Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
File:                     mD8bE53ySgXC5SVgUrAhJRfkc1E.mft (raw, json)
Hash identifier:          4SDjAR6iSKcdqnJORhO/MmG5fcHpsfB0Xq5x95/dXwU=
Subject key identifier:   62:65:AD:4C:F7:84:CB:CC:F6:89:07:3E:71:12:67:E7:89:1D:B3:A5
Authority key identifier: 98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51
Certificate issuer:       /CN=983f1b139df24a05c2e5256052b0212517e47351
Certificate serial:       01975B376E7B576C72A6C9D0552EF8981041
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
Manifest number:          0187
Signing time:             Tue 10 Jun 2025 19:00:48 +0000
Manifest this update:     Tue 10 Jun 2025 19:00:48 +0000
Manifest next update:     Wed 11 Jun 2025 19:00:48 +0000
Files and hashes:         1: mD8bE53ySgXC5SVgUrAhJRfkc1E.crl (hash: DRD4OPL2RPQ/gV3DBaUdVU5OadmEa//rlYYkj3q3pr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 19:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:37:6e:7b:57:6c:72:a6:c9:d0:55:2e:f8:98:10:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983f1b139df24a05c2e5256052b0212517e47351
        Validity
            Not Before: Jun 10 19:00:48 2025 GMT
            Not After : Jun 11 19:00:48 2025 GMT
        Subject: CN=6265ad4cf784cbccf689073e711267e7891db3a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:09:7f:a1:c4:f5:6c:06:d7:fc:b3:5f:5c:55:
                    17:58:f4:a6:74:6e:94:f8:5c:0f:75:62:23:4e:b1:
                    59:f4:ed:21:98:32:f3:2b:da:70:51:39:49:63:5b:
                    fa:a8:b5:5c:3f:a8:56:ab:4a:7f:17:ac:26:e4:6d:
                    6c:3e:49:be:db:1a:be:ac:a3:24:71:d2:e1:89:6a:
                    26:28:c6:0b:71:a5:68:79:af:99:53:fe:c8:e5:8d:
                    6c:45:71:f8:fa:e6:62:0f:fd:7a:95:29:8f:8e:7c:
                    02:95:ab:f4:18:f3:1f:e5:d4:f4:23:d3:1e:45:2c:
                    fc:9d:b6:43:b3:aa:77:7b:e1:43:72:1f:c5:dd:a4:
                    21:b9:ad:d9:c5:47:17:42:60:28:29:14:62:cb:a3:
                    0e:c6:4a:12:61:7c:7e:0a:9c:11:30:a9:68:5c:64:
                    1f:b2:f4:4b:f5:b8:3d:3a:24:65:6e:17:4d:f3:50:
                    9a:cf:2d:80:6e:c8:4e:69:ac:45:07:25:cf:ff:b0:
                    03:2b:e4:d1:e6:8d:8d:fa:44:9c:cf:56:31:42:d5:
                    db:54:75:c4:f0:6b:1a:ac:fe:24:9b:af:9b:60:b9:
                    e4:65:70:01:cf:c2:fd:e6:18:be:d8:33:9f:d8:52:
                    52:5a:3e:86:9a:00:6e:e7:a9:b2:a4:5f:6e:e9:10:
                    aa:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:65:AD:4C:F7:84:CB:CC:F6:89:07:3E:71:12:67:E7:89:1D:B3:A5
            X509v3 Authority Key Identifier:
                keyid:98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e2:6d:66:7d:9a:91:e2:6e:b8:6b:f2:dd:0f:98:48:94:ce:
         bb:9a:f6:6f:84:87:6c:03:3a:32:02:95:41:68:32:f0:3b:e3:
         1e:df:d4:16:30:16:e8:59:a6:16:d8:3c:b2:bd:5c:05:06:e8:
         00:24:5a:12:37:89:24:0e:74:21:c3:d3:47:2c:81:c5:43:b4:
         26:2e:e4:c1:3f:f7:aa:4d:48:51:e5:bf:a0:86:ea:4b:5a:bf:
         63:92:ee:bf:73:97:84:33:ff:ee:bf:a4:41:0d:05:64:5d:3e:
         0e:77:6d:24:29:2b:9d:89:e1:35:c9:4b:76:61:5a:e8:27:47:
         3f:e7:ca:31:d8:b8:1e:dd:b1:82:49:fc:13:6b:b0:db:fc:5b:
         c6:af:41:d5:77:64:a5:bf:d5:f9:af:6f:61:63:5d:24:a7:e4:
         e5:47:82:a3:b4:74:37:3c:c0:de:35:df:ec:b4:1c:22:75:59:
         98:4a:16:62:b7:ee:9e:a8:b1:37:d6:6a:09:6f:55:43:70:ae:
         4b:2d:6a:66:85:72:44:40:f6:20:35:70:fd:ba:79:fe:34:41:
         b3:56:86:9a:7a:da:76:b6:db:0a:f6:59:84:87:bc:5a:fe:06:
         31:93:57:d5:4a:d6:01:26:4f:a1:1f:ac:a5:f2:e9:66:ac:ed:
         fd:c4:20:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdbN257V2xypsnQVS74mBBBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4M2YxYjEzOWRmMjRhMDVjMmU1MjU2MDUyYjAyMTI1MTdl
NDczNTEwHhcNMjUwNjEwMTkwMDQ4WhcNMjUwNjExMTkwMDQ4WjAzMTEwLwYDVQQD
Eyg2MjY1YWQ0Y2Y3ODRjYmNjZjY4OTA3M2U3MTEyNjdlNzg5MWRiM2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQl/ocT1bAbX/LNfXFUXWPSmdG6U
+FwPdWIjTrFZ9O0hmDLzK9pwUTlJY1v6qLVcP6hWq0p/F6wm5G1sPkm+2xq+rKMk
cdLhiWomKMYLcaVoea+ZU/7I5Y1sRXH4+uZiD/16lSmPjnwClav0GPMf5dT0I9Me
RSz8nbZDs6p3e+FDch/F3aQhua3ZxUcXQmAoKRRiy6MOxkoSYXx+CpwRMKloXGQf
svRL9bg9OiRlbhdN81Cazy2AbshOaaxFByXP/7ADK+TR5o2N+kScz1YxQtXbVHXE
8GsarP4km6+bYLnkZXABz8L95hi+2DOf2FJSWj6GmgBu56mypF9u6RCqNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJlrUz3hMvM9okHPnESZ+eJHbOlMB8GA1UdIwQY
MBaAFJg/GxOd8koFwuUlYFKwISUX5HNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUQ4YkU1M3lTZ1hDNVNWZ1VyQWhKUmZrYzFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jMmNjNWYtMjVhNi00MmJiLWE5NzAt
ZWY5NjQ0MzEyZGRiLzEvbUQ4YkU1M3lTZ1hDNVNWZ1VyQWhKUmZrYzFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9jMmNjNWYtMjVhNi00MmJiLWE5NzAtZWY5NjQ0MzEyZGRi
LzEvbUQ4YkU1M3lTZ1hDNVNWZ1VyQWhKUmZrYzFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuJtZn2a
keJuuGvy3Q+YSJTOu5r2b4SHbAM6MgKVQWgy8DvjHt/UFjAW6FmmFtg8sr1cBQbo
ACRaEjeJJA50IcPTRyyBxUO0Ji7kwT/3qk1IUeW/oIbqS1q/Y5Luv3OXhDP/7r+k
QQ0FZF0+DndtJCkrnYnhNclLdmFa6CdHP+fKMdi4Ht2xgkn8E2uw2/xbxq9B1Xdk
pb/V+a9vYWNdJKfk5UeCo7R0NzzA3jXf7LQcInVZmEoWYrfunqixN9ZqCW9VQ3Cu
Sy1qZoVyRED2IDVw/bp5/jRBs1aGmnradrbbCvZZhIe8Wv4GMZNX1UrWASZPoR+s
pfLpZqzt/cQgYg==
-----END CERTIFICATE-----
Generated at Wed Jun 11 03:05:24 2025 by rpki-client