Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
File:                     8Q057dsAjRuJ35dBlg2_IET2V_s.mft (raw, json)
Hash identifier:          JrQY2gX6KINEY2xXVErmIPYqDxkV1v+U3brNdoGNyqc=
Subject key identifier:   DC:7F:A3:8A:BB:F5:0E:AA:43:5E:FD:DB:8B:3A:42:3F:33:E1:49:2F
Authority key identifier: F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB
Certificate issuer:       /CN=f10d39eddb008d1b89df9741960dbf2044f657fb
Certificate serial:       0196771EF3C58E78B45BFA0482CC929C6547
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
Manifest number:          1516
Signing time:             Sun 27 Apr 2025 12:00:39 +0000
Manifest this update:     Sun 27 Apr 2025 12:00:39 +0000
Manifest next update:     Mon 28 Apr 2025 12:00:39 +0000
Files and hashes:         1: 8Q057dsAjRuJ35dBlg2_IET2V_s.crl (hash: o2KtGNS0dOIkpfJqhpA3xFIx0e7ytDhTFTHH1Bmpyo8=)
                          2: PKwMXWtc8zi6lG0zPr4Lt6yvauU.roa (hash: b1FZV9Y7SIyLBl239X/9J22IOe+GTQHWzBo3nom91OY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:1e:f3:c5:8e:78:b4:5b:fa:04:82:cc:92:9c:65:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f10d39eddb008d1b89df9741960dbf2044f657fb
        Validity
            Not Before: Apr 27 12:00:39 2025 GMT
            Not After : Apr 28 12:00:39 2025 GMT
        Subject: CN=dc7fa38abbf50eaa435efddb8b3a423f33e1492f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:66:37:88:30:ee:f1:26:21:8a:4e:b0:74:ea:
                    bd:13:b4:94:b3:a3:f6:4b:2d:a8:07:2e:4e:bf:4f:
                    b5:b1:97:e9:95:eb:c1:98:14:c7:a4:1f:77:de:bc:
                    c2:4a:6d:bd:83:a8:fd:ed:19:24:24:72:65:0b:6d:
                    cd:7f:30:b6:f7:5e:bd:3c:23:07:09:c4:cf:8c:b1:
                    04:61:22:2e:00:df:b5:f2:8b:a5:44:27:78:5a:84:
                    6a:18:3c:10:6d:c5:44:9a:2c:f0:b8:15:33:45:cb:
                    56:4e:b9:7f:3f:24:52:f6:67:cf:1e:fa:af:1e:34:
                    b0:c7:fc:dc:5f:c3:ed:2a:a6:62:89:53:2c:78:72:
                    93:fe:90:25:94:54:5d:ee:6c:f7:61:29:22:d8:90:
                    f8:9d:c3:89:be:11:49:ae:60:f7:26:19:62:82:3f:
                    38:21:bf:40:58:86:52:70:4c:12:c9:25:a8:88:01:
                    b3:b8:60:21:6e:db:13:58:99:0a:a6:5b:89:14:a8:
                    c9:72:78:e2:7a:dd:12:9f:48:ec:58:c9:66:2d:3a:
                    7e:3f:69:18:07:93:69:1b:49:f0:36:0a:f8:4d:eb:
                    69:91:49:a4:c2:58:4c:94:a3:e7:f1:bd:29:69:9f:
                    83:43:e3:7e:0a:bc:15:91:e3:49:bc:1f:b3:ab:26:
                    92:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7F:A3:8A:BB:F5:0E:AA:43:5E:FD:DB:8B:3A:42:3F:33:E1:49:2F
            X509v3 Authority Key Identifier:
                keyid:F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ad:71:d2:36:8b:9f:c6:c6:c2:35:1c:d6:a5:da:02:c4:17:
         88:6a:2a:07:32:f9:00:87:0b:df:fb:76:e0:a6:2f:ab:58:61:
         d0:71:37:c7:be:6e:71:c6:61:d2:e9:ac:2a:fb:24:90:2e:f9:
         0f:b0:ad:27:67:a3:a0:3b:bf:10:09:ab:e5:ad:b3:e1:63:95:
         14:8c:24:20:3a:b2:40:8d:11:71:5c:3e:2c:93:c1:64:10:07:
         e4:23:a8:0a:b0:19:39:74:b2:f0:68:59:41:ac:69:26:56:3e:
         34:77:de:1e:cc:99:3c:a8:83:7b:83:1d:b6:d8:18:96:4e:5e:
         de:40:71:df:02:ef:43:f4:bd:7e:10:42:37:1b:41:00:b9:77:
         de:85:09:c2:45:b4:e1:f4:1d:41:dd:3b:02:4c:ab:20:80:2e:
         6f:5b:30:90:bb:93:d8:19:4f:aa:8a:8d:0d:5b:25:4f:22:58:
         c9:32:e3:4d:b7:3b:ac:a2:06:c8:9b:82:2c:1c:d5:73:7d:2a:
         cd:8c:1b:c8:5b:74:2d:61:89:4b:db:33:b5:40:a0:32:64:08:
         97:19:ba:b3:3e:4e:32:94:a0:40:72:37:63:23:9d:53:7a:0e:
         ea:59:94:56:75:8c:c6:2f:89:3a:3b:64:ca:67:26:07:6d:62:
         cd:16:10:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3HvPFjni0W/oEgsySnGVHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMGQzOWVkZGIwMDhkMWI4OWRmOTc0MTk2MGRiZjIwNDRm
NjU3ZmIwHhcNMjUwNDI3MTIwMDM5WhcNMjUwNDI4MTIwMDM5WjAzMTEwLwYDVQQD
EyhkYzdmYTM4YWJiZjUwZWFhNDM1ZWZkZGI4YjNhNDIzZjMzZTE0OTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWY3iDDu8SYhik6wdOq9E7SUs6P2
Sy2oBy5Ov0+1sZfplevBmBTHpB933rzCSm29g6j97RkkJHJlC23NfzC29169PCMH
CcTPjLEEYSIuAN+18oulRCd4WoRqGDwQbcVEmizwuBUzRctWTrl/PyRS9mfPHvqv
HjSwx/zcX8PtKqZiiVMseHKT/pAllFRd7mz3YSki2JD4ncOJvhFJrmD3Jhligj84
Ib9AWIZScEwSySWoiAGzuGAhbtsTWJkKpluJFKjJcnjiet0Sn0jsWMlmLTp+P2kY
B5NpG0nwNgr4TetpkUmkwlhMlKPn8b0paZ+DQ+N+CrwVkeNJvB+zqyaSkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNx/o4q79Q6qQ17924s6Qj8z4UkvMB8GA1UdIwQY
MBaAFPENOe3bAI0bid+XQZYNvyBE9lf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFEwNTdkc0FqUnVKMzVkQmxnMl9JRVQyVl9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mNzBlMWEtNzMyZS00ZTZiLWIzYjUt
ZjU2MmI4OTc0ZDhiLzEvOFEwNTdkc0FqUnVKMzVkQmxnMl9JRVQyVl9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mNzBlMWEtNzMyZS00ZTZiLWIzYjUtZjU2MmI4OTc0ZDhi
LzEvOFEwNTdkc0FqUnVKMzVkQmxnMl9JRVQyVl9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf61x0jaL
n8bGwjUc1qXaAsQXiGoqBzL5AIcL3/t24KYvq1hh0HE3x75uccZh0umsKvskkC75
D7CtJ2ejoDu/EAmr5a2z4WOVFIwkIDqyQI0RcVw+LJPBZBAH5COoCrAZOXSy8GhZ
QaxpJlY+NHfeHsyZPKiDe4MdttgYlk5e3kBx3wLvQ/S9fhBCNxtBALl33oUJwkW0
4fQdQd07AkyrIIAub1swkLuT2BlPqoqNDVslTyJYyTLjTbc7rKIGyJuCLBzVc30q
zYwbyFt0LWGJS9sztUCgMmQIlxm6sz5OMpSgQHI3YyOdU3oO6lmUVnWMxi+JOjtk
ymcmB21izRYQbA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:03:53 2025 by rpki-client