Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
File:                     52px9rqT9s9H6zF7K_0EnVzDl2A.mft (raw, json)
Hash identifier:          Py19DYLL6rAuBzcgsjtt+vJYoSEUXNi03kHCwhktVlk=
Subject key identifier:   36:86:EF:02:CE:80:FE:97:5A:31:CD:0B:3A:14:27:C6:CC:F5:D1:85
Authority key identifier: E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
Certificate issuer:       /CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Certificate serial:       0196876D928BDB73B2D677D2AB330E383195
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
Manifest number:          0924
Signing time:             Wed 30 Apr 2025 16:00:27 +0000
Manifest this update:     Wed 30 Apr 2025 16:00:27 +0000
Manifest next update:     Thu 01 May 2025 16:00:27 +0000
Files and hashes:         1: 52px9rqT9s9H6zF7K_0EnVzDl2A.crl (hash: baABuCFKqm02S0PF3qKyKbW0F+BxZP0Q707b5Rkgq9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 13:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:87:6d:92:8b:db:73:b2:d6:77:d2:ab:33:0e:38:31:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
        Validity
            Not Before: Apr 30 16:00:27 2025 GMT
            Not After : May  1 16:00:27 2025 GMT
        Subject: CN=3686ef02ce80fe975a31cd0b3a1427c6ccf5d185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0c:0a:b0:a0:96:34:32:5f:fb:6b:fd:43:5a:
                    5a:9a:37:d2:1d:8f:fa:3b:cb:4f:65:bc:a5:16:83:
                    15:7b:66:d7:0d:df:89:67:d5:5a:db:ec:15:df:4b:
                    f1:32:f9:e6:00:ba:fc:f3:92:a1:15:4d:6f:c1:80:
                    f9:d3:32:57:1d:00:c7:33:e1:9d:ab:3c:64:69:2e:
                    88:58:98:d8:a7:08:af:f8:04:0a:56:b2:8c:bc:89:
                    71:19:87:0b:e2:11:08:60:cc:a8:40:df:90:09:30:
                    ac:59:48:e1:ca:f6:fb:66:1a:34:df:f8:b2:fa:31:
                    8e:48:07:69:93:e2:b0:92:6c:66:db:e5:53:33:51:
                    a8:c6:7b:ac:0e:0b:70:2f:b6:ef:3f:01:eb:1b:6b:
                    cb:ce:0a:04:63:8d:3d:f7:37:a3:5d:f8:72:65:86:
                    3c:2e:15:fc:6f:6f:5a:63:3e:65:14:91:ff:28:62:
                    7e:7b:17:a0:65:48:50:25:da:0e:52:e6:d3:8d:6b:
                    59:7f:51:27:0f:92:9f:a0:32:1b:c6:8f:6d:37:32:
                    c6:c6:ef:fe:52:76:55:01:ab:7c:4c:00:6e:44:a6:
                    a2:fe:8c:9e:ce:30:ba:4d:c2:38:5f:8b:07:49:b1:
                    86:fe:f1:1f:a7:86:89:87:22:06:19:5b:ae:20:9b:
                    a0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:86:EF:02:CE:80:FE:97:5A:31:CD:0B:3A:14:27:C6:CC:F5:D1:85
            X509v3 Authority Key Identifier:
