Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft
File:                     dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft (raw, json)
Hash identifier:          ztYDurM7EcmZ4beU/EtUX24dX576Bbzsb9gk8J5eRAA=
Subject key identifier:   18:E0:9E:18:BC:37:D5:3F:19:0E:0A:D5:C0:EE:20:E3:C9:4C:DA:8D
Authority key identifier: 76:3D:7A:55:35:A5:24:9E:97:A7:50:64:66:93:99:A9:3C:46:CC:8E
Certificate issuer:       /CN=763d7a5535a5249e97a75064669399a93c46cc8e
Certificate serial:       01969371B89DFAEA1864A795C39B2B7FA155
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft
Manifest number:          0959
Signing time:             Sat 03 May 2025 00:00:25 +0000
Manifest this update:     Sat 03 May 2025 00:00:25 +0000
Manifest next update:     Sun 04 May 2025 00:00:25 +0000
Files and hashes:         1: dj16VTWlJJ6Xp1BkZpOZqTxGzI4.crl (hash: XsuYZEeOIX/56gY1wbYaLJCGzQVB63jXCiaEpjLhE7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 00:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:93:71:b8:9d:fa:ea:18:64:a7:95:c3:9b:2b:7f:a1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=763d7a5535a5249e97a75064669399a93c46cc8e
        Validity
            Not Before: May  3 00:00:25 2025 GMT
            Not After : May  4 00:00:25 2025 GMT
        Subject: CN=18e09e18bc37d53f190e0ad5c0ee20e3c94cda8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e4:d2:0c:6e:c7:9f:79:d7:06:cf:3a:60:9c:
                    35:59:e8:77:74:4d:e3:06:7c:8d:de:67:ed:e2:59:
                    95:54:be:44:ee:bc:c9:7d:b8:2d:52:65:b4:b4:ca:
                    b7:32:f0:30:b2:52:53:3f:95:1c:95:c5:ce:27:78:
                    bf:2d:90:59:35:01:d9:dd:f9:1a:d0:e9:40:1a:a2:
                    bd:03:bc:f8:86:f2:92:f6:00:06:93:42:b9:ab:24:
                    9b:54:04:61:01:89:7e:c7:e9:d1:56:7b:58:b6:2e:
                    d4:e7:e5:31:f3:3a:67:2b:44:b4:a2:9c:e4:d1:57:
                    2e:b1:d1:3b:1a:a7:da:dd:41:3d:13:5f:dd:50:66:
                    42:c4:26:0b:35:b7:59:67:4e:83:94:e9:6d:34:78:
                    08:9c:e4:c1:88:4e:3e:74:cb:e2:de:23:fa:78:e5:
                    03:b4:b1:c5:70:66:24:61:ff:00:35:47:7f:84:20:
                    91:7f:48:3a:e1:7f:8a:c1:d0:bc:63:c9:fc:af:b7:
                    86:0d:db:0f:26:46:29:6f:a4:43:af:f5:31:91:f7:
                    83:08:24:31:94:d2:34:03:fa:45:5e:cc:ca:d6:89:
                    00:f1:97:69:09:39:40:f0:bd:dc:9b:67:c2:24:90:
                    b2:29:91:62:0b:21:6f:0d:8c:2e:ab:47:05:5b:b4:
                    52:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E0:9E:18:BC:37:D5:3F:19:0E:0A:D5:C0:EE:20:E3:C9:4C:DA:8D
            X509v3 Authority Key Identifier:
