Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
File:                     8l2dskSP6XudF6RL5dZEhI-gGOE.mft (raw, json)
Hash identifier:          Al3mFJXMg4leMKBP82SyDkPZ9Fx8GU6+AX1IM4trrkU=
Subject key identifier:   F4:39:DB:37:7E:42:76:85:B2:69:C7:6B:D0:64:B6:0A:CC:C4:EC:C1
Authority key identifier: F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1
Certificate issuer:       /CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
Certificate serial:       019675D538455C9324EDD83F910EB3308570
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
Manifest number:          1510
Signing time:             Sun 27 Apr 2025 06:00:29 +0000
Manifest this update:     Sun 27 Apr 2025 06:00:29 +0000
Manifest next update:     Mon 28 Apr 2025 06:00:29 +0000
Files and hashes:         1: 8l2dskSP6XudF6RL5dZEhI-gGOE.crl (hash: 8LiyozpGgWY/WGb9TxR/VgwjUlVI+DJisUuqYV3ztYk=)
                          2: Mp26SDBIvgVqZ2UGJotoJUFrQYY.roa (hash: EI7XvBXkkd55hdBHcnfva3vB3xf9LKxoCK2MkhKmBG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:d5:38:45:5c:93:24:ed:d8:3f:91:0e:b3:30:85:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
        Validity
            Not Before: Apr 27 06:00:29 2025 GMT
            Not After : Apr 28 06:00:29 2025 GMT
        Subject: CN=f439db377e427685b269c76bd064b60accc4ecc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:dc:07:c6:16:ed:59:03:20:49:e2:04:a3:7c:
                    82:f1:18:ef:9b:2c:ec:2e:3f:57:89:d1:09:f1:42:
                    99:0e:24:d4:61:0a:98:33:cf:2d:02:a6:46:04:62:
                    5e:55:c1:70:44:30:56:57:43:96:59:72:18:8c:c8:
                    ed:5b:e7:51:9a:8c:de:bc:cf:e6:a1:f3:f6:b7:53:
                    e0:88:a6:42:b7:27:69:84:71:1b:46:4a:93:3b:3a:
                    80:9e:9b:94:f0:1e:50:f1:54:6b:cb:ae:98:70:8e:
                    a0:ee:01:0d:32:f9:fe:6f:51:27:c5:ed:cb:35:40:
                    d3:7a:33:cd:7c:59:e7:61:90:05:f0:a4:96:18:7c:
                    62:1e:36:9f:a8:f3:7b:30:60:97:7d:84:d1:ef:ec:
                    b5:3d:23:89:75:40:76:8a:7d:5a:8e:b0:ee:d2:45:
                    37:31:07:27:8c:96:a9:33:43:c0:e8:e3:1f:2f:f0:
                    68:94:de:16:17:a0:37:e2:56:d7:5c:4a:e6:37:7a:
                    49:b2:3e:02:84:51:c6:4b:47:7d:6c:45:bb:80:6a:
                    e0:77:de:5d:43:a7:81:62:59:96:c1:3e:3c:f0:84:
                    fd:e2:e7:5d:2b:cb:e1:f5:48:83:c1:28:fc:86:a2:
                    ac:10:78:22:a9:ff:94:02:ae:c6:c4:46:8a:d8:2a:
                    07:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:39:DB:37:7E:42:76:85:B2:69:C7:6B:D0:64:B6:0A:CC:C4:EC:C1
            X509v3 Authority Key Identifier:
                keyid:F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:4c:41:79:84:b8:03:66:9c:a7:75:33:d0:ca:5c:f9:84:21:
         4b:f5:77:f4:bb:a6:be:02:94:a1:26:b9:ec:35:37:dd:7c:7d:
         04:fe:2d:fb:c3:7f:6c:c8:7d:27:65:0f:df:ef:94:62:8a:81:
         76:87:f7:01:02:e4:b6:7c:9e:56:40:b3:6a:a1:31:18:d3:ac:
         13:a9:a6:61:83:16:d9:c3:ae:90:8f:ca:33:d7:8e:ee:e8:7f:
         19:db:f3:8d:18:ca:59:04:a1:f7:e9:f7:1e:95:e2:34:69:cc:
         22:2e:7f:c0:3b:34:55:23:40:98:35:65:e7:9e:d6:24:9a:f0:
         8e:3f:5b:f7:d8:4b:e1:8d:d0:31:8b:fb:39:0b:f4:c5:44:85:
         37:73:e8:07:ab:45:55:5e:9c:0b:76:63:88:0a:69:79:0d:f0:
         87:b4:ae:82:e2:03:ce:0e:fe:b8:6f:99:a9:07:49:54:a3:4c:
         e3:90:9a:7e:3e:37:f9:b8:03:3d:3f:2e:1d:e2:18:80:2c:76:
         b4:19:c9:4e:68:e8:2d:f4:8f:9e:45:a6:29:b8:73:f9:3a:1e:
         66:11:ee:17:f1:8b:fb:69:1e:8e:9c:5f:b9:08:81:54:65:35:
         47:40:ef:4b:67:99:e0:c3:b1:74:0c:6e:c5:b3:80:19:bd:5e:
         ad:6b:7b:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ11ThFXJMk7dg/kQ6zMIVwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNWQ5ZGIyNDQ4ZmU5N2I5ZDE3YTQ0YmU1ZDY0NDg0OGZh
MDE4ZTEwHhcNMjUwNDI3MDYwMDI5WhcNMjUwNDI4MDYwMDI5WjAzMTEwLwYDVQQD
EyhmNDM5ZGIzNzdlNDI3Njg1YjI2OWM3NmJkMDY0YjYwYWNjYzRlY2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NwHxhbtWQMgSeIEo3yC8Rjvmyzs
Lj9XidEJ8UKZDiTUYQqYM88tAqZGBGJeVcFwRDBWV0OWWXIYjMjtW+dRmozevM/m
ofP2t1PgiKZCtydphHEbRkqTOzqAnpuU8B5Q8VRry66YcI6g7gENMvn+b1Enxe3L
NUDTejPNfFnnYZAF8KSWGHxiHjafqPN7MGCXfYTR7+y1PSOJdUB2in1ajrDu0kU3
MQcnjJapM0PA6OMfL/BolN4WF6A34lbXXErmN3pJsj4ChFHGS0d9bEW7gGrgd95d
Q6eBYlmWwT488IT94uddK8vh9UiDwSj8hqKsEHgiqf+UAq7GxEaK2CoHzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQ52zd+QnaFsmnHa9BktgrMxOzBMB8GA1UdIwQY
MBaAFPJdnbJEj+l7nRekS+XWRISPoBjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGwyZHNrU1A2WHVkRjZSTDVkWkVoSS1nR09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81MTYwOGYtZmQ0Yi00MjY4LWE2ZTMt
NWVjYjIxZmNmYTc1LzEvOGwyZHNrU1A2WHVkRjZSTDVkWkVoSS1nR09FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS81MTYwOGYtZmQ0Yi00MjY4LWE2ZTMtNWVjYjIxZmNmYTc1
LzEvOGwyZHNrU1A2WHVkRjZSTDVkWkVoSS1nR09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkxBeYS4
A2acp3Uz0Mpc+YQhS/V39LumvgKUoSa57DU33Xx9BP4t+8N/bMh9J2UP3++UYoqB
dof3AQLktnyeVkCzaqExGNOsE6mmYYMW2cOukI/KM9eO7uh/GdvzjRjKWQSh9+n3
HpXiNGnMIi5/wDs0VSNAmDVl557WJJrwjj9b99hL4Y3QMYv7OQv0xUSFN3PoB6tF
VV6cC3ZjiAppeQ3wh7SuguIDzg7+uG+ZqQdJVKNM45Cafj43+bgDPT8uHeIYgCx2
tBnJTmjoLfSPnkWmKbhz+ToeZhHuF/GL+2kejpxfuQiBVGU1R0DvS2eZ4MOxdAxu
xbOAGb1erWt7MA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:02:54 2025 by rpki-client