                keyid:E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:bb:2a:c3:3b:be:d4:62:a7:90:66:3c:b3:01:2b:70:5e:c4:
         76:3a:46:9f:c9:5d:b8:12:2e:db:4e:49:2d:bd:86:eb:03:9a:
         5e:c7:1c:08:6c:2f:8d:e8:cb:64:7a:a4:1c:ec:3c:d8:8b:88:
         81:b8:3a:8c:6b:5f:12:9a:2d:fb:2f:56:ee:9b:13:29:44:65:
         83:bc:95:44:b7:06:ff:ce:20:b6:a7:ea:0a:ab:af:51:23:2b:
         6e:26:4b:e9:6f:55:cd:20:28:d4:3a:48:fe:a1:73:b1:9a:cb:
         3c:6e:26:f0:75:09:47:54:b6:52:7c:b5:dd:6d:34:d7:6b:88:
         74:60:38:fa:58:b5:22:90:48:ad:81:d2:ce:5f:c6:f9:1f:cb:
         98:b4:88:4f:36:97:f2:e7:52:53:a3:f9:46:66:22:d6:2a:3b:
         78:e2:43:93:fc:c7:4a:dd:e9:e0:98:5a:4b:70:6b:1a:be:f2:
         65:64:11:19:38:ae:c2:27:84:f6:5f:97:69:ca:bf:cb:3d:51:
         8c:11:33:42:48:a7:da:dd:d1:cb:5b:b8:37:86:b7:7c:ee:2d:
         17:c3:4b:37:fe:40:8d:03:e8:68:0a:8d:1e:d7:9b:3b:e5:ee:
         b1:d7:69:41:66:25:f6:e8:5c:87:cc:fa:55:d8:4a:6b:43:e8:
         ac:12:60:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaHbZKL23Oy1nfSqzMOODGVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NmE3MWY2YmE5M2Y2Y2Y0N2ViMzE3YjJiZmQwNDlkNWNj
Mzk3NjAwHhcNMjUwNDMwMTYwMDI3WhcNMjUwNTAxMTYwMDI3WjAzMTEwLwYDVQQD
EygzNjg2ZWYwMmNlODBmZTk3NWEzMWNkMGIzYTE0MjdjNmNjZjVkMTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQwKsKCWNDJf+2v9Q1pamjfSHY/6
O8tPZbylFoMVe2bXDd+JZ9Va2+wV30vxMvnmALr885KhFU1vwYD50zJXHQDHM+Gd
qzxkaS6IWJjYpwiv+AQKVrKMvIlxGYcL4hEIYMyoQN+QCTCsWUjhyvb7Zho03/iy
+jGOSAdpk+Kwkmxm2+VTM1GoxnusDgtwL7bvPwHrG2vLzgoEY4099zejXfhyZYY8
LhX8b29aYz5lFJH/KGJ+exegZUhQJdoOUubTjWtZf1EnD5KfoDIbxo9tNzLGxu/+
UnZVAat8TABuRKai/oyezjC6TcI4X4sHSbGG/vEfp4aJhyIGGVuuIJugrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaG7wLOgP6XWjHNCzoUJ8bM9dGFMB8GA1UdIwQY
MBaAFOdqcfa6k/bPR+sxeyv9BJ1cw5dgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJweDlycVQ5czlINnpGN0tfMEVuVnpEbDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8yZjY5NDQtYjFmNy00OWJiLWJmZTct
YTM5MGYzY2UzYTU2LzEvNTJweDlycVQ5czlINnpGN0tfMEVuVnpEbDJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8yZjY5NDQtYjFmNy00OWJiLWJmZTctYTM5MGYzY2UzYTU2
LzEvNTJweDlycVQ5czlINnpGN0tfMEVuVnpEbDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnbsqwzu+
1GKnkGY8swErcF7EdjpGn8lduBIu205JLb2G6wOaXsccCGwvjejLZHqkHOw82IuI
gbg6jGtfEpot+y9W7psTKURlg7yVRLcG/84gtqfqCquvUSMrbiZL6W9VzSAo1DpI
/qFzsZrLPG4m8HUJR1S2Uny13W0012uIdGA4+li1IpBIrYHSzl/G+R/LmLSITzaX
8udSU6P5RmYi1io7eOJDk/zHSt3p4JhaS3BrGr7yZWQRGTiuwieE9l+Xacq/yz1R
jBEzQkin2t3Ry1u4N4a3fO4tF8NLN/5AjQPoaAqNHtebO+XusddpQWYl9uhch8z6
VdhKa0PorBJgSA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:10 2025 by rpki-client