                keyid:76:3D:7A:55:35:A5:24:9E:97:A7:50:64:66:93:99:A9:3C:46:CC:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:2c:8e:c5:89:f6:c1:80:1e:5b:d8:8f:e0:48:25:6e:89:cb:
         44:c3:a0:bf:63:3c:af:d3:d6:6e:9a:31:3e:8b:63:ef:d3:f7:
         c7:44:99:d2:3c:39:5f:6d:a9:33:6c:28:e7:3f:44:6f:74:61:
         55:df:bc:08:e8:dd:a2:7e:75:48:85:82:ee:37:8c:b8:62:5a:
         d5:a1:bd:2b:c7:8d:39:76:28:96:ab:4e:27:01:b5:0e:ad:8a:
         3b:b3:8e:83:e7:58:be:e9:5d:a1:bf:ad:0c:a2:f8:c3:14:25:
         b6:0b:72:85:a9:bc:db:e6:72:cb:8a:2f:c3:29:30:ec:2e:8c:
         58:11:15:c1:4c:2f:e0:11:7e:8b:9e:a9:5e:c2:75:b8:70:91:
         cc:19:8b:00:ee:95:6d:b3:a9:67:d0:51:0b:22:27:02:b3:bd:
         84:0e:5a:6c:6f:74:d5:32:b2:83:95:bf:7a:04:96:77:8b:d0:
         2a:a6:f9:61:1b:78:ad:96:2c:df:96:41:e5:a1:2f:3c:77:b7:
         8f:51:de:7e:45:3b:2e:27:4a:a4:fb:f1:ba:45:11:c0:cd:72:
         76:4b:7c:6b:39:24:03:fb:2e:fd:33:c0:6c:9a:fd:5f:61:4b:
         e8:06:c5:d0:de:0a:2b:86:30:db:f5:dc:1b:17:51:85:02:b0:
         34:d1:c2:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaTcbid+uoYZKeVw5srf6FVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2M2Q3YTU1MzVhNTI0OWU5N2E3NTA2NDY2OTM5OWE5M2M0
NmNjOGUwHhcNMjUwNTAzMDAwMDI1WhcNMjUwNTA0MDAwMDI1WjAzMTEwLwYDVQQD
EygxOGUwOWUxOGJjMzdkNTNmMTkwZTBhZDVjMGVlMjBlM2M5NGNkYThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+TSDG7Hn3nXBs86YJw1Weh3dE3j
BnyN3mft4lmVVL5E7rzJfbgtUmW0tMq3MvAwslJTP5UclcXOJ3i/LZBZNQHZ3fka
0OlAGqK9A7z4hvKS9gAGk0K5qySbVARhAYl+x+nRVntYti7U5+Ux8zpnK0S0opzk
0VcusdE7Gqfa3UE9E1/dUGZCxCYLNbdZZ06DlOltNHgInOTBiE4+dMvi3iP6eOUD
tLHFcGYkYf8ANUd/hCCRf0g64X+KwdC8Y8n8r7eGDdsPJkYpb6RDr/UxkfeDCCQx
lNI0A/pFXszK1okA8ZdpCTlA8L3cm2fCJJCyKZFiCyFvDYwuq0cFW7RSJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjgnhi8N9U/GQ4K1cDuIOPJTNqNMB8GA1UdIwQY
MBaAFHY9elU1pSSel6dQZGaTmak8RsyOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGoxNlZUV2xKSjZYcDFCa1pwT1pxVHhHekk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC84NTBiMGItYjMwNi00ZDdmLWIxOTgt
ODgyMmJkMzg2ODQwLzEvZGoxNlZUV2xKSjZYcDFCa1pwT1pxVHhHekk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC84NTBiMGItYjMwNi00ZDdmLWIxOTgtODgyMmJkMzg2ODQw
LzEvZGoxNlZUV2xKSjZYcDFCa1pwT1pxVHhHekk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAliyOxYn2
wYAeW9iP4EglbonLRMOgv2M8r9PWbpoxPotj79P3x0SZ0jw5X22pM2wo5z9Eb3Rh
Vd+8COjdon51SIWC7jeMuGJa1aG9K8eNOXYolqtOJwG1Dq2KO7OOg+dYvuldob+t
DKL4wxQltgtyham82+Zyy4ovwykw7C6MWBEVwUwv4BF+i56pXsJ1uHCRzBmLAO6V
bbOpZ9BRCyInArO9hA5abG901TKyg5W/egSWd4vQKqb5YRt4rZYs35ZB5aEvPHe3
j1HefkU7LidKpPvxukURwM1ydkt8azkkA/su/TPAbJr9X2FL6AbF0N4KK4Yw2/Xc
GxdRhQKwNNHCPA==
-----END CERTIFICATE-----
Generated at Sat May 3 08:51:18 2025 by rpki-client