Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/91f265-777b-43b8-a354-03a79d1cac56/1/7UHARIMai6EJ1CYpau5lONy1S2M.mft
File:                     7UHARIMai6EJ1CYpau5lONy1S2M.mft (raw, json)
Hash identifier:          5Z2mVzfZQdeXlnMpZLaB7tTfXqYHNP34rbmFWFsmI6Y=
Subject key identifier:   B8:D7:8A:CA:27:7A:3C:41:A2:DE:52:E6:A7:79:B4:EB:1A:0D:66:E2
Authority key identifier: ED:41:C0:44:83:1A:8B:A1:09:D4:26:29:6A:EE:65:38:DC:B5:4B:63
Certificate issuer:       /CN=ed41c044831a8ba109d426296aee6538dcb54b63
Certificate serial:       0196876DE4D68B16FC236D65F9DB012059E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UHARIMai6EJ1CYpau5lONy1S2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/91f265-777b-43b8-a354-03a79d1cac56/1/7UHARIMai6EJ1CYpau5lONy1S2M.mft
Manifest number:          0616
Signing time:             Wed 30 Apr 2025 16:00:48 +0000
Manifest this update:     Wed 30 Apr 2025 16:00:48 +0000
Manifest next update:     Thu 01 May 2025 16:00:48 +0000
Files and hashes:         1: 7UHARIMai6EJ1CYpau5lONy1S2M.crl (hash: wgPdWfJOTWonXGjCgYRzsxXWHoG4xGY3THY/P+cGoW4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/91f265-777b-43b8-a354-03a79d1cac56/1/7UHARIMai6EJ1CYpau5lONy1S2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/91f265-777b-43b8-a354-03a79d1cac56/1/7UHARIMai6EJ1CYpau5lONy1S2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UHARIMai6EJ1CYpau5lONy1S2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:87:6d:e4:d6:8b:16:fc:23:6d:65:f9:db:01:20:59:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed41c044831a8ba109d426296aee6538dcb54b63
        Validity
            Not Before: Apr 30 16:00:48 2025 GMT
            Not After : May  1 16:00:48 2025 GMT
        Subject: CN=b8d78aca277a3c41a2de52e6a779b4eb1a0d66e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:65:b7:ed:d6:18:a6:85:ab:d6:32:0d:11:c0:
                    fd:82:35:2e:99:0b:14:16:9e:a0:f2:8b:72:e0:13:
                    5e:16:b5:7a:42:17:b3:fa:7e:56:3d:26:e6:40:b6:
                    80:a3:94:bc:cf:a4:f3:08:37:4f:0a:d7:7f:00:e9:
                    64:c0:2f:23:aa:6b:60:33:71:52:a1:78:ad:2c:22:
                    3c:79:b9:40:e7:c9:cc:2d:b5:30:66:68:ca:be:50:
                    71:0d:91:0f:0d:cd:b2:2a:a4:7e:cd:a7:39:e2:9a:
                    85:78:2c:26:37:0c:25:62:f9:80:d1:2d:2a:41:2a:
                    ff:d2:64:2b:1b:b1:c0:ef:3b:df:a0:0a:cb:9e:a0:
                    a6:51:79:38:5d:65:01:16:11:72:d2:13:41:e3:68:
                    d4:cc:47:c2:8f:43:7f:7a:c3:26:0c:a3:0f:c1:0d:
                    4e:a7:12:7c:2b:9f:44:2e:32:43:c6:04:b0:72:09:
                    63:1a:63:0e:85:dc:ac:79:ff:e6:ba:f5:30:16:de:
                    7a:fe:d4:61:32:6f:e7:9a:c0:6d:fc:48:e5:44:69:
                    4d:3a:28:13:9d:be:02:4b:b3:ff:37:3a:cf:ee:70:
                    65:46:59:62:cc:91:37:bb:77:2a:15:b3:16:ee:73:
                    53:bf:33:63:d6:c5:22:02:e9:a8:58:12:ab:6a:54:
                    5e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D7:8A:CA:27:7A:3C:41:A2:DE:52:E6:A7:79:B4:EB:1A:0D:66:E2
