Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
File:                     mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft (raw, json)
Hash identifier:          p3sk1tMlz/U6Z1LnMxUozbdjqRQsbbSBTb+qEg003ZU=
Subject key identifier:   B0:CB:55:33:20:F9:AF:71:C6:02:EC:2E:1C:6F:09:7F:6C:52:2F:FD
Authority key identifier: 9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9
Certificate issuer:       /CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
Certificate serial:       0197469E4D5495B850DCC255465A436E2241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
Manifest number:          0B67
Signing time:             Fri 06 Jun 2025 19:01:08 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:08 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:08 +0000
Files and hashes:         1: mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl (hash: ++2Am7i0cp0hxfUwyZIzG9izVbNojeoWUZmrqodi7W4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:4d:54:95:b8:50:dc:c2:55:46:5a:43:6e:22:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
        Validity
            Not Before: Jun  6 19:01:08 2025 GMT
            Not After : Jun  7 19:01:08 2025 GMT
        Subject: CN=b0cb553320f9af71c602ec2e1c6f097f6c522ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6f:30:f7:fa:5f:28:f7:df:f0:46:0e:67:25:
                    5c:33:f4:52:3e:29:c9:75:35:b6:93:11:88:06:3e:
                    5f:8f:19:d4:a6:8a:80:7f:85:93:c0:74:94:e2:4d:
                    f5:f8:68:55:c5:a5:df:04:5d:c2:0c:b4:2e:3a:d7:
                    3d:53:55:20:2b:29:60:3e:59:3f:b2:f8:5c:ee:36:
                    7c:c8:b7:a6:cb:86:07:07:68:ba:69:9f:3d:d7:9f:
                    21:58:c8:7c:e3:a7:34:e4:34:77:45:5a:46:6a:9d:
                    31:97:96:d7:40:65:ef:f5:4e:03:5a:d6:d1:2f:01:
                    a8:a7:bf:d7:04:67:22:5b:e2:95:a0:6c:60:56:bd:
                    37:97:64:8a:48:44:a1:65:50:be:9a:35:3d:ea:68:
                    5d:81:a2:b1:30:9e:85:9b:f9:f6:c8:ca:f4:28:44:
                    6e:90:0e:3c:f8:bc:a1:72:7e:74:3d:af:c6:d7:f7:
                    ee:c8:13:81:58:c6:5f:ba:34:4e:d6:f6:2e:63:30:
                    6c:24:81:a2:b8:70:76:b0:7e:df:5f:f7:1c:88:ca:
                    7e:99:af:08:02:bd:5a:40:9b:4c:9b:19:4e:19:c8:
                    6a:59:f3:4c:3a:cf:af:0d:52:9d:a5:af:cd:8e:eb:
                    9b:0f:a9:26:d7:68:f0:91:10:c8:f5:cf:50:27:3d:
                    62:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CB:55:33:20:F9:AF:71:C6:02:EC:2E:1C:6F:09:7F:6C:52:2F:FD
            X509v3 Authority Key Identifier:
                keyid:9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:73:5e:83:ca:79:fb:a0:4e:a4:69:05:d7:20:7f:32:b2:6a:
         5f:01:18:0b:77:51:66:4c:1e:8c:59:d6:7e:2b:44:96:1b:1d:
         f5:b5:a5:ce:bc:ea:2f:95:a7:4e:c0:e7:73:b3:b5:ef:3d:00:
         97:aa:1c:42:4d:06:b1:7a:6a:87:bf:80:e8:08:92:c7:fa:e3:
         16:d0:69:98:98:45:21:68:e7:ed:1c:ef:70:9a:da:be:a3:b8:
         2f:ac:ed:80:7e:44:9f:9f:d1:31:a8:a9:7a:45:c9:92:9e:99:
         3d:d8:77:e3:9b:51:51:88:89:6f:21:67:1c:6d:a3:51:bd:95:
         04:46:a7:1f:25:ee:55:09:d4:91:39:ca:45:3b:1f:dc:29:ec:
         b8:8f:a2:28:67:b0:7c:fb:39:66:48:c2:ee:5f:d0:d4:e5:8b:
         53:58:c5:6d:b2:b9:22:2c:d7:b1:ab:b5:87:05:96:79:11:aa:
         14:e1:21:03:66:c9:12:e6:b2:97:6e:89:1c:36:60:b8:f6:c1:
         e7:00:90:a3:b0:68:2e:b3:76:d5:9e:33:a8:8b:75:e5:9f:6a:
         e6:1e:c5:66:92:a1:47:53:7a:86:3b:1f:90:a2:63:43:b1:87:
         df:33:ce:fb:4d:36:fb:47:ef:e7:61:b1:29:68:28:aa:6c:a5:
         96:6e:66:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnk1UlbhQ3MJVRlpDbiJBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYjU3MWI2OWFmODU2NTBhZmZlZGNlZmU1N2QyYTczZmQ2
ZTZjYTkwHhcNMjUwNjA2MTkwMTA4WhcNMjUwNjA3MTkwMTA4WjAzMTEwLwYDVQQD
EyhiMGNiNTUzMzIwZjlhZjcxYzYwMmVjMmUxYzZmMDk3ZjZjNTIyZmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG8w9/pfKPff8EYOZyVcM/RSPinJ
dTW2kxGIBj5fjxnUpoqAf4WTwHSU4k31+GhVxaXfBF3CDLQuOtc9U1UgKylgPlk/
svhc7jZ8yLemy4YHB2i6aZ89158hWMh846c05DR3RVpGap0xl5bXQGXv9U4DWtbR
LwGop7/XBGciW+KVoGxgVr03l2SKSEShZVC+mjU96mhdgaKxMJ6Fm/n2yMr0KERu
kA48+Lyhcn50Pa/G1/fuyBOBWMZfujRO1vYuYzBsJIGiuHB2sH7fX/cciMp+ma8I
Ar1aQJtMmxlOGchqWfNMOs+vDVKdpa/NjuubD6km12jwkRDI9c9QJz1ipQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDLVTMg+a9xxgLsLhxvCX9sUi/9MB8GA1UdIwQY
MBaAFJq1cbaa+FZQr/7c7+V9KnP9bmypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXJWeHRwcjRWbEN2X3R6djVYMHFjXzF1YktrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mYzI1MWUtMjU5Yy00N2Y1LWFlMzAt
MzcyNDUzNWVjYzFhLzEvbXJWeHRwcjRWbEN2X3R6djVYMHFjXzF1YktrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mYzI1MWUtMjU5Yy00N2Y1LWFlMzAtMzcyNDUzNWVjYzFh
LzEvbXJWeHRwcjRWbEN2X3R6djVYMHFjXzF1YktrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3Neg8p5
+6BOpGkF1yB/MrJqXwEYC3dRZkwejFnWfitElhsd9bWlzrzqL5WnTsDnc7O17z0A
l6ocQk0GsXpqh7+A6AiSx/rjFtBpmJhFIWjn7RzvcJravqO4L6ztgH5En5/RMaip
ekXJkp6ZPdh345tRUYiJbyFnHG2jUb2VBEanHyXuVQnUkTnKRTsf3CnsuI+iKGew
fPs5ZkjC7l/Q1OWLU1jFbbK5IizXsau1hwWWeRGqFOEhA2bJEuayl26JHDZguPbB
5wCQo7BoLrN21Z4zqIt15Z9q5h7FZpKhR1N6hjsfkKJjQ7GH3zPO+002+0fv52Gx
KWgoqmyllm5mRA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:49 2025 by rpki-client