Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
File:                     0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft (raw, json)
Hash identifier:          kbejD+k/qMH3uKBEjy05J83Z92imvIJfvFUM5C5DpwQ=
Subject key identifier:   65:11:20:7F:32:58:EF:CF:39:31:EC:B1:84:48:49:D3:49:13:90:12
Authority key identifier: D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06
Certificate issuer:       /CN=d2b57f59782f941b5d2eb3d4286d5911b179e006
Certificate serial:       01975121FBB87F0E53BFF73D2C6FD2771F4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
Manifest number:          157E
Signing time:             Sun 08 Jun 2025 20:01:10 +0000
Manifest this update:     Sun 08 Jun 2025 20:01:10 +0000
Manifest next update:     Mon 09 Jun 2025 20:01:10 +0000
Files and hashes:         1: 0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl (hash: 5V5ffPj0UOz+gYp2byxlqC7H+A0qayI3tv/NrtukAeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:21:fb:b8:7f:0e:53:bf:f7:3d:2c:6f:d2:77:1f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2b57f59782f941b5d2eb3d4286d5911b179e006
        Validity
            Not Before: Jun  8 20:01:10 2025 GMT
            Not After : Jun  9 20:01:10 2025 GMT
        Subject: CN=6511207f3258efcf3931ecb1844849d349139012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dd:5c:a2:4c:1d:40:41:96:92:7b:5e:9d:b5:
                    bb:80:15:32:8b:5b:55:d0:f3:10:a0:ce:ef:3e:82:
                    48:94:ec:1f:be:28:3d:10:a6:d1:82:aa:89:38:3b:
                    28:1b:7c:99:8e:6e:6a:9b:20:ce:8d:55:18:28:57:
                    3a:11:0f:f4:f4:52:b9:12:46:1a:35:77:aa:45:36:
                    48:d6:7b:5c:56:8d:bf:3b:58:d8:55:95:19:07:9b:
                    90:51:f9:86:2d:86:c6:f6:a4:9b:b0:e9:e8:18:66:
                    c5:f2:ec:e8:a4:bd:0c:4c:f5:70:b5:27:65:c3:96:
                    9f:73:61:a8:43:75:ee:fa:39:ae:16:33:d1:c3:17:
                    d2:33:f2:da:0a:77:35:05:bc:0b:5d:d2:f7:74:20:
                    df:56:96:86:8b:cd:07:d7:f2:41:5a:3b:49:9f:da:
                    15:62:85:d6:47:f2:84:7f:59:76:14:0e:80:78:00:
                    13:3b:fc:b6:66:a7:d4:47:52:02:75:59:f6:04:82:
                    9d:07:99:a5:cc:a1:32:aa:6b:51:8a:48:74:1f:20:
                    db:28:37:ac:ef:27:f6:e9:25:68:08:c0:e9:25:d6:
                    53:d5:ae:b4:b0:cf:cb:f6:03:4f:1a:a3:ac:9b:f7:
                    fd:bc:84:04:7e:97:1f:d3:05:de:98:ed:97:ca:f9:
                    36:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:11:20:7F:32:58:EF:CF:39:31:EC:B1:84:48:49:D3:49:13:90:12
            X509v3 Authority Key Identifier:
