Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
File:                     _q5Ur85RVFR5wNoD8gGnTimSfXg.mft (raw, json)
Hash identifier:          aqX/LagXbmllab57QqATDibJ20QMsKo7RA/X4g38ct0=
Subject key identifier:   CF:B1:BE:0A:87:7E:66:B0:8C:6E:2A:CB:7B:CF:AB:AB:22:1C:4F:EC
Authority key identifier: FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
Certificate issuer:       /CN=feae54afce51545479c0da03f201a74e29927d78
Certificate serial:       01968E146CB4FDB629A0AA4CB90937B188AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
Manifest number:          054A
Signing time:             Thu 01 May 2025 23:00:25 +0000
Manifest this update:     Thu 01 May 2025 23:00:25 +0000
Manifest next update:     Fri 02 May 2025 23:00:25 +0000
Files and hashes:         1: _q5Ur85RVFR5wNoD8gGnTimSfXg.crl (hash: xoPkOb1p7iid/oSnUm2quKS2PmekD2EJjDeX5nVJ9zY=)
                          2: lZoUgcddrDnXe4fT6Iyd3y19EFw.roa (hash: XV7kQikecJKDAAiTDNdfiups4qb65I8y80bxuDG+ZNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 23:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8e:14:6c:b4:fd:b6:29:a0:aa:4c:b9:09:37:b1:88:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feae54afce51545479c0da03f201a74e29927d78
        Validity
            Not Before: May  1 23:00:25 2025 GMT
            Not After : May  2 23:00:25 2025 GMT
        Subject: CN=cfb1be0a877e66b08c6e2acb7bcfabab221c4fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:0c:0c:11:c6:11:f6:d9:1e:72:5f:ae:7b:d5:
                    fd:9d:b1:85:c8:82:4a:30:0d:b4:70:be:f1:07:ba:
                    b2:10:de:6e:6b:14:62:17:12:c9:ca:46:f8:85:5b:
                    33:43:e7:2a:0e:1a:01:11:f4:a8:1f:f8:5f:8e:a6:
                    aa:ad:ba:ab:ba:93:8c:94:f1:16:7a:0a:c8:5c:8d:
                    d2:56:86:d0:a8:4b:7b:bb:e2:34:29:35:c2:1a:5a:
                    d3:2a:31:d5:a8:98:c0:01:4e:f3:2a:0e:5f:5e:90:
                    8b:52:b9:15:63:51:09:13:94:21:ce:ce:62:35:3d:
                    71:29:d8:fe:3b:46:07:5d:2c:2a:c6:cb:03:57:6b:
                    73:6f:79:6a:fa:48:9d:5f:78:59:a0:bc:b9:2a:db:
                    cc:59:5d:d6:41:0a:bd:cb:4c:af:3c:93:31:c3:e1:
                    2c:25:22:50:a9:29:1c:4b:98:1b:b7:b2:7c:95:ee:
                    3a:e3:10:d8:59:27:e1:26:bf:24:0c:b4:65:a7:5c:
                    0a:2c:07:68:db:66:85:a9:40:c6:95:88:ac:7c:f9:
                    f0:47:58:36:1e:15:0c:71:f5:2a:eb:dc:ef:a3:d9:
                    fc:73:0d:97:50:99:fe:86:6d:67:f2:0a:17:5a:84:
                    ab:9c:c9:f3:64:5a:7a:09:87:98:9d:36:85:04:b4:
                    7d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B1:BE:0A:87:7E:66:B0:8C:6E:2A:CB:7B:CF:AB:AB:22:1C:4F:EC
