Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
File:                     nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft (raw, json)
Hash identifier:          EpU/CV0pseyhSMNB+GrFrFVj4Pxm60UmNIRsQxYOw3o=
Subject key identifier:   0B:53:3D:F0:20:9A:F4:8E:9C:46:7C:BA:1D:1A:1C:6B:D2:84:68:C1
Authority key identifier: 9C:BC:53:2A:4A:B5:5F:06:F7:C1:B6:70:19:22:4F:8D:CC:DA:65:34
Certificate issuer:       /CN=9cbc532a4ab55f06f7c1b67019224f8dccda6534
Certificate serial:       01969D87CA51A06E8ADDD62B954D4E374D67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
Manifest number:          1521
Signing time:             Sun 04 May 2025 23:00:44 +0000
Manifest this update:     Sun 04 May 2025 23:00:44 +0000
Manifest next update:     Mon 05 May 2025 23:00:44 +0000
Files and hashes:         1: nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl (hash: IFVd7de+J7vI5c8yHYeVGoCtOE96q44ReP0fEoDJxEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:87:ca:51:a0:6e:8a:dd:d6:2b:95:4d:4e:37:4d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cbc532a4ab55f06f7c1b67019224f8dccda6534
        Validity
            Not Before: May  4 23:00:44 2025 GMT
            Not After : May  5 23:00:44 2025 GMT
        Subject: CN=0b533df0209af48e9c467cba1d1a1c6bd28468c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bf:da:2d:37:a3:a7:06:b4:fc:c3:77:8e:0b:
                    7e:b9:b5:e4:0a:ea:c0:15:ee:70:5f:66:9a:c6:f1:
                    d8:42:61:5b:8a:bf:54:7b:cf:09:d4:36:4c:48:e4:
                    a3:91:5c:fc:24:69:8c:b2:4e:5b:62:b9:04:ad:f9:
                    27:f8:fd:c8:31:8e:45:7e:30:f2:a8:7d:bb:25:d9:
                    15:92:ef:21:f5:b7:88:c8:f2:30:d9:84:31:5e:37:
                    bd:65:c4:24:87:7a:c7:38:e9:ac:e2:e0:73:2d:c9:
                    de:dc:67:1b:ff:0c:08:55:82:f7:f3:2c:20:a5:60:
                    fb:19:71:c2:5a:df:75:b4:dd:0f:9b:96:23:69:5c:
                    98:e2:fa:dd:31:2b:02:cb:a9:f6:30:5d:be:a6:65:
                    6a:94:a0:b2:2f:11:03:c3:01:07:79:58:98:0b:dc:
                    6d:31:2e:61:dc:79:52:42:2c:59:c5:59:2f:e3:ad:
                    80:03:9b:79:bd:82:c3:1a:b1:57:2e:5e:ba:cd:5d:
                    cb:98:e6:aa:dc:3a:00:e7:91:89:7a:a2:3c:aa:09:
                    94:e7:76:af:f0:ca:88:12:87:80:0c:f8:85:31:e4:
                    20:e5:6c:bf:2b:6c:81:5a:55:38:c4:a3:72:4d:1c:
                    ff:8d:63:fc:e1:29:d8:68:0a:bc:40:52:d3:64:f0:
                    6c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:53:3D:F0:20:9A:F4:8E:9C:46:7C:BA:1D:1A:1C:6B:D2:84:68:C1
            X509v3 Authority Key Identifier:
