Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
File:                     4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft (raw, json)
Hash identifier:          dF9F2R38TSKad0FfgGs27hV13ssGIwQQ7otEyjfbUpk=
Subject key identifier:   23:27:EE:71:2C:57:DC:07:3D:FD:2D:F1:36:41:65:81:1B:AF:35:39
Authority key identifier: E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6
Certificate issuer:       /CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6
Certificate serial:       019680C701BCF5EEBC4CEAAA5E41F2035AA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
Manifest number:          0193
Signing time:             Tue 29 Apr 2025 09:00:47 +0000
Manifest this update:     Tue 29 Apr 2025 09:00:47 +0000
Manifest next update:     Wed 30 Apr 2025 09:00:47 +0000
Files and hashes:         1: 4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl (hash: PVh1UYfWT/+9Oiiwq6/Fk48ncLmY7J7mkfztussG2kA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 09:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:c7:01:bc:f5:ee:bc:4c:ea:aa:5e:41:f2:03:5a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6
        Validity
            Not Before: Apr 29 09:00:47 2025 GMT
            Not After : Apr 30 09:00:47 2025 GMT
        Subject: CN=2327ee712c57dc073dfd2df1364165811baf3539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d1:04:44:03:19:72:f6:8c:b9:44:d0:cb:33:
                    f4:5e:b8:30:8c:74:72:97:74:44:90:80:0a:15:3c:
                    48:34:35:c1:b7:88:41:e5:26:02:61:01:31:81:1e:
                    be:cc:a7:1b:0c:03:cf:01:b7:ed:03:46:d2:62:b0:
                    19:5a:f8:83:e5:f4:3d:d2:ba:10:df:08:dd:e7:57:
                    f2:93:a4:21:a4:75:b8:89:17:ea:cd:4c:90:9c:17:
                    79:5d:97:9b:5b:53:bd:2a:06:63:93:3a:7a:bc:a8:
                    bd:17:be:0e:e0:f7:ba:ef:33:58:6c:48:f2:fc:87:
                    73:a0:f7:7f:fe:af:46:32:47:85:fd:ad:bf:d9:fc:
                    e9:02:38:27:f8:6b:0c:e0:b8:34:fc:60:37:5c:c0:
                    0d:81:a3:a9:d0:93:b7:be:cf:ac:a8:0a:46:d4:27:
                    8e:a5:1a:ca:90:d8:3a:35:0f:ff:e0:9a:7b:4a:dc:
                    c6:0d:f3:a1:33:2a:3a:d5:e5:1e:85:1e:af:e6:24:
                    7b:59:9c:0e:0b:dc:d2:a0:28:90:2d:a2:2b:7f:6b:
                    5f:72:07:8e:7c:df:9c:3c:7a:b9:33:48:d2:6f:1a:
                    b1:1c:6f:9e:81:41:4a:9c:a7:e3:a2:11:68:4e:6e:
                    59:2d:05:35:ae:3a:d1:57:3d:82:58:4b:c4:7c:4a:
                    a4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:27:EE:71:2C:57:DC:07:3D:FD:2D:F1:36:41:65:81:1B:AF:35:39
            X509v3 Authority Key Identifier:
