Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
File:                     ks_7H6VV_DWhSvymELOBBf1cZFw.mft (raw, json)
Hash identifier:          UlI3dtvCHo9TtPP2uWPusyYJ7XmqOJ/pbs2NAPM2SK4=
Subject key identifier:   0B:8F:6A:29:71:E4:3C:D9:C7:C5:35:B2:F2:44:43:D1:90:8A:F4:EA
Authority key identifier: 92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C
Certificate issuer:       /CN=92cffb1fa555fc35a14afca610b38105fd5c645c
Certificate serial:       0197488C34A0275DBE0378F4033C0319CA63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
Manifest number:          0D79
Signing time:             Sat 07 Jun 2025 04:00:37 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:37 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:37 +0000
Files and hashes:         1: ks_7H6VV_DWhSvymELOBBf1cZFw.crl (hash: RFe4JyB31hpS8rDMpvqXpBWPuAXWq5rIKAF9FQKB9MI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:34:a0:27:5d:be:03:78:f4:03:3c:03:19:ca:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92cffb1fa555fc35a14afca610b38105fd5c645c
        Validity
            Not Before: Jun  7 04:00:37 2025 GMT
            Not After : Jun  8 04:00:37 2025 GMT
        Subject: CN=0b8f6a2971e43cd9c7c535b2f24443d1908af4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e2:4c:93:de:d3:dd:d3:65:27:92:5a:90:59:
                    85:6e:69:51:5b:62:22:9c:e2:2a:2d:e8:69:5e:a7:
                    f7:d8:08:71:fb:96:63:47:54:c6:da:5f:e4:48:40:
                    d3:4a:d5:c7:13:e5:a9:b8:6c:4b:60:6f:59:b1:8e:
                    22:1f:b0:e5:74:ff:2a:8e:1a:3b:c5:46:e4:90:74:
                    f2:b6:6c:bc:fb:8e:87:7f:4f:86:ea:52:f9:a7:e7:
                    6b:dc:a7:5c:82:f5:11:34:93:2c:6e:41:d6:99:d2:
                    19:ea:05:b8:cd:77:c4:99:44:93:86:08:03:e1:cc:
                    61:07:f1:df:b8:9b:55:ea:31:74:06:55:7b:8a:42:
                    be:ad:b0:dd:4a:6f:07:dc:1d:20:8d:ef:8e:b4:67:
                    ce:aa:31:14:75:c8:86:59:de:e9:2f:b3:f5:a2:da:
                    4c:46:08:24:08:e1:ee:12:90:ff:47:a8:a0:f7:a7:
                    61:93:df:75:44:33:e1:25:3d:d9:31:e6:b1:95:e5:
                    28:27:6a:65:71:02:16:6b:98:6c:ec:8e:a9:71:f9:
                    33:88:1d:97:eb:0d:d1:53:51:5c:bd:07:61:ca:f3:
                    83:27:41:f9:68:90:58:64:84:86:6e:47:79:20:12:
                    d7:eb:5d:a2:52:19:0c:53:27:9d:ce:9c:09:0b:25:
                    67:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8F:6A:29:71:E4:3C:D9:C7:C5:35:B2:F2:44:43:D1:90:8A:F4:EA
            X509v3 Authority Key Identifier:
                keyid:92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3c:10:c6:60:6e:b7:c9:7d:28:82:e5:67:b7:fe:9e:eb:e9:
         87:24:f1:26:64:9b:1e:46:b7:f0:49:aa:81:ee:ab:9e:80:fa:
         c1:5d:96:74:be:95:60:6f:47:a6:ff:36:81:7d:cd:6b:40:65:
         63:5a:70:cf:99:69:6a:11:e0:23:25:21:e2:dc:c7:56:03:22:
         7b:95:22:6f:bb:7b:33:4a:7c:f6:37:2e:ef:a0:38:7f:12:67:
         a1:eb:6a:9e:cf:41:45:08:9d:d5:a6:ff:e9:6f:8c:2b:1e:b5:
         e5:36:23:71:77:29:e1:da:a3:cb:ee:90:dc:99:2c:e5:c6:ca:
         b3:63:69:30:0b:d6:98:e9:45:5b:f5:dd:4e:76:2c:cb:0b:8e:
         ad:ba:52:48:2a:9f:7a:84:9e:b6:71:7f:0a:5c:27:ea:04:72:
         8f:7b:9b:0e:a6:02:25:a0:f8:d1:9d:ba:c0:d7:09:9a:08:ad:
         b8:cb:a2:80:2c:90:90:4d:c2:1f:b9:a6:ef:4a:06:f9:f8:50:
         57:0b:18:c1:67:b2:48:f6:dc:2e:89:20:6c:25:46:46:60:78:
         56:d7:89:51:b8:95:3e:46:28:21:fb:df:13:b4:12:67:e4:79:
         0d:aa:8c:e5:92:bb:49:3e:41:47:ca:29:22:dc:71:6e:6d:5c:
         ed:f7:23:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjDSgJ12+A3j0AzwDGcpjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyY2ZmYjFmYTU1NWZjMzVhMTRhZmNhNjEwYjM4MTA1ZmQ1
YzY0NWMwHhcNMjUwNjA3MDQwMDM3WhcNMjUwNjA4MDQwMDM3WjAzMTEwLwYDVQQD
EygwYjhmNmEyOTcxZTQzY2Q5YzdjNTM1YjJmMjQ0NDNkMTkwOGFmNGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuJMk97T3dNlJ5JakFmFbmlRW2Ii
nOIqLehpXqf32Ahx+5ZjR1TG2l/kSEDTStXHE+WpuGxLYG9ZsY4iH7DldP8qjho7
xUbkkHTytmy8+46Hf0+G6lL5p+dr3KdcgvURNJMsbkHWmdIZ6gW4zXfEmUSThggD
4cxhB/HfuJtV6jF0BlV7ikK+rbDdSm8H3B0gje+OtGfOqjEUdciGWd7pL7P1otpM
RggkCOHuEpD/R6ig96dhk991RDPhJT3ZMeaxleUoJ2plcQIWa5hs7I6pcfkziB2X
6w3RU1FcvQdhyvODJ0H5aJBYZISGbkd5IBLX612iUhkMUyedzpwJCyVnpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuPailx5DzZx8U1svJEQ9GQivTqMB8GA1UdIwQY
MBaAFJLP+x+lVfw1oUr8phCzgQX9XGRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3NfN0g2VlZfRFdoU3Z5bUVMT0JCZjFjWkZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9mZjUxYTAtYTFiMS00MTliLTg1MTgt
NmJiNWQ0ZDJlNTM5LzEva3NfN0g2VlZfRFdoU3Z5bUVMT0JCZjFjWkZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9mZjUxYTAtYTFiMS00MTliLTg1MTgtNmJiNWQ0ZDJlNTM5
LzEva3NfN0g2VlZfRFdoU3Z5bUVMT0JCZjFjWkZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTwQxmBu
t8l9KILlZ7f+nuvphyTxJmSbHka38Emqge6rnoD6wV2WdL6VYG9Hpv82gX3Na0Bl
Y1pwz5lpahHgIyUh4tzHVgMie5Uib7t7M0p89jcu76A4fxJnoetqns9BRQid1ab/
6W+MKx615TYjcXcp4dqjy+6Q3Jks5cbKs2NpMAvWmOlFW/XdTnYsywuOrbpSSCqf
eoSetnF/Clwn6gRyj3ubDqYCJaD40Z26wNcJmgituMuigCyQkE3CH7mm70oG+fhQ
VwsYwWeySPbcLokgbCVGRmB4VteJUbiVPkYoIfvfE7QSZ+R5DaqM5ZK7ST5BR8op
Itxxbm1c7fcjOA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:18:06 2025 by rpki-client