            X509v3 Authority Key Identifier:
                keyid:FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:25:b5:9e:ab:07:1e:7b:79:55:4f:dc:d1:9f:05:eb:bc:f7:
         dd:b8:11:8d:c9:b2:41:c3:45:6d:58:5a:d1:6a:76:bc:6b:23:
         1a:05:ad:cb:ab:38:72:b1:a7:ee:0e:b6:38:cb:a1:e3:14:0b:
         57:a5:c4:8d:4e:f3:fc:80:5a:58:f2:3b:da:79:1b:48:78:f0:
         d8:50:a4:16:d9:fe:d7:1f:64:13:43:e4:74:00:6d:83:ef:95:
         e0:d8:2d:9d:0f:00:da:3f:60:95:76:58:77:7c:07:d6:01:22:
         30:3a:76:07:9e:ed:ab:ca:ca:d8:d3:f5:76:25:25:0f:e9:5d:
         fd:c6:bf:52:42:91:9a:b6:6d:7f:50:af:b7:91:e3:48:99:46:
         e7:29:86:02:ed:df:5c:7e:61:7b:2f:bc:c9:be:1c:76:e1:73:
         53:bc:47:70:79:23:4a:48:65:9b:d5:26:23:c9:3c:82:e8:62:
         54:b8:d5:03:f8:7c:e9:f3:be:8f:86:76:08:f2:67:c6:03:34:
         ff:fc:63:89:da:fe:58:26:ad:a1:ba:c9:68:18:55:0a:e2:e3:
         29:9e:71:6f:f9:10:29:16:75:09:e5:83:df:23:58:31:5c:0c:
         4b:a2:c4:3c:94:a4:bf:42:e8:ea:c8:02:cf:bc:a6:c0:c3:3e:
         40:b6:65:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaOFGy0/bYpoKpMuQk3sYivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYWU1NGFmY2U1MTU0NTQ3OWMwZGEwM2YyMDFhNzRlMjk5
MjdkNzgwHhcNMjUwNTAxMjMwMDI1WhcNMjUwNTAyMjMwMDI1WjAzMTEwLwYDVQQD
EyhjZmIxYmUwYTg3N2U2NmIwOGM2ZTJhY2I3YmNmYWJhYjIyMWM0ZmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8wwMEcYR9tkecl+ue9X9nbGFyIJK
MA20cL7xB7qyEN5uaxRiFxLJykb4hVszQ+cqDhoBEfSoH/hfjqaqrbqrupOMlPEW
egrIXI3SVobQqEt7u+I0KTXCGlrTKjHVqJjAAU7zKg5fXpCLUrkVY1EJE5Qhzs5i
NT1xKdj+O0YHXSwqxssDV2tzb3lq+kidX3hZoLy5KtvMWV3WQQq9y0yvPJMxw+Es
JSJQqSkcS5gbt7J8le464xDYWSfhJr8kDLRlp1wKLAdo22aFqUDGlYisfPnwR1g2
HhUMcfUq69zvo9n8cw2XUJn+hm1n8goXWoSrnMnzZFp6CYeYnTaFBLR9MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+xvgqHfmawjG4qy3vPq6siHE/sMB8GA1UdIwQY
MBaAFP6uVK/OUVRUecDaA/IBp04pkn14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3E1VXI4NVJWRlI1d05vRDhnR25UaW1TZlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80ZjAyNjktOTgxOC00MTIzLWJjYmYt
N2E2NTIzMDNhMjhhLzEvX3E1VXI4NVJWRlI1d05vRDhnR25UaW1TZlhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80ZjAyNjktOTgxOC00MTIzLWJjYmYtN2E2NTIzMDNhMjhh
LzEvX3E1VXI4NVJWRlI1d05vRDhnR25UaW1TZlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyW1nqsH
Hnt5VU/c0Z8F67z33bgRjcmyQcNFbVha0Wp2vGsjGgWty6s4crGn7g62OMuh4xQL
V6XEjU7z/IBaWPI72nkbSHjw2FCkFtn+1x9kE0PkdABtg++V4NgtnQ8A2j9glXZY
d3wH1gEiMDp2B57tq8rK2NP1diUlD+ld/ca/UkKRmrZtf1Cvt5HjSJlG5ymGAu3f
XH5hey+8yb4cduFzU7xHcHkjSkhlm9UmI8k8guhiVLjVA/h86fO+j4Z2CPJnxgM0
//xjidr+WCatobrJaBhVCuLjKZ5xb/kQKRZ1CeWD3yNYMVwMS6LEPJSkv0Lo6sgC
z7ymwMM+QLZlYg==
-----END CERTIFICATE-----
Generated at Fri May 2 08:55:46 2025 by rpki-client