Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
File:                     H83UEOElAi3gfKWWP5L3jo-JSG4.mft (raw, json)
Hash identifier:          JZudUg6dPXG3yGFE56xhZIsOG++Jxitew6NmMkOVtIU=
Subject key identifier:   6A:DF:D2:BF:BE:03:03:84:FC:93:64:AC:AD:B9:06:0B:FE:33:D9:55
Authority key identifier: 1F:CD:D4:10:E1:25:02:2D:E0:7C:A5:96:3F:92:F7:8E:8F:89:48:6E
Certificate issuer:       /CN=1fcdd410e125022de07ca5963f92f78e8f89486e
Certificate serial:       019845F64F077DFA812A370B55FB890D6D35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
Manifest number:          15FB
Signing time:             Sat 26 Jul 2025 09:00:26 +0000
Manifest this update:     Sat 26 Jul 2025 09:00:26 +0000
Manifest next update:     Sun 27 Jul 2025 09:00:26 +0000
Files and hashes:         1: H83UEOElAi3gfKWWP5L3jo-JSG4.crl (hash: DUTfPx/w/pPcH0Kk3SBNL8KlylslLisylwgGZI+RAOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:f6:4f:07:7d:fa:81:2a:37:0b:55:fb:89:0d:6d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fcdd410e125022de07ca5963f92f78e8f89486e
        Validity
            Not Before: Jul 26 09:00:26 2025 GMT
            Not After : Jul 27 09:00:26 2025 GMT
        Subject: CN=6adfd2bfbe030384fc9364acadb9060bfe33d955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:4d:91:dc:4c:a0:5b:6e:31:12:74:bc:30:92:
                    01:67:ad:c6:f6:35:12:b3:4c:b1:53:d9:15:84:83:
                    e5:31:4a:55:db:8a:69:16:33:16:b3:7b:22:e2:c9:
                    5a:46:8c:63:53:3d:da:6b:2c:7a:9e:a2:92:24:81:
                    36:72:23:f2:69:f2:cd:18:90:25:82:a1:9a:f1:e6:
                    bb:a0:8f:6e:81:e3:cb:7b:d4:22:b3:52:33:2c:7a:
                    eb:dd:fe:41:5d:be:98:4f:f5:d0:c7:95:b3:34:25:
                    99:0e:e6:51:9d:c4:82:8d:fc:46:43:dd:0d:b6:c6:
                    5a:35:24:4f:a8:cc:3d:12:ce:8e:86:b0:9a:9d:59:
                    0f:e5:c4:f9:25:f0:66:01:c7:e0:9f:ed:61:73:f7:
                    5a:c1:7e:59:5e:67:01:f5:be:2d:aa:51:b5:d5:75:
                    8d:67:6f:c4:b2:37:ab:b1:0b:a0:b0:65:c3:b6:ed:
                    69:8e:26:c3:2e:65:af:fa:ff:c2:72:c9:e3:16:ad:
                    21:0f:12:11:51:b1:3e:25:a5:01:44:dc:bc:d8:4e:
                    2a:43:d7:d6:8a:2b:0a:ed:92:7a:d1:7d:35:51:44:
                    a3:28:98:ae:cc:57:6c:2c:6c:fc:b7:a5:e8:49:02:
                    97:d8:64:bb:eb:0c:78:5a:8c:e1:f6:18:a3:47:02:
                    cd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DF:D2:BF:BE:03:03:84:FC:93:64:AC:AD:B9:06:0B:FE:33:D9:55
            X509v3 Authority Key Identifier:
                keyid:1F:CD:D4:10:E1:25:02:2D:E0:7C:A5:96:3F:92:F7:8E:8F:89:48:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:4a:9d:a2:b9:13:e0:b5:20:0c:8e:fd:a6:03:b1:f9:fc:15:
         b9:d8:ad:ae:02:ff:c6:3b:c1:e0:34:cb:1f:2f:fe:6b:87:2b:
         6a:20:18:20:88:4b:d6:6c:04:de:fa:52:b4:dc:be:13:c8:63:
         ab:22:7a:d5:6f:a9:61:83:b7:c6:da:89:97:8c:8d:fe:0f:a1:
         04:78:cb:cd:ef:18:c0:ab:fa:ae:55:fa:c8:23:ad:5c:c3:a9:
         d8:9d:1c:55:12:17:b7:4e:b5:1f:6c:ac:6f:9d:bf:3e:41:bf:
         ec:33:21:a9:56:bd:bd:ae:ec:a4:f4:6d:18:5a:77:94:a2:24:
         52:98:35:21:ee:a2:43:32:b3:d2:05:72:c5:bd:6a:f0:c5:1d:
         cd:41:48:ae:2c:00:81:1e:24:2e:d6:2a:cb:9b:6b:d0:f4:fd:
         de:46:7f:63:26:28:88:1d:6b:f7:a2:ca:76:f1:80:48:18:e0:
         87:c3:88:02:f1:79:9d:3f:ca:6e:fd:04:d5:73:25:18:bb:a7:
         7c:38:be:08:22:dc:82:80:ab:04:ab:41:03:a1:41:4c:60:35:
         1b:ce:df:54:41:db:22:2b:d8:7c:16:6b:15:b5:92:2c:44:5a:
         af:22:37:c4:c4:8e:df:52:69:73:03:58:55:c7:41:ff:c4:5d:
         43:56:5b:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhF9k8HffqBKjcLVfuJDW01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmY2RkNDEwZTEyNTAyMmRlMDdjYTU5NjNmOTJmNzhlOGY4
OTQ4NmUwHhcNMjUwNzI2MDkwMDI2WhcNMjUwNzI3MDkwMDI2WjAzMTEwLwYDVQQD
Eyg2YWRmZDJiZmJlMDMwMzg0ZmM5MzY0YWNhZGI5MDYwYmZlMzNkOTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA702R3EygW24xEnS8MJIBZ63G9jUS
s0yxU9kVhIPlMUpV24ppFjMWs3si4slaRoxjUz3aayx6nqKSJIE2ciPyafLNGJAl
gqGa8ea7oI9ugePLe9Qis1IzLHrr3f5BXb6YT/XQx5WzNCWZDuZRncSCjfxGQ90N
tsZaNSRPqMw9Es6OhrCanVkP5cT5JfBmAcfgn+1hc/dawX5ZXmcB9b4tqlG11XWN
Z2/EsjersQugsGXDtu1pjibDLmWv+v/CcsnjFq0hDxIRUbE+JaUBRNy82E4qQ9fW
iisK7ZJ60X01UUSjKJiuzFdsLGz8t6XoSQKX2GS76wx4Wozh9hijRwLNVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrf0r++AwOE/JNkrK25Bgv+M9lVMB8GA1UdIwQY
MBaAFB/N1BDhJQIt4Hyllj+S946PiUhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDgzVUVPRWxBaTNnZktXV1A1TDNqby1KU0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81ZmE4MWItMWYzZi00ODJkLTk1MjUt
YWI2OWRhOGYzN2VjLzEvSDgzVUVPRWxBaTNnZktXV1A1TDNqby1KU0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi81ZmE4MWItMWYzZi00ODJkLTk1MjUtYWI2OWRhOGYzN2Vj
LzEvSDgzVUVPRWxBaTNnZktXV1A1TDNqby1KU0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkqdorkT
4LUgDI79pgOx+fwVuditrgL/xjvB4DTLHy/+a4craiAYIIhL1mwE3vpStNy+E8hj
qyJ61W+pYYO3xtqJl4yN/g+hBHjLze8YwKv6rlX6yCOtXMOp2J0cVRIXt061H2ys
b52/PkG/7DMhqVa9va7spPRtGFp3lKIkUpg1Ie6iQzKz0gVyxb1q8MUdzUFIriwA
gR4kLtYqy5tr0PT93kZ/YyYoiB1r96LKdvGASBjgh8OIAvF5nT/Kbv0E1XMlGLun
fDi+CCLcgoCrBKtBA6FBTGA1G87fVEHbIivYfBZrFbWSLERaryI3xMSO31JpcwNY
VcdB/8RdQ1Zbzw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:08:10 2025 by rpki-client