Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
File:                     t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft (raw, json)
Hash identifier:          oqKNA9fP/tvVrCMBVXV0ObNBkWnxB2oBT3qkNOqXllY=
Subject key identifier:   6D:2A:F4:45:50:BE:C1:80:B5:00:A9:85:1E:34:24:14:92:B8:0F:E2
Authority key identifier: B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC
Certificate issuer:       /CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec
Certificate serial:       01974A7B2473C0506A3B35B99673F2373885
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
Manifest number:          0922
Signing time:             Sat 07 Jun 2025 13:01:13 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:13 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:13 +0000
Files and hashes:         1: t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl (hash: oA2owm8IKjIqWpQqhWRbeUXp0P5D2J01Oecod65KexY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:24:73:c0:50:6a:3b:35:b9:96:73:f2:37:38:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec
        Validity
            Not Before: Jun  7 13:01:13 2025 GMT
            Not After : Jun  8 13:01:13 2025 GMT
        Subject: CN=6d2af44550bec180b500a9851e34241492b80fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2b:8b:c7:9d:5c:94:cd:e0:b1:8e:f4:6d:a7:
                    c7:a4:a6:10:7c:f8:6b:3e:a4:36:35:ff:01:d9:e9:
                    44:83:54:18:86:e3:88:43:0a:9a:cc:40:ee:be:66:
                    bb:6a:04:0a:98:e3:e8:45:fb:8b:24:30:cd:72:b0:
                    43:e2:12:3a:31:20:06:e9:3c:e8:ed:b1:1a:6f:ed:
                    fd:ed:ab:5d:b8:10:fa:87:ad:3e:00:68:5e:1d:39:
                    2b:6a:e2:42:26:85:ee:79:3c:48:c9:d3:c3:ec:00:
                    b1:22:b5:74:43:97:7a:9c:a8:1b:e6:c2:07:38:06:
                    ae:8e:4f:df:ce:fd:56:27:4e:41:81:39:20:a2:f6:
                    38:c8:51:cb:5e:fa:f5:42:e7:e4:3e:c5:96:fe:5d:
                    a9:80:89:06:96:2d:b7:fa:51:5d:59:42:7a:01:86:
                    f3:b1:04:a6:34:76:e6:7b:06:f5:59:ed:47:aa:1e:
                    ed:74:5b:80:35:8e:a0:ef:aa:ea:09:f1:cd:b2:b0:
                    8f:ea:ee:84:00:43:3d:2c:c0:6c:57:66:05:9f:79:
                    32:48:dc:23:e3:c5:7d:39:66:de:86:68:d4:7b:56:
                    45:9c:ef:ce:b7:c3:37:32:fe:0a:c8:06:2a:f8:c9:
                    7b:6d:d8:a0:67:c0:d5:05:7d:3e:d9:be:1c:c8:1f:
                    22:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2A:F4:45:50:BE:C1:80:B5:00:A9:85:1E:34:24:14:92:B8:0F:E2
            X509v3 Authority Key Identifier:
                keyid:B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:90:cf:0f:48:67:e7:aa:e7:60:ae:a2:1c:02:25:dd:4d:e0:
         ea:27:bd:a2:cc:72:df:52:b8:bf:ca:33:fb:e6:d1:c5:92:82:
         7d:fb:bc:5c:93:6a:1b:c0:73:39:4c:cb:c9:7e:a9:a6:f1:37:
         e1:79:50:ad:c6:65:3b:35:b7:6e:5a:70:94:a1:98:ac:97:d5:
         00:92:52:95:25:07:ea:9e:ab:5e:98:09:f1:df:08:62:b4:e6:
         3a:46:1d:67:cb:60:41:a1:b5:15:21:37:7e:5d:d9:a3:fe:95:
         8b:00:9d:eb:2c:05:a5:aa:92:f6:5a:2c:ca:74:23:0b:8e:4f:
         14:29:02:b9:54:69:a7:e5:1a:71:e5:2b:3c:30:ed:95:91:89:
         45:8f:c5:16:9e:35:a9:d4:16:1f:a4:96:39:37:a6:1d:41:44:
         47:ca:8e:fb:74:54:2e:ec:cb:5b:55:34:a0:1b:d4:6b:d9:d0:
         a0:70:5a:08:52:af:af:1b:13:6b:29:0a:79:94:20:95:d0:72:
         d9:d1:8a:03:1b:20:67:b6:5c:72:2e:18:de:38:7c:e3:96:7e:
         0a:e1:fa:09:22:26:b9:75:51:24:f6:5d:bd:c6:d1:78:bf:de:
         c4:23:c3:68:17:ff:ec:cc:77:23:03:85:e9:bb:1b:6a:71:82:
         1b:1a:a7:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKeyRzwFBqOzW5lnPyNziFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODlhMzBjZDZmNmMxODIwNWZkOWFjYTE0YWRiNDJiZjBk
YzkyZWMwHhcNMjUwNjA3MTMwMTEzWhcNMjUwNjA4MTMwMTEzWjAzMTEwLwYDVQQD
Eyg2ZDJhZjQ0NTUwYmVjMTgwYjUwMGE5ODUxZTM0MjQxNDkyYjgwZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiuLx51clM3gsY70bafHpKYQfPhr
PqQ2Nf8B2elEg1QYhuOIQwqazEDuvma7agQKmOPoRfuLJDDNcrBD4hI6MSAG6Tzo
7bEab+397atduBD6h60+AGheHTkrauJCJoXueTxIydPD7ACxIrV0Q5d6nKgb5sIH
OAaujk/fzv1WJ05BgTkgovY4yFHLXvr1QufkPsWW/l2pgIkGli23+lFdWUJ6AYbz
sQSmNHbmewb1We1Hqh7tdFuANY6g76rqCfHNsrCP6u6EAEM9LMBsV2YFn3kySNwj
48V9OWbehmjUe1ZFnO/Ot8M3Mv4KyAYq+Ml7bdigZ8DVBX0+2b4cyB8iUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0q9EVQvsGAtQCphR40JBSSuA/iMB8GA1UdIwQY
MBaAFLeJowzW9sGCBf2ayhSttCvw3JLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRtakROYjJ3WUlGX1pyS0ZLMjBLX0Rja3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iMmIzMTEtMmUzMi00YjBkLWI4NmMt
NjcxMzVkMzE2ZThjLzEvdDRtakROYjJ3WUlGX1pyS0ZLMjBLX0Rja3V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iMmIzMTEtMmUzMi00YjBkLWI4NmMtNjcxMzVkMzE2ZThj
LzEvdDRtakROYjJ3WUlGX1pyS0ZLMjBLX0Rja3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJDPD0hn
56rnYK6iHAIl3U3g6ie9osxy31K4v8oz++bRxZKCffu8XJNqG8BzOUzLyX6ppvE3
4XlQrcZlOzW3blpwlKGYrJfVAJJSlSUH6p6rXpgJ8d8IYrTmOkYdZ8tgQaG1FSE3
fl3Zo/6ViwCd6ywFpaqS9losynQjC45PFCkCuVRpp+UaceUrPDDtlZGJRY/FFp41
qdQWH6SWOTemHUFER8qO+3RULuzLW1U0oBvUa9nQoHBaCFKvrxsTaykKeZQgldBy
2dGKAxsgZ7Zcci4Y3jh845Z+CuH6CSImuXVRJPZdvcbReL/exCPDaBf/7Mx3IwOF
6bsbanGCGxqnTA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:03 2025 by rpki-client