Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
File:                     tRu6i9P6566CScnEYWi6kAI9sZQ.mft (raw, json)
Hash identifier:          KiTM7Iou/u5ctu8G0q8UVfwf5JMZpgJ3LjHDMw4lHjw=
Subject key identifier:   5E:83:5E:84:41:26:6A:D7:91:25:16:4B:83:E8:75:C2:C4:D0:AD:D2
Authority key identifier: B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
Certificate issuer:       /CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Certificate serial:       019691834D0B67053F8EE5D99D5987CE35F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
Manifest number:          1518
Signing time:             Fri 02 May 2025 15:00:23 +0000
Manifest this update:     Fri 02 May 2025 15:00:23 +0000
Manifest next update:     Sat 03 May 2025 15:00:23 +0000
Files and hashes:         1: tRu6i9P6566CScnEYWi6kAI9sZQ.crl (hash: 5Zq8hawN0f5rHjcJWbQRnLkrNQjzbd+38UF2snTEjo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:91:83:4d:0b:67:05:3f:8e:e5:d9:9d:59:87:ce:35:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
        Validity
            Not Before: May  2 15:00:23 2025 GMT
            Not After : May  3 15:00:23 2025 GMT
        Subject: CN=5e835e8441266ad79125164b83e875c2c4d0add2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8c:ec:85:04:12:ea:71:44:76:b8:46:40:c6:
                    6e:ec:9c:ed:4e:03:aa:51:8f:0e:a0:d0:05:52:45:
                    08:77:5d:de:46:f8:96:41:5a:50:2c:72:1c:52:d2:
                    b6:aa:07:9a:05:5e:22:a6:18:40:19:18:00:7d:1a:
                    24:a5:9d:6b:b4:5f:a3:fb:d4:8c:05:63:bd:7e:0c:
                    2b:c4:7f:8f:f5:bc:bc:d3:30:3a:1c:15:91:39:52:
                    a6:96:62:7a:d1:20:9f:09:9c:84:ed:8d:ea:ae:26:
                    13:49:46:02:54:01:61:72:a8:7b:69:53:0a:8f:00:
                    2c:b5:d5:43:f9:5e:2d:49:c5:f8:40:cf:0a:38:6f:
                    27:04:72:09:77:24:73:ea:08:77:67:d4:b6:e6:e9:
                    71:50:dd:1d:fc:57:36:46:6f:58:e0:1d:7d:0b:f7:
                    b5:cf:bb:c8:d8:c8:0e:be:8a:ad:d8:dc:e9:48:71:
                    fe:81:5d:71:c4:d4:e4:b2:b9:8b:0a:86:47:4a:8e:
                    3f:41:87:8f:73:ed:35:fc:41:47:30:c3:78:a4:56:
                    ad:cc:41:86:6e:03:a7:be:57:ac:14:06:02:82:7c:
                    81:4a:fc:21:52:32:6f:59:50:cf:57:ab:94:37:58:
                    50:fc:f5:67:92:34:54:bc:29:6f:2f:ca:5e:38:a6:
                    f2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:83:5E:84:41:26:6A:D7:91:25:16:4B:83:E8:75:C2:C4:D0:AD:D2
            X509v3 Authority Key Identifier:
                keyid:B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:10:64:a8:00:71:61:b4:f1:12:85:ff:ca:35:1c:5c:17:e2:
         3e:3e:d4:8c:76:7c:c0:5c:0c:bd:f7:a9:d7:6a:05:84:45:61:
         c8:e5:c1:83:81:90:c0:73:a5:29:0c:e7:fa:2a:1c:1c:c1:8f:
         d0:8f:95:47:df:f1:a0:0c:89:b6:ec:d0:b7:82:6e:b5:80:1b:
         ab:a5:15:c2:3b:2b:94:36:a3:5c:b8:86:e8:6b:ec:49:78:7a:
         9b:fa:92:ed:3b:e2:cb:2c:59:f9:9d:5a:33:48:f1:7f:f1:e4:
         34:b2:95:d5:c2:7a:5d:10:b6:be:52:6d:35:19:67:0e:d1:04:
         fc:64:e3:28:ff:5d:b9:bc:52:57:21:2e:22:94:a0:9a:10:61:
         e0:ff:91:0e:97:a2:92:89:e3:31:42:52:fd:fc:e1:91:74:2e:
         08:a5:e5:ee:a9:2c:50:c8:5a:d1:7f:95:a4:26:9c:71:07:03:
         9b:a1:41:d7:2d:47:44:f2:46:ef:c3:1d:32:68:ae:54:f2:1a:
         9a:62:8c:6b:52:99:bb:7a:bb:8f:6a:71:07:a5:71:96:3b:bc:
         a1:7c:f9:30:a2:ce:20:f5:57:4f:cd:f5:d6:c4:b3:ae:40:a9:
         da:71:29:30:7a:7a:ff:d9:ba:c2:45:3b:63:ae:24:8d:94:fb:
         4b:87:af:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaRg00LZwU/juXZnVmHzjX4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MWJiYThiZDNmYWU3YWU4MjQ5YzljNDYxNjhiYTkwMDIz
ZGIxOTQwHhcNMjUwNTAyMTUwMDIzWhcNMjUwNTAzMTUwMDIzWjAzMTEwLwYDVQQD
Eyg1ZTgzNWU4NDQxMjY2YWQ3OTEyNTE2NGI4M2U4NzVjMmM0ZDBhZGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvozshQQS6nFEdrhGQMZu7JztTgOq
UY8OoNAFUkUId13eRviWQVpQLHIcUtK2qgeaBV4iphhAGRgAfRokpZ1rtF+j+9SM
BWO9fgwrxH+P9by80zA6HBWROVKmlmJ60SCfCZyE7Y3qriYTSUYCVAFhcqh7aVMK
jwAstdVD+V4tScX4QM8KOG8nBHIJdyRz6gh3Z9S25ulxUN0d/Fc2Rm9Y4B19C/e1
z7vI2MgOvoqt2NzpSHH+gV1xxNTksrmLCoZHSo4/QYePc+01/EFHMMN4pFatzEGG
bgOnvlesFAYCgnyBSvwhUjJvWVDPV6uUN1hQ/PVnkjRUvClvL8peOKby3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6DXoRBJmrXkSUWS4PodcLE0K3SMB8GA1UdIwQY
MBaAFLUbuovT+ueugknJxGFoupACPbGUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFJ1Nmk5UDY1NjZDU2NuRVlXaTZrQUk5c1pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9hNWE3NDAtMmJjZS00MzM4LTk5ZDct
NzgyMzEwZTY2NjJkLzEvdFJ1Nmk5UDY1NjZDU2NuRVlXaTZrQUk5c1pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9hNWE3NDAtMmJjZS00MzM4LTk5ZDctNzgyMzEwZTY2NjJk
LzEvdFJ1Nmk5UDY1NjZDU2NuRVlXaTZrQUk5c1pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRBkqABx
YbTxEoX/yjUcXBfiPj7UjHZ8wFwMvfep12oFhEVhyOXBg4GQwHOlKQzn+iocHMGP
0I+VR9/xoAyJtuzQt4JutYAbq6UVwjsrlDajXLiG6GvsSXh6m/qS7TviyyxZ+Z1a
M0jxf/HkNLKV1cJ6XRC2vlJtNRlnDtEE/GTjKP9dubxSVyEuIpSgmhBh4P+RDpei
konjMUJS/fzhkXQuCKXl7qksUMha0X+VpCaccQcDm6FB1y1HRPJG78MdMmiuVPIa
mmKMa1KZu3q7j2pxB6Vxlju8oXz5MKLOIPVXT8311sSzrkCp2nEpMHp6/9m6wkU7
Y64kjZT7S4evnA==
-----END CERTIFICATE-----
Generated at Fri May 2 19:24:51 2025 by rpki-client