Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
File:                     R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft (raw, json)
Hash identifier:          lGdxGfx6TgWnbrjEsxse0ig5FdP3gB4Hqlfa38xI4qQ=
Subject key identifier:   31:28:57:14:4E:26:42:7C:4E:3F:1B:B2:00:5D:CA:0C:6F:E9:33:1B
Authority key identifier: 47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4
Certificate issuer:       /CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
Certificate serial:       01984777D770926CEAB38FDEA16517F3F5A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
Manifest number:          0F
Signing time:             Sat 26 Jul 2025 16:01:32 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:32 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:32 +0000
Files and hashes:         1: R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl (hash: bWWvEazI8tIUtmTaWZZAx1ukJjgHzGEBXnJvUTh6piA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 16:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:d7:70:92:6c:ea:b3:8f:de:a1:65:17:f3:f5:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
        Validity
            Not Before: Jul 26 16:01:32 2025 GMT
            Not After : Jul 27 16:01:32 2025 GMT
        Subject: CN=312857144e26427c4e3f1bb2005dca0c6fe9331b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ec:41:47:e0:a8:2e:36:23:a7:d2:e5:3b:03:
                    cd:f0:0c:88:7b:a4:c6:cf:0b:4e:8e:44:68:32:42:
                    3e:c9:40:07:ae:03:19:73:60:87:56:8c:2a:f0:f3:
                    11:ae:a4:de:54:af:73:9d:22:82:a2:8f:ea:33:26:
                    c4:40:ac:80:aa:7c:8b:5a:5e:7f:e2:ee:87:63:cd:
                    e8:3f:85:b6:1d:d2:4b:b4:75:c9:ea:47:47:8a:b5:
                    51:aa:73:09:e3:5b:48:92:33:89:da:20:a2:48:09:
                    9a:0a:56:df:30:00:0a:02:ad:f2:18:e7:59:f1:cd:
                    25:18:02:4d:a6:ad:b7:63:f8:9b:7a:5f:6b:0a:44:
                    34:7d:76:5d:93:72:3e:36:69:a9:db:8c:79:36:28:
                    60:78:d9:03:bf:5e:5c:7e:7d:4a:de:19:4b:54:68:
                    9d:32:7a:0e:2c:d2:a8:87:c7:cd:34:5d:48:aa:b3:
                    fc:29:cd:18:17:e4:bf:b1:24:03:1e:b2:b2:fc:33:
                    8e:2a:73:90:d5:ce:0a:51:21:bf:93:84:07:02:96:
                    17:49:ba:5b:35:ee:a6:e0:1f:4e:24:43:e4:13:86:
                    ad:e0:b5:99:57:fe:1e:62:af:b7:96:07:85:94:16:
                    c3:0c:fa:fa:f1:b6:1a:d5:e3:09:d7:a5:52:69:c2:
                    60:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:28:57:14:4E:26:42:7C:4E:3F:1B:B2:00:5D:CA:0C:6F:E9:33:1B
            X509v3 Authority Key Identifier:
                keyid:47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:f5:2c:0e:48:ea:f4:ce:47:b2:c5:64:7b:73:6a:af:34:8f:
         86:64:e8:ba:54:2f:79:68:36:52:de:3e:75:0b:7f:33:76:2a:
         b6:8f:df:c8:59:df:b8:99:48:6d:88:3c:d8:7f:c0:d1:ab:eb:
         96:fc:76:a7:ce:b2:c3:eb:c9:c4:fb:f7:f4:df:f1:79:54:d8:
         1e:03:c3:16:85:c1:41:d1:ab:81:36:76:11:ec:0b:9c:21:cf:
         58:b2:35:29:1a:84:b5:26:a0:0c:ba:2f:7c:47:b0:45:c3:0e:
         86:92:e5:29:ce:56:9d:ea:5d:ea:0a:6d:b9:f7:b4:94:b1:a6:
         36:e1:69:5d:d3:55:84:c1:70:a0:db:4c:e8:fb:4b:70:bb:a8:
         09:ae:8f:55:85:0a:7a:a0:f3:d2:dd:96:be:66:15:a3:62:61:
         0a:08:a6:69:29:49:a8:03:04:5f:a9:c9:dc:37:74:fc:79:c1:
         6b:cd:d9:79:09:09:60:41:89:e5:1a:40:a9:67:22:a3:1f:38:
         12:71:2b:e5:75:6a:b3:cb:35:b6:4d:10:7f:d6:49:d8:b2:b1:
         a5:56:5d:1c:3f:b4:1c:70:bd:7b:35:6d:82:97:a3:87:48:e3:
         1b:90:03:1f:f2:8e:ea:95:b1:1b:f5:52:d7:61:c6:14:de:24:
         90:88:0b:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHd9dwkmzqs4/eoWUX8/WiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NzMyNDMwODFlYWRjMWVmNGFlMzIzNGY4NmIyYmQ3MjYy
MmI1YzQwHhcNMjUwNzI2MTYwMTMyWhcNMjUwNzI3MTYwMTMyWjAzMTEwLwYDVQQD
EygzMTI4NTcxNDRlMjY0MjdjNGUzZjFiYjIwMDVkY2EwYzZmZTkzMzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOxBR+CoLjYjp9LlOwPN8AyIe6TG
zwtOjkRoMkI+yUAHrgMZc2CHVowq8PMRrqTeVK9znSKCoo/qMybEQKyAqnyLWl5/
4u6HY83oP4W2HdJLtHXJ6kdHirVRqnMJ41tIkjOJ2iCiSAmaClbfMAAKAq3yGOdZ
8c0lGAJNpq23Y/ibel9rCkQ0fXZdk3I+Nmmp24x5NihgeNkDv15cfn1K3hlLVGid
MnoOLNKoh8fNNF1IqrP8Kc0YF+S/sSQDHrKy/DOOKnOQ1c4KUSG/k4QHApYXSbpb
Ne6m4B9OJEPkE4at4LWZV/4eYq+3lgeFlBbDDPr68bYa1eMJ16VSacJgywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEoVxROJkJ8Tj8bsgBdygxv6TMbMB8GA1UdIwQY
MBaAFEdzJDCB6twe9K4yNPhrK9cmIrXEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjNNa01JSHEzQjcwcmpJMC1Hc3IxeVlpdGNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNTQ5ODgtODdlMS00YTlkLWEzM2It
MzRhOTQ5YzkyMDc0LzEvUjNNa01JSHEzQjcwcmpJMC1Hc3IxeVlpdGNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNTQ5ODgtODdlMS00YTlkLWEzM2ItMzRhOTQ5YzkyMDc0
LzEvUjNNa01JSHEzQjcwcmpJMC1Hc3IxeVlpdGNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfUsDkjq
9M5HssVke3NqrzSPhmToulQveWg2Ut4+dQt/M3Yqto/fyFnfuJlIbYg82H/A0avr
lvx2p86yw+vJxPv39N/xeVTYHgPDFoXBQdGrgTZ2EewLnCHPWLI1KRqEtSagDLov
fEewRcMOhpLlKc5Wnepd6gptufe0lLGmNuFpXdNVhMFwoNtM6PtLcLuoCa6PVYUK
eqDz0t2WvmYVo2JhCgimaSlJqAMEX6nJ3Dd0/HnBa83ZeQkJYEGJ5RpAqWciox84
EnEr5XVqs8s1tk0Qf9ZJ2LKxpVZdHD+0HHC9ezVtgpejh0jjG5ADH/KO6pWxG/VS
12HGFN4kkIgLbQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:04:50 2025 by rpki-client