                keyid:E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:9d:04:5b:6e:ae:1f:56:7b:31:63:5d:b9:29:41:13:50:6c:
         85:52:49:22:a3:7e:3c:41:af:38:e4:9e:96:00:68:a7:bf:6d:
         4c:20:32:7c:e8:e8:aa:ad:51:6a:8e:45:34:ef:a1:37:77:d1:
         b7:0f:9e:65:c0:a2:bc:01:12:a4:be:7b:45:12:e1:97:4a:0f:
         a7:85:ce:ef:06:2f:5c:f8:aa:38:74:ba:00:7d:80:bc:15:18:
         77:30:74:7f:62:23:a5:f7:26:30:b7:ec:41:70:51:24:d2:06:
         f3:97:31:7d:38:bd:7c:4d:4e:7b:41:b1:a5:de:58:f5:55:ba:
         a9:d7:31:9f:53:9a:ad:c8:1c:a1:df:6c:bc:2b:16:89:8f:b5:
         70:38:2b:74:c2:19:e3:9f:73:c2:0f:71:81:f3:24:a6:9a:c9:
         ce:a4:ed:84:66:86:b2:a1:8d:ce:ac:0c:da:a8:d8:5c:27:58:
         72:b3:28:26:5c:42:97:dc:95:50:3a:50:a9:1c:6b:4a:e3:da:
         90:6f:cd:e6:db:8e:ae:85:20:3d:94:75:61:81:ea:2e:d6:fe:
         fb:76:f2:e4:3a:fd:a4:dd:c5:47:43:c1:95:c8:db:09:a7:80:
         bd:67:ac:a2:08:a9:6e:67:02:c0:28:cc:6d:07:f7:17:73:e4:
         26:53:e2:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAxwG89e68TOqqXkHyA1qpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNGJlMjlkNGZlMGM0Yzg0MzUwMTcyYThhMzQ5NmNjNjY3
YzEzZjYwHhcNMjUwNDI5MDkwMDQ3WhcNMjUwNDMwMDkwMDQ3WjAzMTEwLwYDVQQD
EygyMzI3ZWU3MTJjNTdkYzA3M2RmZDJkZjEzNjQxNjU4MTFiYWYzNTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtEERAMZcvaMuUTQyzP0XrgwjHRy
l3REkIAKFTxINDXBt4hB5SYCYQExgR6+zKcbDAPPAbftA0bSYrAZWviD5fQ90roQ
3wjd51fyk6QhpHW4iRfqzUyQnBd5XZebW1O9KgZjkzp6vKi9F74O4Pe67zNYbEjy
/IdzoPd//q9GMkeF/a2/2fzpAjgn+GsM4Lg0/GA3XMANgaOp0JO3vs+sqApG1CeO
pRrKkNg6NQ//4Jp7StzGDfOhMyo61eUehR6v5iR7WZwOC9zSoCiQLaIrf2tfcgeO
fN+cPHq5M0jSbxqxHG+egUFKnKfjohFoTm5ZLQU1rjrRVz2CWEvEfEqkEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMn7nEsV9wHPf0t8TZBZYEbrzU5MB8GA1UdIwQY
MBaAFOJL4p1P4MTIQ1AXKoo0lsxmfBP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGt2aW5VX2d4TWhEVUJjcWlqU1d6R1o4RV9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yZmMyZmEtZDRhYS00ODVlLWFjYjct
ZDhmZWNjYmQ2NThjLzEvNGt2aW5VX2d4TWhEVUJjcWlqU1d6R1o4RV9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yZmMyZmEtZDRhYS00ODVlLWFjYjctZDhmZWNjYmQ2NThj
LzEvNGt2aW5VX2d4TWhEVUJjcWlqU1d6R1o4RV9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMp0EW26u
H1Z7MWNduSlBE1BshVJJIqN+PEGvOOSelgBop79tTCAyfOjoqq1Rao5FNO+hN3fR
tw+eZcCivAESpL57RRLhl0oPp4XO7wYvXPiqOHS6AH2AvBUYdzB0f2IjpfcmMLfs
QXBRJNIG85cxfTi9fE1Oe0Gxpd5Y9VW6qdcxn1Oarcgcod9svCsWiY+1cDgrdMIZ
459zwg9xgfMkpprJzqTthGaGsqGNzqwM2qjYXCdYcrMoJlxCl9yVUDpQqRxrSuPa
kG/N5tuOroUgPZR1YYHqLtb++3by5Dr9pN3FR0PBlcjbCaeAvWesogipbmcCwCjM
bQf3F3PkJlPiJQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:38:23 2025 by rpki-client