVxom3OiWnKv6pF+rFyMKloFqDFtGRc8agiCviTL42A=)
                          2: gB1MwA1mtIVkiFQ2EqzsfbYOK18.roa (hash: xnYJIQNoCXwxomDZp5xDNLGopiNTka87rzFXVihnDvs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:86:c8:f9:ad:37:58:b7:f3:07:77:5e:aa:ff:d6:a1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=534972956bdff83b0d881e01afd3d6c52651e04b
        Validity
            Not Before: Apr 30 13:00:40 2025 GMT
            Not After : May  1 13:00:40 2025 GMT
        Subject: CN=54f62aab6297f61dc33e30a057838b95da3b407f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:43:22:3c:ce:ec:f9:01:86:39:c0:a2:f1:19:
                    e4:27:f9:bf:df:86:17:85:b2:4d:c6:16:61:47:e0:
                    e1:cf:24:86:a6:93:4c:49:9b:fd:53:f5:a4:c5:6a:
                    16:87:75:f0:6e:c3:38:88:22:0f:61:94:34:e9:9b:
                    6c:65:d4:df:0d:1f:7c:a9:f3:ac:ea:54:8c:32:02:
                    95:ba:19:74:7b:0d:23:12:99:1b:f3:6b:6f:7c:8d:
                    0b:4e:65:8b:0c:43:34:b9:d3:d4:52:eb:86:e7:e7:
                    2f:e2:b4:97:f6:84:3f:e2:0e:99:08:7c:fd:10:98:
                    b6:99:7e:d7:28:e5:2e:05:24:05:c8:86:b9:7e:5d:
                    bd:51:46:4e:0e:c1:a3:33:6e:24:2b:bf:21:19:ba:
                    fc:4b:45:a6:84:97:b6:c0:e8:53:4a:8c:fe:6e:be:
                    50:ff:a7:8a:df:ad:d4:ba:f0:01:7e:14:65:c8:04:
                    30:2a:8f:e6:cd:85:c2:53:b6:45:84:b3:6b:b4:5c:
                    81:93:fc:17:60:89:8c:61:55:96:11:f4:2e:c1:87:
                    7f:de:31:65:ab:a5:b2:84:30:77:f8:5c:94:58:44:
                    f9:cf:81:25:e8:7b:80:9b:de:95:56:c7:f5:66:40:
                    82:eb:95:2a:23:af:87:6a:c9:fa:cf:76:13:ed:bf:
                    c0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F6:2A:AB:62:97:F6:1D:C3:3E:30:A0:57:83:8B:95:DA:3B:40:7F
            X509v3 Authority Key Identifier:
                keyid:53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c9:6b:3d:29:d5:f9:4e:a2:b3:6f:ba:ff:d4:27:42:7a:32:
         76:f1:42:fd:ef:33:6b:88:9c:29:0f:4b:cb:4a:0f:93:cf:56:
         79:9a:db:14:48:35:b6:d5:30:3c:47:f0:ea:5f:f6:b4:f6:ff:
         3e:31:5f:97:94:3e:02:43:70:aa:fa:0e:26:86:58:c4:6d:f2:
         1e:a2:d1:35:5c:16:e3:8f:76:53:59:09:8e:0e:3f:f7:e8:2e:
         a5:34:c7:fe:cd:63:b0:91:75:5c:5d:24:2a:02:98:45:61:28:
         de:e8:bf:63:2b:ae:56:3e:7a:12:7f:b9:c0:f3:c8:2a:28:99:
         38:a6:51:0a:27:32:5d:00:0a:45:15:ad:57:c0:24:ae:5f:bb:
         a6:86:2d:d9:f7:22:db:e3:5b:84:42:5d:69:7b:4a:38:1e:ee:
         38:f9:cb:bf:f3:5e:e5:89:fe:d0:25:c2:b0:d6:29:03:74:2e:
         5a:31:f0:7e:23:a1:f2:d2:45:21:99:9d:0a:0e:01:9f:44:1d:
         1f:58:b4:fd:ce:e0:10:14:a8:91:a8:4a:68:5e:50:31:3e:fd:
         c4:ac:60:44:b0:cd:c0:3b:60:ce:75:9d:31:3c:f2:81:63:1e:
         d8:57:cb:08:be:55:35:d5:75:86:fb:50:88:f4:31:c9:84:41:
         a6:d8:2f:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaGyPmtN1i38wd3Xqr/1qEVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNDk3Mjk1NmJkZmY4M2IwZDg4MWUwMWFmZDNkNmM1MjY1
MWUwNGIwHhcNMjUwNDMwMTMwMDQwWhcNMjUwNTAxMTMwMDQwWjAzMTEwLwYDVQQD
Eyg1NGY2MmFhYjYyOTdmNjFkYzMzZTMwYTA1NzgzOGI5NWRhM2I0MDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0MiPM7s+QGGOcCi8RnkJ/m/34YX
hbJNxhZhR+DhzySGppNMSZv9U/WkxWoWh3XwbsM4iCIPYZQ06ZtsZdTfDR98qfOs
6lSMMgKVuhl0ew0jEpkb82tvfI0LTmWLDEM0udPUUuuG5+cv4rSX9oQ/4g6ZCHz9
EJi2mX7XKOUuBSQFyIa5fl29UUZODsGjM24kK78hGbr8S0WmhJe2wOhTSoz+br5Q
/6eK363UuvABfhRlyAQwKo/mzYXCU7ZFhLNrtFyBk/wXYImMYVWWEfQuwYd/3jFl
q6WyhDB3+FyUWET5z4El6HuAm96VVsf1ZkCC65UqI6+Hasn6z3YT7b/AwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFT2Kqtil/Ydwz4woFeDi5XaO0B/MB8GA1UdIwQY
MBaAFFNJcpVr3/g7DYgeAa/T1sUmUeBLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTBseWxXdmYtRHNOaUI0QnI5UFd4U1pSNEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS80YzA0MTMtY2U4MS00ZGM4LThhNGQt
YTcwZWVlM2RiNWU1LzEvVTBseWxXdmYtRHNOaUI0QnI5UFd4U1pSNEVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS80YzA0MTMtY2U4MS00ZGM4LThhNGQtYTcwZWVlM2RiNWU1
LzEvVTBseWxXdmYtRHNOaUI0QnI5UFd4U1pSNEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8lrPSnV
+U6is2+6/9QnQnoydvFC/e8za4icKQ9Ly0oPk89WeZrbFEg1ttUwPEfw6l/2tPb/
PjFfl5Q+AkNwqvoOJoZYxG3yHqLRNVwW4492U1kJjg4/9+gupTTH/s1jsJF1XF0k
KgKYRWEo3ui/YyuuVj56En+5wPPIKiiZOKZRCicyXQAKRRWtV8Akrl+7poYt2fci
2+NbhEJdaXtKOB7uOPnLv/Ne5Yn+0CXCsNYpA3QuWjHwfiOh8tJFIZmdCg4Bn0Qd
H1i0/c7gEBSokahKaF5QMT79xKxgRLDNwDtgznWdMTzygWMe2FfLCL5VNdV1hvtQ
iPQxyYRBptgvtg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:13:18 2025 by rpki-client