Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft
File:                     L1yv1e_S3yybMJu9Xu1HppGJhLA.mft (raw, json)
Hash identifier:          YQ6kvRi1Wwok+v/R5FuxyNbRixOci0y5PqM1RqJfFdU=
Subject key identifier:   BA:48:7E:8D:F0:96:9C:A5:CF:7D:57:51:90:23:44:1B:45:77:FE:14
Authority key identifier: 2F:5C:AF:D5:EF:D2:DF:2C:9B:30:9B:BD:5E:ED:47:A6:91:89:84:B0
Certificate issuer:       /CN=2f5cafd5efd2df2c9b309bbd5eed47a6918984b0
Certificate serial:       01967BA0A364D5A26C0592BD95EA8E253A6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft
Manifest number:          1510
Signing time:             Mon 28 Apr 2025 09:00:47 +0000
Manifest this update:     Mon 28 Apr 2025 09:00:47 +0000
Manifest next update:     Tue 29 Apr 2025 09:00:47 +0000
Files and hashes:         1: L1yv1e_S3yybMJu9Xu1HppGJhLA.crl (hash: Nslwl2r4TvEz2QSyu9+pIF8Nb6NIKFfdg6RPffjs388=)
                          2: X6bUQA_5cf8zbxjRiQVtHpjCxCQ.roa (hash: zu1RgyNxGmH89VrmCcbJJkVVqRZ4t3VoOwmmWEEmDMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7b:a0:a3:64:d5:a2:6c:05:92:bd:95:ea:8e:25:3a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f5cafd5efd2df2c9b309bbd5eed47a6918984b0
        Validity
            Not Before: Apr 28 09:00:47 2025 GMT
            Not After : Apr 29 09:00:47 2025 GMT
        Subject: CN=ba487e8df0969ca5cf7d57519023441b4577fe14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:86:b8:25:a2:7f:e4:14:a9:9a:2e:ce:fa:a5:
                    c7:09:1b:d0:d4:7d:fb:28:94:5f:0b:77:cb:76:c3:
                    bc:1d:26:ed:20:23:37:56:54:a2:b0:61:58:f1:0e:
                    b5:52:a7:50:b1:ed:7f:fb:45:1e:a8:2e:d5:48:b0:
                    49:37:e7:2d:75:71:e2:4c:1e:59:0f:c0:5c:5c:72:
                    fe:d4:bd:36:47:f3:3f:18:58:1a:a7:e7:9e:2c:ff:
                    32:ad:db:bd:01:2b:1b:94:f0:b4:af:05:8c:9d:fe:
                    90:2b:a3:45:c5:0b:c9:a7:7f:f8:ed:1c:f9:13:e8:
                    55:c1:c0:81:74:66:d1:14:7b:e4:76:57:0e:e6:85:
                    50:97:03:97:77:24:4e:3e:a8:f1:63:a7:77:f3:a8:
                    92:b8:0e:15:53:0c:b6:8c:ee:b5:15:51:17:f2:19:
                    e9:7f:dc:8a:90:c0:da:25:46:23:06:81:c0:03:e5:
                    4a:b1:b1:de:15:8c:a8:13:9d:00:79:04:9e:33:47:
                    ed:d8:07:ad:8b:49:f2:52:e4:79:5c:b0:30:cb:6b:
                    f9:4f:ac:74:9e:f1:be:f4:37:5e:11:a9:90:21:06:
                    6c:05:82:93:b7:f4:c8:3d:f8:be:d6:b5:bf:b5:fb:
                    f0:2c:d3:83:28:40:53:7c:35:95:11:b7:2e:89:30:
                    04:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:48:7E:8D:F0:96:9C:A5:CF:7D:57:51:90:23:44:1B:45:77:FE:14
            X509v3 Authority Key Identifier:
                keyid:2F:5C:AF:D5:EF:D2:DF:2C:9B:30:9B:BD:5E:ED:47:A6:91:89:84:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:be:96:1a:a3:d4:ad:6b:38:31:8e:53:6f:ec:b6:57:84:17:
         78:8a:6e:83:69:3c:57:7a:55:9c:27:3a:d6:20:28:db:82:5c:
         59:6d:30:6f:e9:e1:d0:f7:2d:f7:9e:7f:df:45:b8:d9:26:9a:
         3e:25:eb:9a:db:af:85:20:98:e1:2e:b1:af:c8:43:c0:8b:90:
         06:52:46:e4:f5:48:ca:26:72:ff:b5:ba:58:6f:1b:fe:17:cc:
         24:6e:f5:4f:7d:62:36:1b:92:ac:67:6c:f1:38:a6:a9:2b:ff:
         39:98:55:07:49:9d:1d:05:6f:57:2a:d7:4a:43:db:34:77:7d:
         6a:4e:3f:ae:eb:2c:65:64:7b:7d:74:ca:a3:17:b1:54:2f:93:
         81:1b:0e:f1:78:63:d2:27:ea:4c:97:d6:42:bf:12:3e:b0:9a:
         0d:bc:d4:c0:43:d0:c3:9b:7e:e9:a6:35:cd:4f:aa:04:db:2f:
         8f:71:d6:53:56:01:ab:17:95:73:6e:e6:2d:53:29:4d:e4:69:
         39:da:52:96:68:34:d8:48:61:9a:11:01:b2:96:a2:35:fe:e4:
         32:b6:20:29:a3:58:3e:98:bb:88:2c:d1:75:b6:33:c9:89:42:
         c5:0f:a8:e7:dd:b8:f3:35:a9:da:0c:be:af:24:c7:2b:e6:f5:
         22:ab:ba:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ7oKNk1aJsBZK9leqOJTptMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNWNhZmQ1ZWZkMmRmMmM5YjMwOWJiZDVlZWQ0N2E2OTE4
OTg0YjAwHhcNMjUwNDI4MDkwMDQ3WhcNMjUwNDI5MDkwMDQ3WjAzMTEwLwYDVQQD
EyhiYTQ4N2U4ZGYwOTY5Y2E1Y2Y3ZDU3NTE5MDIzNDQxYjQ1NzdmZTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oa4JaJ/5BSpmi7O+qXHCRvQ1H37
KJRfC3fLdsO8HSbtICM3VlSisGFY8Q61UqdQse1/+0UeqC7VSLBJN+ctdXHiTB5Z
D8BcXHL+1L02R/M/GFgap+eeLP8yrdu9ASsblPC0rwWMnf6QK6NFxQvJp3/47Rz5
E+hVwcCBdGbRFHvkdlcO5oVQlwOXdyROPqjxY6d386iSuA4VUwy2jO61FVEX8hnp
f9yKkMDaJUYjBoHAA+VKsbHeFYyoE50AeQSeM0ft2Aeti0nyUuR5XLAwy2v5T6x0
nvG+9DdeEamQIQZsBYKTt/TIPfi+1rW/tfvwLNODKEBTfDWVEbcuiTAEzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpIfo3wlpylz31XUZAjRBtFd/4UMB8GA1UdIwQY
MBaAFC9cr9Xv0t8smzCbvV7tR6aRiYSwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDF5djFlX1MzeXliTUp1OVh1MUhwcEdKaExBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8zYjBiYTYtZmMzMS00ZWM2LTgxNjEt
YWQ4MjdlM2VkZjZjLzEvTDF5djFlX1MzeXliTUp1OVh1MUhwcEdKaExBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8zYjBiYTYtZmMzMS00ZWM2LTgxNjEtYWQ4MjdlM2VkZjZj
LzEvTDF5djFlX1MzeXliTUp1OVh1MUhwcEdKaExBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuL6WGqPU
rWs4MY5Tb+y2V4QXeIpug2k8V3pVnCc61iAo24JcWW0wb+nh0Pct955/30W42Saa
PiXrmtuvhSCY4S6xr8hDwIuQBlJG5PVIyiZy/7W6WG8b/hfMJG71T31iNhuSrGds
8TimqSv/OZhVB0mdHQVvVyrXSkPbNHd9ak4/russZWR7fXTKoxexVC+TgRsO8Xhj
0ifqTJfWQr8SPrCaDbzUwEPQw5t+6aY1zU+qBNsvj3HWU1YBqxeVc27mLVMpTeRp
OdpSlmg02EhhmhEBspaiNf7kMrYgKaNYPpi7iCzRdbYzyYlCxQ+o59248zWp2gy+
ryTHK+b1Iqu6bQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:07:18 2025 by rpki-client