                keyid:D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:3b:fb:38:a9:50:5d:b4:eb:1f:c3:94:8a:e8:3a:98:97:83:
         1b:6f:5a:9a:28:e8:65:7e:68:57:8b:b4:0d:d9:4d:ac:ab:bb:
         00:7e:6d:5e:0c:19:4e:72:55:7e:a8:2c:dc:f6:68:a1:e0:3a:
         13:be:2b:80:0d:a7:12:dc:ef:4a:77:fd:e7:72:26:c0:10:0a:
         bd:d0:a2:4e:88:59:51:ab:b7:bd:53:a6:9d:99:ad:89:29:62:
         ff:56:15:06:2f:7a:6d:3c:69:21:6c:2a:ba:8e:8e:c8:df:56:
         57:a1:47:9a:1c:bb:f7:37:28:e1:62:64:df:09:1d:3c:d2:c4:
         39:49:31:8c:64:77:5e:8a:90:e0:e9:3d:43:49:bd:9d:33:53:
         b4:fc:4c:a5:a6:9b:ed:42:53:2c:59:ae:1c:1a:8c:eb:58:df:
         f5:21:63:ad:c2:4a:a9:2a:fe:ff:d2:bd:e5:53:bf:c3:07:cf:
         dd:f0:8e:dd:d6:d9:7c:e3:da:4d:21:ed:6a:3b:57:99:3b:8e:
         43:c7:17:f0:ce:52:b1:51:f9:a4:5e:83:03:33:db:08:2b:1b:
         44:16:32:a1:d5:a5:a3:9f:c4:61:5d:19:8f:a0:b1:34:f6:fb:
         7f:75:5a:87:b5:b4:8b:61:c0:d3:4c:b7:9b:08:51:66:20:da:
         39:ed:c6:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRIfu4fw5Tv/c9LG/Sdx9NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYjU3ZjU5NzgyZjk0MWI1ZDJlYjNkNDI4NmQ1OTExYjE3
OWUwMDYwHhcNMjUwNjA4MjAwMTEwWhcNMjUwNjA5MjAwMTEwWjAzMTEwLwYDVQQD
Eyg2NTExMjA3ZjMyNThlZmNmMzkzMWVjYjE4NDQ4NDlkMzQ5MTM5MDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd1cokwdQEGWkntenbW7gBUyi1tV
0PMQoM7vPoJIlOwfvig9EKbRgqqJODsoG3yZjm5qmyDOjVUYKFc6EQ/09FK5EkYa
NXeqRTZI1ntcVo2/O1jYVZUZB5uQUfmGLYbG9qSbsOnoGGbF8uzopL0MTPVwtSdl
w5afc2GoQ3Xu+jmuFjPRwxfSM/LaCnc1BbwLXdL3dCDfVpaGi80H1/JBWjtJn9oV
YoXWR/KEf1l2FA6AeAATO/y2ZqfUR1ICdVn2BIKdB5mlzKEyqmtRikh0HyDbKDes
7yf26SVoCMDpJdZT1a60sM/L9gNPGqOsm/f9vIQEfpcf0wXemO2Xyvk2MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGURIH8yWO/POTHssYRISdNJE5ASMB8GA1UdIwQY
MBaAFNK1f1l4L5QbXS6z1ChtWRGxeeAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHJWX1dYZ3ZsQnRkTHJQVUtHMVpFYkY1NEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NTVlMzUtODdjYy00NDhlLWI3Yjct
MDdjYjIyYmY0MjRkLzEvMHJWX1dYZ3ZsQnRkTHJQVUtHMVpFYkY1NEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84NTVlMzUtODdjYy00NDhlLWI3YjctMDdjYjIyYmY0MjRk
LzEvMHJWX1dYZ3ZsQnRkTHJQVUtHMVpFYkY1NEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDv7OKlQ
XbTrH8OUiug6mJeDG29amijoZX5oV4u0DdlNrKu7AH5tXgwZTnJVfqgs3PZooeA6
E74rgA2nEtzvSnf953ImwBAKvdCiTohZUau3vVOmnZmtiSli/1YVBi96bTxpIWwq
uo6OyN9WV6FHmhy79zco4WJk3wkdPNLEOUkxjGR3XoqQ4Ok9Q0m9nTNTtPxMpaab
7UJTLFmuHBqM61jf9SFjrcJKqSr+/9K95VO/wwfP3fCO3dbZfOPaTSHtajtXmTuO
Q8cX8M5SsVH5pF6DAzPbCCsbRBYyodWlo5/EYV0Zj6CxNPb7f3Vah7W0i2HA00y3
mwhRZiDaOe3Gzw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:58:04 2025 by rpki-client