Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
File:                     5XB6RVkqydFxmoV2lgMXeCm0bgo.mft (raw, json)
Hash identifier:          M3Yq0l+cvEtBvWmtZgUt5dzASqSlaH6osCV6wZYRwwI=
Subject key identifier:   56:4C:1B:9D:7C:94:26:D3:08:98:99:C1:2E:5A:3A:2A:75:D8:90:6E
Authority key identifier: E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
Certificate issuer:       /CN=e5707a45592ac9d1719a85769603177829b46e0a
Certificate serial:       0196748B8DDF22A4C5CFA1F793F1187B99DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
Manifest number:          0B0C
Signing time:             Sun 27 Apr 2025 00:00:24 +0000
Manifest this update:     Sun 27 Apr 2025 00:00:24 +0000
Manifest next update:     Mon 28 Apr 2025 00:00:24 +0000
Files and hashes:         1: 5XB6RVkqydFxmoV2lgMXeCm0bgo.crl (hash: tdhjPKpfEPunM+ZozAX+BrvqQG3w47Wv8/o8o0smma0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:8b:8d:df:22:a4:c5:cf:a1:f7:93:f1:18:7b:99:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5707a45592ac9d1719a85769603177829b46e0a
        Validity
            Not Before: Apr 27 00:00:24 2025 GMT
            Not After : Apr 28 00:00:24 2025 GMT
        Subject: CN=564c1b9d7c9426d3089899c12e5a3a2a75d8906e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ee:d0:61:84:5d:53:61:48:57:53:32:7b:f1:
                    07:ea:91:a7:2b:4a:6a:bf:68:c6:ba:67:23:1a:21:
                    53:4f:ac:93:15:67:62:d6:47:93:15:65:61:43:c1:
                    01:ca:7d:f2:72:06:98:dc:1c:99:db:14:ef:f6:c8:
                    28:4b:34:15:60:fa:49:72:19:29:a3:dc:32:49:71:
                    22:00:1a:8b:41:a8:29:81:9e:a3:ce:a8:50:7c:bd:
                    32:29:9f:11:f1:b1:65:e9:e2:45:1c:10:c9:f5:dc:
                    28:17:d0:34:39:e7:6e:04:0f:eb:d9:25:85:53:03:
                    28:9c:21:72:d7:5a:8b:d1:ec:f9:73:ed:33:fc:48:
                    7b:a6:ef:7e:77:e8:ab:6f:e0:d6:af:35:8b:ac:66:
                    d0:80:d1:e1:e0:55:d8:c5:05:49:a6:c7:c9:81:a9:
                    b3:a6:ec:16:a7:18:fe:8c:7e:27:f5:3b:ae:b2:0c:
                    28:9b:23:24:a2:b8:0d:04:02:98:8a:45:aa:ce:d3:
                    85:3a:c2:81:9c:3d:85:17:bb:d1:1d:61:60:fc:d0:
                    a7:67:d6:f5:99:cc:1e:08:66:2b:b7:fe:21:d3:1f:
                    2c:6d:54:f6:23:c8:38:84:99:1b:67:ec:e5:2c:85:
                    ad:0d:72:2c:fb:a4:2f:a3:54:f7:97:26:a0:2b:3e:
                    99:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4C:1B:9D:7C:94:26:D3:08:98:99:C1:2E:5A:3A:2A:75:D8:90:6E
            X509v3 Authority Key Identifier:
                keyid:E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:ef:6e:29:39:bb:67:b4:22:fe:cc:f3:5c:68:83:ec:6c:83:
         90:9d:b9:0f:c6:f2:a2:2c:2b:ca:ea:28:a4:c3:26:d6:66:b3:
         51:84:46:bc:6d:ae:fb:c5:19:fb:25:63:f0:2c:53:23:46:16:
         e6:87:e1:ec:6c:c0:dd:5f:53:72:5c:f4:3c:b6:35:4a:78:69:
         72:19:14:a6:e3:cc:71:5b:c8:ea:67:b5:f2:da:83:2f:6d:a6:
         dd:4b:bf:d1:aa:70:4b:87:38:a2:9d:ac:6a:f8:82:2e:d2:56:
         9a:95:0e:00:38:00:55:bc:ba:5f:d6:c8:5a:03:da:c8:36:25:
         30:84:10:ca:a1:f1:29:d2:90:17:de:8b:0f:35:fa:52:c3:ec:
         12:14:b8:b9:2b:2f:ac:62:9f:a4:97:94:13:13:d6:cd:6a:45:
         3e:d8:54:3d:63:4f:20:c3:ab:47:e3:65:59:27:e5:e5:bd:87:
         60:cb:56:9d:0d:78:b5:35:ec:03:42:bb:ce:18:03:08:c8:45:
         72:d9:53:a4:ba:5a:48:fd:e7:1f:4c:05:a9:9e:84:fb:09:36:
         a1:44:59:0c:a5:0d:1d:81:02:b2:b6:09:13:53:cf:23:88:27:
         36:f0:05:fb:17:80:d1:fe:12:2c:7c:6f:24:58:2b:31:07:8c:
         30:93:81:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0i43fIqTFz6H3k/EYe5nbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzA3YTQ1NTkyYWM5ZDE3MTlhODU3Njk2MDMxNzc4Mjli
NDZlMGEwHhcNMjUwNDI3MDAwMDI0WhcNMjUwNDI4MDAwMDI0WjAzMTEwLwYDVQQD
Eyg1NjRjMWI5ZDdjOTQyNmQzMDg5ODk5YzEyZTVhM2EyYTc1ZDg5MDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve7QYYRdU2FIV1Mye/EH6pGnK0pq
v2jGumcjGiFTT6yTFWdi1keTFWVhQ8EByn3ycgaY3ByZ2xTv9sgoSzQVYPpJchkp
o9wySXEiABqLQagpgZ6jzqhQfL0yKZ8R8bFl6eJFHBDJ9dwoF9A0OeduBA/r2SWF
UwMonCFy11qL0ez5c+0z/Eh7pu9+d+irb+DWrzWLrGbQgNHh4FXYxQVJpsfJgamz
puwWpxj+jH4n9TuusgwomyMkorgNBAKYikWqztOFOsKBnD2FF7vRHWFg/NCnZ9b1
mcweCGYrt/4h0x8sbVT2I8g4hJkbZ+zlLIWtDXIs+6Qvo1T3lyagKz6Z7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZMG518lCbTCJiZwS5aOip12JBuMB8GA1UdIwQY
MBaAFOVwekVZKsnRcZqFdpYDF3gptG4KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhCNlJWa3F5ZEZ4bW9WMmxnTVhlQ20wYmdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xNDQ2YWEtNmU0MS00NWMwLWIwOWEt
MzJjMzY1OGIyNWJlLzEvNVhCNlJWa3F5ZEZ4bW9WMmxnTVhlQ20wYmdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xNDQ2YWEtNmU0MS00NWMwLWIwOWEtMzJjMzY1OGIyNWJl
LzEvNVhCNlJWa3F5ZEZ4bW9WMmxnTVhlQ20wYmdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+9uKTm7
Z7Qi/szzXGiD7GyDkJ25D8byoiwryuoopMMm1mazUYRGvG2u+8UZ+yVj8CxTI0YW
5ofh7GzA3V9Tclz0PLY1SnhpchkUpuPMcVvI6me18tqDL22m3Uu/0apwS4c4op2s
aviCLtJWmpUOADgAVby6X9bIWgPayDYlMIQQyqHxKdKQF96LDzX6UsPsEhS4uSsv
rGKfpJeUExPWzWpFPthUPWNPIMOrR+NlWSfl5b2HYMtWnQ14tTXsA0K7zhgDCMhF
ctlTpLpaSP3nH0wFqZ6E+wk2oURZDKUNHYECsrYJE1PPI4gnNvAF+xeA0f4SLHxv
JFgrMQeMMJOBrA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:41:07 2025 by rpki-client