            X509v3 Authority Key Identifier:
                keyid:ED:41:C0:44:83:1A:8B:A1:09:D4:26:29:6A:EE:65:38:DC:B5:4B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UHARIMai6EJ1CYpau5lONy1S2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/91f265-777b-43b8-a354-03a79d1cac56/1/7UHARIMai6EJ1CYpau5lONy1S2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/91f265-777b-43b8-a354-03a79d1cac56/1/7UHARIMai6EJ1CYpau5lONy1S2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:7d:b8:e5:32:64:d8:fc:c6:e3:cc:99:d8:f4:ae:a2:cf:94:
         0f:01:ed:13:37:51:e6:7f:3e:c7:04:a5:1d:09:fa:8d:7c:6a:
         0e:0c:86:06:e7:f2:3c:43:7d:17:ba:e8:c0:66:47:46:15:74:
         39:36:c2:34:31:99:6c:c4:db:1e:a3:9b:ca:7e:10:cc:d0:90:
         24:7f:1b:5e:c2:65:50:7e:1e:64:96:2f:12:84:bd:68:ae:42:
         ea:93:8d:21:1e:3c:95:e6:58:4a:3f:99:69:7c:35:90:6d:ee:
         7e:fe:1a:6a:07:fe:71:80:1c:37:5c:08:b9:cf:af:fd:d0:63:
         a6:b9:09:59:e0:da:55:a3:01:79:03:45:0c:87:94:f2:23:d1:
         9d:ab:de:18:da:38:3a:bb:a5:e7:c8:d5:9c:e0:11:40:b5:97:
         2d:d9:fc:68:dc:65:71:31:4f:88:22:94:c1:a5:a6:ab:01:73:
         2d:70:2e:ab:76:d5:f4:ad:ab:36:2b:a7:27:4a:a0:7a:82:9d:
         d0:0d:73:6d:4e:07:87:5b:31:a8:39:10:14:9a:cb:ae:8b:02:
         6f:80:05:e0:5b:60:5e:81:a7:fa:e7:49:27:83:c3:db:3a:5d:
         2e:87:d6:5b:70:19:6e:d1:68:fa:b8:2a:b6:71:32:93:e2:89:
         cd:cd:6b:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaHbeTWixb8I21l+dsBIFnnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNDFjMDQ0ODMxYThiYTEwOWQ0MjYyOTZhZWU2NTM4ZGNi
NTRiNjMwHhcNMjUwNDMwMTYwMDQ4WhcNMjUwNTAxMTYwMDQ4WjAzMTEwLwYDVQQD
EyhiOGQ3OGFjYTI3N2EzYzQxYTJkZTUyZTZhNzc5YjRlYjFhMGQ2NmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2W37dYYpoWr1jINEcD9gjUumQsU
Fp6g8oty4BNeFrV6Qhez+n5WPSbmQLaAo5S8z6TzCDdPCtd/AOlkwC8jqmtgM3FS
oXitLCI8eblA58nMLbUwZmjKvlBxDZEPDc2yKqR+zac54pqFeCwmNwwlYvmA0S0q
QSr/0mQrG7HA7zvfoArLnqCmUXk4XWUBFhFy0hNB42jUzEfCj0N/esMmDKMPwQ1O
pxJ8K59ELjJDxgSwcgljGmMOhdysef/muvUwFt56/tRhMm/nmsBt/EjlRGlNOigT
nb4CS7P/NzrP7nBlRllizJE3u3cqFbMW7nNTvzNj1sUiAumoWBKralReAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjXisonejxBot5S5qd5tOsaDWbiMB8GA1UdIwQY
MBaAFO1BwESDGouhCdQmKWruZTjctUtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1VIQVJJTWFpNkVKMUNZcGF1NWxPTnkxUzJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85MWYyNjUtNzc3Yi00M2I4LWEzNTQt
MDNhNzlkMWNhYzU2LzEvN1VIQVJJTWFpNkVKMUNZcGF1NWxPTnkxUzJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC85MWYyNjUtNzc3Yi00M2I4LWEzNTQtMDNhNzlkMWNhYzU2
LzEvN1VIQVJJTWFpNkVKMUNZcGF1NWxPTnkxUzJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3245TJk
2PzG48yZ2PSuos+UDwHtEzdR5n8+xwSlHQn6jXxqDgyGBufyPEN9F7rowGZHRhV0
OTbCNDGZbMTbHqObyn4QzNCQJH8bXsJlUH4eZJYvEoS9aK5C6pONIR48leZYSj+Z
aXw1kG3ufv4aagf+cYAcN1wIuc+v/dBjprkJWeDaVaMBeQNFDIeU8iPRnaveGNo4
Orul58jVnOARQLWXLdn8aNxlcTFPiCKUwaWmqwFzLXAuq3bV9K2rNiunJ0qgeoKd
0A1zbU4Hh1sxqDkQFJrLrosCb4AF4FtgXoGn+udJJ4PD2zpdLofWW3AZbtFo+rgq
tnEyk+KJzc1rug==
-----END CERTIFICATE-----
Generated at Wed Apr 30 23:36:37 2025 by rpki-client