Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
File:                     pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft (raw, json)
Hash identifier:          fm5AWdF6+vc/xo14Rk0CsPSASJWb5rDuF3eewKIP0xg=
Subject key identifier:   D5:3A:A6:18:6B:B4:DF:C1:AE:1A:FE:5B:1C:F2:AC:85:33:1D:F2:9C
Authority key identifier: A5:1E:2D:BB:F0:19:D8:D3:74:7E:57:30:39:25:54:DF:11:F6:ED:93
Certificate issuer:       /CN=a51e2dbbf019d8d3747e5730392554df11f6ed93
Certificate serial:       0198530CE0AFA74195EBD1EE2A2048EB5C9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
Manifest number:          1604
Signing time:             Mon 28 Jul 2025 22:00:09 +0000
Manifest this update:     Mon 28 Jul 2025 22:00:09 +0000
Manifest next update:     Tue 29 Jul 2025 22:00:09 +0000
Files and hashes:         1: pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl (hash: l6ODMY6nkM26Chhzq6HkOZkmGPJJZGa/BCdhzl6DE4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0c:e0:af:a7:41:95:eb:d1:ee:2a:20:48:eb:5c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a51e2dbbf019d8d3747e5730392554df11f6ed93
        Validity
            Not Before: Jul 28 22:00:09 2025 GMT
            Not After : Jul 29 22:00:09 2025 GMT
        Subject: CN=d53aa6186bb4dfc1ae1afe5b1cf2ac85331df29c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4b:d7:a3:ef:1a:40:54:1c:9f:9a:ef:01:62:
                    f8:b4:93:a0:1e:19:cf:55:a1:ab:c5:63:6c:23:1d:
                    73:15:30:0a:e4:71:0a:be:f3:99:11:fc:74:1f:22:
                    8b:3e:40:a5:1b:d3:6a:13:2e:ac:47:0f:a9:ce:a0:
                    a9:a6:b6:0d:80:7f:7a:c8:98:ca:8e:e2:41:83:7f:
                    d8:1c:f7:fd:f3:30:2e:29:19:44:da:f4:54:da:e5:
                    1d:c7:b0:01:f1:81:71:af:89:2d:b8:e6:23:b0:5f:
                    53:38:6e:64:06:b5:66:a8:11:da:7d:b7:d7:36:bc:
                    07:07:2b:06:97:37:2c:91:1c:3b:79:d4:38:41:d1:
                    07:04:1b:98:5c:54:48:16:42:2b:3a:6d:8b:0b:ea:
                    85:f3:1d:b5:33:26:48:ca:06:b4:30:a7:e2:93:bc:
                    8e:63:aa:e3:26:65:c9:ab:6f:df:62:1f:3d:2d:d3:
                    36:d5:a3:62:ad:10:f0:a4:c6:7a:84:19:d0:24:07:
                    22:0d:98:04:be:b6:7b:7e:06:af:d4:29:18:2d:5d:
                    f9:b1:63:cc:93:d5:f7:47:88:a7:4a:3c:fd:eb:11:
                    ef:27:92:a4:f4:8f:29:02:70:31:42:7e:31:5e:d0:
                    e5:15:65:9d:1c:02:30:b1:cf:fa:9a:cc:41:9d:f3:
                    9a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:3A:A6:18:6B:B4:DF:C1:AE:1A:FE:5B:1C:F2:AC:85:33:1D:F2:9C
            X509v3 Authority Key Identifier:
                keyid:A5:1E:2D:BB:F0:19:D8:D3:74:7E:57:30:39:25:54:DF:11:F6:ED:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:a7:bb:d1:21:36:0b:a3:16:4e:e6:04:99:40:12:2e:ec:a2:
         3b:6e:12:eb:ad:ab:71:18:b1:5f:09:98:90:47:5f:b0:a4:5b:
         1d:21:5e:a0:66:d9:83:d5:bb:8d:a9:21:c2:4c:78:9c:af:db:
         ce:2d:02:02:3f:45:f4:bc:69:91:ed:13:b2:15:94:e2:44:e9:
         ae:da:b6:c3:92:e1:cf:dc:e2:5c:0d:00:f2:8d:fc:11:5e:8d:
         c9:36:0b:94:a5:f2:d8:ff:c3:1c:24:f1:6f:ff:aa:98:fd:8c:
         35:3c:3c:8b:11:79:ea:d6:df:86:d6:e6:2a:9e:3a:df:4a:44:
         a2:b4:65:d4:5a:5d:59:7d:1a:57:6f:b3:ea:35:1d:6e:45:7c:
         29:2b:a4:cf:ac:27:0d:d6:2e:d9:80:ff:85:39:32:96:4c:d9:
         7a:5a:44:9e:42:ea:4b:d6:29:5a:80:44:ad:2f:a3:fb:1b:b7:
         6d:75:66:10:01:2f:e7:dd:6b:df:3b:8e:ce:8f:fc:ff:15:2d:
         82:00:c9:b0:46:b9:0b:ab:51:36:91:86:b5:ca:a2:ff:a5:a5:
         85:95:2f:4d:b7:7a:ae:8e:16:46:d5:25:3a:7c:79:2d:60:2b:
         14:49:a1:cd:b0:75:6d:8d:83:89:a1:72:68:15:c2:1a:28:31:
         c3:0e:8d:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDOCvp0GV69HuKiBI61ycMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MWUyZGJiZjAxOWQ4ZDM3NDdlNTczMDM5MjU1NGRmMTFm
NmVkOTMwHhcNMjUwNzI4MjIwMDA5WhcNMjUwNzI5MjIwMDA5WjAzMTEwLwYDVQQD
EyhkNTNhYTYxODZiYjRkZmMxYWUxYWZlNWIxY2YyYWM4NTMzMWRmMjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0vXo+8aQFQcn5rvAWL4tJOgHhnP
VaGrxWNsIx1zFTAK5HEKvvOZEfx0HyKLPkClG9NqEy6sRw+pzqCpprYNgH96yJjK
juJBg3/YHPf98zAuKRlE2vRU2uUdx7AB8YFxr4ktuOYjsF9TOG5kBrVmqBHafbfX
NrwHBysGlzcskRw7edQ4QdEHBBuYXFRIFkIrOm2LC+qF8x21MyZIyga0MKfik7yO
Y6rjJmXJq2/fYh89LdM21aNirRDwpMZ6hBnQJAciDZgEvrZ7fgav1CkYLV35sWPM
k9X3R4inSjz96xHvJ5Kk9I8pAnAxQn4xXtDlFWWdHAIwsc/6msxBnfOaXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNU6phhrtN/Brhr+WxzyrIUzHfKcMB8GA1UdIwQY
MBaAFKUeLbvwGdjTdH5XMDklVN8R9u2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFI0dHVfQVoyTk4wZmxjd09TVlUzeEgyN1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNWZjMDQtZmY4Ni00Y2VkLTkxYzIt
MGUzODZhM2RiZTZhLzEvcFI0dHVfQVoyTk4wZmxjd09TVlUzeEgyN1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9iNWZjMDQtZmY4Ni00Y2VkLTkxYzItMGUzODZhM2RiZTZh
LzEvcFI0dHVfQVoyTk4wZmxjd09TVlUzeEgyN1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6e70SE2
C6MWTuYEmUASLuyiO24S662rcRixXwmYkEdfsKRbHSFeoGbZg9W7jakhwkx4nK/b
zi0CAj9F9Lxpke0TshWU4kTprtq2w5Lhz9ziXA0A8o38EV6NyTYLlKXy2P/DHCTx
b/+qmP2MNTw8ixF56tbfhtbmKp4630pEorRl1FpdWX0aV2+z6jUdbkV8KSukz6wn
DdYu2YD/hTkylkzZelpEnkLqS9YpWoBErS+j+xu3bXVmEAEv591r3zuOzo/8/xUt
ggDJsEa5C6tRNpGGtcqi/6WlhZUvTbd6ro4WRtUlOnx5LWArFEmhzbB1bY2DiaFy
aBXCGigxww6NyQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:16:20 2025 by rpki-client