Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
File:                     _v9e0ddTW8-gPh8oisLHdWobEWA.mft (raw, json)
Hash identifier:          OGTmd8yroeLF+hHcWazzTSCjTlWbG1EG7r9yD0QkGho=
Subject key identifier:   A1:B5:AC:34:5E:72:D7:03:DF:B3:91:48:AA:0E:1B:7E:D6:A6:65:45
Authority key identifier: FE:FF:5E:D1:D7:53:5B:CF:A0:3E:1F:28:8A:C2:C7:75:6A:1B:11:60
Certificate issuer:       /CN=feff5ed1d7535bcfa03e1f288ac2c7756a1b1160
Certificate serial:       01975F4B08276313363A2FB0EB07066EB027
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
Manifest number:          3C
Signing time:             Wed 11 Jun 2025 14:00:42 +0000
Manifest this update:     Wed 11 Jun 2025 14:00:42 +0000
Manifest next update:     Thu 12 Jun 2025 14:00:42 +0000
Files and hashes:         1: _v9e0ddTW8-gPh8oisLHdWobEWA.crl (hash: pdoUVB3MZCFamA40EoecorUTWfZ9EsXm6bkBTUUNpNk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:4b:08:27:63:13:36:3a:2f:b0:eb:07:06:6e:b0:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feff5ed1d7535bcfa03e1f288ac2c7756a1b1160
        Validity
            Not Before: Jun 11 14:00:42 2025 GMT
            Not After : Jun 12 14:00:42 2025 GMT
        Subject: CN=a1b5ac345e72d703dfb39148aa0e1b7ed6a66545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cf:40:d5:51:a1:a8:24:38:5e:1d:82:29:13:
                    9f:59:6f:b3:a8:c5:c6:3a:6c:a9:b1:76:12:28:4c:
                    32:63:84:b7:22:ae:f0:e9:23:4a:f7:86:de:a2:db:
                    8d:c6:90:62:76:08:90:21:c6:e5:ec:60:49:6d:f1:
                    02:e5:b3:0f:d9:6e:ee:7d:f1:0d:c9:59:7a:52:ab:
                    8a:9c:63:d6:97:32:a8:75:06:00:f5:03:b5:7d:4d:
                    5b:c4:bb:64:48:20:5f:6d:fe:dd:af:e7:ef:17:e4:
                    36:69:c5:70:97:1d:37:e5:55:5a:31:bf:85:20:3f:
                    fa:1a:20:21:92:f4:55:94:5d:7e:55:bb:4b:12:f3:
                    16:9b:32:bf:87:19:3e:ca:1f:ad:70:a8:b8:27:81:
                    96:90:7c:ad:f8:cc:71:19:62:c5:4e:40:3d:96:6a:
                    2d:11:99:49:6c:c3:d8:9f:14:ea:1a:ab:79:54:a7:
                    f6:f6:89:86:1a:ff:fb:4b:57:aa:50:93:24:3f:0e:
                    cb:2f:9f:3f:e4:68:43:32:bd:68:5b:69:01:2d:e3:
                    15:82:70:0c:fa:a1:d0:05:cb:87:70:04:ae:4e:4a:
                    20:8c:a2:c0:fb:89:d6:c9:b0:6b:9c:7b:e0:98:6a:
                    30:de:a1:94:5a:0d:2c:46:c1:2d:f7:95:2b:41:d9:
                    a3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B5:AC:34:5E:72:D7:03:DF:B3:91:48:AA:0E:1B:7E:D6:A6:65:45
            X509v3 Authority Key Identifier:
                keyid:FE:FF:5E:D1:D7:53:5B:CF:A0:3E:1F:28:8A:C2:C7:75:6A:1B:11:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:db:6e:5d:da:f4:7e:d9:6f:6f:f8:27:73:fc:37:9b:a4:24:
         00:61:cd:d8:f5:14:7d:aa:08:77:32:5d:89:3a:f3:28:0f:4a:
         23:90:9c:78:e4:24:31:cb:b4:82:7e:83:d2:26:a4:00:19:4f:
         26:47:dc:5c:b6:d5:55:d7:00:ca:8a:ff:32:eb:95:3f:64:6c:
         42:92:52:78:29:e5:18:da:73:49:cc:54:2a:92:ab:5f:b3:3d:
         e0:dd:b7:d8:09:78:12:91:64:d1:fc:5e:e6:29:e8:25:4d:59:
         c7:19:22:25:d5:ee:27:62:39:e9:4c:ed:e2:03:32:df:af:35:
         74:68:ff:3f:b3:21:2f:fd:6d:67:67:f0:7f:e9:a5:2d:2a:d1:
         a3:71:e3:fd:3f:99:2e:c8:5e:19:d9:2e:92:14:ee:ef:de:dc:
         0e:16:31:db:0a:44:76:56:d0:58:71:99:bd:dc:b1:20:e4:a0:
         f9:58:ae:c1:ac:43:17:85:f7:b9:0c:ad:cb:20:f8:f5:21:51:
         84:e8:0d:58:25:07:e8:eb:23:44:0d:ec:f5:a1:60:04:7e:e9:
         c0:b1:73:e9:df:95:c6:d4:46:ea:1b:61:d4:dc:69:36:32:f4:
         cb:48:e1:50:19:17:9d:15:89:62:10:45:35:e3:f9:43:67:fb:
         4e:6b:33:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdfSwgnYxM2Oi+w6wcGbrAnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZmY1ZWQxZDc1MzViY2ZhMDNlMWYyODhhYzJjNzc1NmEx
YjExNjAwHhcNMjUwNjExMTQwMDQyWhcNMjUwNjEyMTQwMDQyWjAzMTEwLwYDVQQD
EyhhMWI1YWMzNDVlNzJkNzAzZGZiMzkxNDhhYTBlMWI3ZWQ2YTY2NTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM9A1VGhqCQ4Xh2CKROfWW+zqMXG
OmypsXYSKEwyY4S3Iq7w6SNK94beotuNxpBidgiQIcbl7GBJbfEC5bMP2W7uffEN
yVl6UquKnGPWlzKodQYA9QO1fU1bxLtkSCBfbf7dr+fvF+Q2acVwlx035VVaMb+F
ID/6GiAhkvRVlF1+VbtLEvMWmzK/hxk+yh+tcKi4J4GWkHyt+MxxGWLFTkA9lmot
EZlJbMPYnxTqGqt5VKf29omGGv/7S1eqUJMkPw7LL58/5GhDMr1oW2kBLeMVgnAM
+qHQBcuHcASuTkogjKLA+4nWybBrnHvgmGow3qGUWg0sRsEt95UrQdmjTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKG1rDRectcD37ORSKoOG37WpmVFMB8GA1UdIwQY
MBaAFP7/XtHXU1vPoD4fKIrCx3VqGxFgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3Y5ZTBkZFRXOC1nUGg4b2lzTEhkV29iRVdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9lZDczNzEtZGRlMy00YzE1LThiZTAt
NThhMTFiYjg5M2NkLzEvX3Y5ZTBkZFRXOC1nUGg4b2lzTEhkV29iRVdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9lZDczNzEtZGRlMy00YzE1LThiZTAtNThhMTFiYjg5M2Nk
LzEvX3Y5ZTBkZFRXOC1nUGg4b2lzTEhkV29iRVdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh9tuXdr0
ftlvb/gnc/w3m6QkAGHN2PUUfaoIdzJdiTrzKA9KI5CceOQkMcu0gn6D0iakABlP
JkfcXLbVVdcAyor/MuuVP2RsQpJSeCnlGNpzScxUKpKrX7M94N232Al4EpFk0fxe
5inoJU1ZxxkiJdXuJ2I56Uzt4gMy3681dGj/P7MhL/1tZ2fwf+mlLSrRo3Hj/T+Z
LsheGdkukhTu797cDhYx2wpEdlbQWHGZvdyxIOSg+ViuwaxDF4X3uQytyyD49SFR
hOgNWCUH6OsjRA3s9aFgBH7pwLFz6d+VxtRG6hth1NxpNjL0y0jhUBkXnRWJYhBF
NeP5Q2f7TmszYA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 20:29:34 2025 by rpki-client