                keyid:9C:BC:53:2A:4A:B5:5F:06:F7:C1:B6:70:19:22:4F:8D:CC:DA:65:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:58:37:0c:e8:e6:be:10:63:24:ba:11:0d:b0:e0:4d:7b:e6:
         6b:e3:87:43:a4:01:a9:de:d2:7e:a6:9a:c5:b6:c9:d5:85:6a:
         6c:22:e6:5a:39:a1:6d:e7:11:a8:ac:3d:cb:b7:ff:c9:19:d5:
         0a:04:d6:45:13:be:bd:2b:58:98:f6:74:5b:0b:7b:dd:ab:92:
         1e:a5:ef:89:15:f9:29:18:87:1c:e9:e3:6e:b9:30:b9:e2:d8:
         f4:ec:37:b1:68:58:46:de:3b:b5:5e:0e:74:40:6d:d1:af:6d:
         76:65:1a:01:99:c9:f1:74:d3:a8:66:73:3c:d6:f6:0e:00:49:
         17:15:fc:26:01:0e:c0:5c:38:df:dc:74:0c:f0:0d:52:b2:0a:
         b2:ec:31:28:6c:50:da:0b:b1:4c:35:4f:f5:3e:95:8e:a5:0f:
         55:13:94:e2:e5:c1:34:1d:bf:23:2d:60:15:b5:e9:2a:43:52:
         1b:df:1c:88:4e:8d:37:9c:29:79:f6:4b:b7:a7:5b:4e:2b:55:
         a8:5b:70:f2:e7:a4:3e:7f:d6:8e:1a:4b:ed:0f:14:b4:2d:49:
         f0:54:53:31:07:d7:5b:0b:37:cb:c1:4e:71:07:25:2e:9d:a6:
         4e:77:2f:1b:36:a6:a5:81:b3:44:cd:c3:66:7d:41:aa:af:b2:
         95:6d:6b:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadh8pRoG6K3dYrlU1ON01nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYmM1MzJhNGFiNTVmMDZmN2MxYjY3MDE5MjI0ZjhkY2Nk
YTY1MzQwHhcNMjUwNTA0MjMwMDQ0WhcNMjUwNTA1MjMwMDQ0WjAzMTEwLwYDVQQD
EygwYjUzM2RmMDIwOWFmNDhlOWM0NjdjYmExZDFhMWM2YmQyODQ2OGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7/aLTejpwa0/MN3jgt+ubXkCurA
Fe5wX2aaxvHYQmFbir9Ue88J1DZMSOSjkVz8JGmMsk5bYrkErfkn+P3IMY5FfjDy
qH27JdkVku8h9beIyPIw2YQxXje9ZcQkh3rHOOms4uBzLcne3Gcb/wwIVYL38ywg
pWD7GXHCWt91tN0Pm5YjaVyY4vrdMSsCy6n2MF2+pmVqlKCyLxEDwwEHeViYC9xt
MS5h3HlSQixZxVkv462AA5t5vYLDGrFXLl66zV3LmOaq3DoA55GJeqI8qgmU53av
8MqIEoeADPiFMeQg5Wy/K2yBWlU4xKNyTRz/jWP84SnYaAq8QFLTZPBs3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtTPfAgmvSOnEZ8uh0aHGvShGjBMB8GA1UdIwQY
MBaAFJy8UypKtV8G98G2cBkiT43M2mU0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkx4VEtrcTFYd2Izd2Jad0dTSlBqY3phWlRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kYTVjMGQtNTk0NC00OTYzLWFkZWMt
ZmI2Njc0MjA0NWVkLzEvbkx4VEtrcTFYd2Izd2Jad0dTSlBqY3phWlRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9kYTVjMGQtNTk0NC00OTYzLWFkZWMtZmI2Njc0MjA0NWVk
LzEvbkx4VEtrcTFYd2Izd2Jad0dTSlBqY3phWlRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAllg3DOjm
vhBjJLoRDbDgTXvma+OHQ6QBqd7SfqaaxbbJ1YVqbCLmWjmhbecRqKw9y7f/yRnV
CgTWRRO+vStYmPZ0Wwt73auSHqXviRX5KRiHHOnjbrkwueLY9Ow3sWhYRt47tV4O
dEBt0a9tdmUaAZnJ8XTTqGZzPNb2DgBJFxX8JgEOwFw439x0DPANUrIKsuwxKGxQ
2guxTDVP9T6VjqUPVROU4uXBNB2/Iy1gFbXpKkNSG98ciE6NN5wpefZLt6dbTitV
qFtw8uekPn/WjhpL7Q8UtC1J8FRTMQfXWws3y8FOcQclLp2mTncvGzampYGzRM3D
Zn1Bqq+ylW1rYQ==
-----END CERTIFICATE-----
Generated at Mon May 5 05:07:33 2025 by rpki-client