Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
File:                     kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft (raw, json)
Hash identifier:          uohaS6Rv6L6Xb/kw6lu1DoojgXmC7CRLRLsqS0iELXo=
Subject key identifier:   39:37:2E:00:9A:C1:39:85:42:3A:1B:61:23:0F:E2:3D:6C:8C:22:5B
Authority key identifier: 91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
Certificate issuer:       /CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Certificate serial:       0197488CD0E9DF5B1B9B16102D3D95736B6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
Manifest number:          0C61
Signing time:             Sat 07 Jun 2025 04:01:17 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:17 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:17 +0000
Files and hashes:         1: kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl (hash: 1wFoah2iisK1CsfZAN/I57TyiwoYvm66LQTkuV8acIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:d0:e9:df:5b:1b:9b:16:10:2d:3d:95:73:6b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9143c5f48c77a79c985f5e5362e082ad54e23063
        Validity
            Not Before: Jun  7 04:01:17 2025 GMT
            Not After : Jun  8 04:01:17 2025 GMT
        Subject: CN=39372e009ac13985423a1b61230fe23d6c8c225b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5b:13:8d:a0:51:8f:e6:6d:03:54:7d:5e:85:
                    29:81:9f:bf:4c:c7:e1:b5:46:3d:98:f5:ec:7b:29:
                    1b:74:8c:0c:57:ad:68:68:38:ee:08:1d:36:76:3e:
                    c9:e9:6c:a9:af:0c:2e:6e:92:ab:b7:c2:9c:1e:d7:
                    1c:7a:b3:e4:f1:28:d7:22:52:51:a0:b7:78:d1:49:
                    ee:d1:45:a3:d9:29:9e:42:2b:04:ed:f3:75:e9:65:
                    98:25:70:1d:a7:96:5e:a7:4e:8d:bd:a3:8d:22:bb:
                    f7:69:fb:e6:84:b4:6f:4d:1a:21:a3:0c:00:83:3a:
                    23:4e:48:b1:f9:36:1f:95:c5:5e:a4:af:51:9f:c6:
                    e1:78:ce:8f:e8:a5:bb:61:f2:7c:5a:9d:23:32:69:
                    3e:9b:c5:40:ce:71:0c:fe:9c:4e:5c:d9:43:25:f8:
                    11:75:ab:44:23:b2:88:9f:d4:93:94:9a:b8:41:77:
                    99:2a:6a:4f:6f:6e:94:51:f4:c1:02:45:24:ca:a1:
                    c2:90:7c:3d:15:6e:1f:9f:b1:11:31:98:0c:73:27:
                    24:f3:76:26:d9:e3:ad:6d:84:b2:02:18:0a:ed:9d:
                    0d:ae:ef:33:53:ee:c8:b2:c6:c5:90:68:a3:6e:c1:
                    60:f7:cf:f3:68:a6:ad:cd:b3:2c:3f:5f:04:94:13:
                    9d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:37:2E:00:9A:C1:39:85:42:3A:1B:61:23:0F:E2:3D:6C:8C:22:5B
            X509v3 Authority Key Identifier:
                keyid:91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e4:24:96:fe:bc:bb:92:a9:cc:08:6c:08:d5:a9:96:d3:86:
         44:d5:3c:e1:2a:75:58:e2:af:28:a4:df:84:e8:b8:ac:f1:f4:
         f7:83:ba:c6:5e:fa:50:c8:2d:80:00:d7:28:5b:5f:45:36:16:
         fd:0f:f2:16:82:5f:74:bf:73:f5:83:c0:c8:c8:c3:ea:3e:4b:
         5d:33:c8:14:0a:90:2f:6e:e8:41:0e:cf:63:b3:c4:0f:39:cf:
         f8:0b:1d:75:5a:88:fa:b7:ed:d5:ef:0f:6a:00:d4:ec:b8:05:
         1c:a5:b0:4e:f0:0d:d1:35:bc:4f:76:68:0b:61:e7:3e:6e:50:
         59:e0:3e:bf:1d:0d:45:9f:13:f3:13:74:27:5f:1e:ab:82:21:
         4e:4e:f5:24:e1:d0:06:78:f9:d9:89:e7:90:27:fe:5c:1b:6a:
         1d:99:a0:c7:44:34:0c:bb:ff:20:97:60:c2:bb:c8:82:05:04:
         04:1a:ea:66:1b:00:77:b1:2e:1e:31:ef:ff:10:7f:98:9d:b7:
         30:4b:45:14:56:43:5e:0c:00:56:85:ed:c2:5c:f4:5e:7a:c6:
         fd:95:82:5e:e9:20:0b:6a:4f:0d:5e:7d:a1:c4:7a:bb:8d:76:
         b0:1e:dc:d8:55:fa:0a:5c:b7:41:da:ca:2a:d8:41:63:77:75:
         e5:95:f5:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjNDp31sbmxYQLT2Vc2tqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNDNjNWY0OGM3N2E3OWM5ODVmNWU1MzYyZTA4MmFkNTRl
MjMwNjMwHhcNMjUwNjA3MDQwMTE3WhcNMjUwNjA4MDQwMTE3WjAzMTEwLwYDVQQD
EygzOTM3MmUwMDlhYzEzOTg1NDIzYTFiNjEyMzBmZTIzZDZjOGMyMjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilsTjaBRj+ZtA1R9XoUpgZ+/TMfh
tUY9mPXseykbdIwMV61oaDjuCB02dj7J6WyprwwubpKrt8KcHtccerPk8SjXIlJR
oLd40Unu0UWj2SmeQisE7fN16WWYJXAdp5Zep06NvaONIrv3afvmhLRvTRohowwA
gzojTkix+TYflcVepK9Rn8bheM6P6KW7YfJ8Wp0jMmk+m8VAznEM/pxOXNlDJfgR
datEI7KIn9STlJq4QXeZKmpPb26UUfTBAkUkyqHCkHw9FW4fn7ERMZgMcyck83Ym
2eOtbYSyAhgK7Z0Nru8zU+7IssbFkGijbsFg98/zaKatzbMsP18ElBOd0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDk3LgCawTmFQjobYSMP4j1sjCJbMB8GA1UdIwQY
MBaAFJFDxfSMd6ecmF9eU2Lggq1U4jBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VQRjlJeDNwNXlZWDE1VFl1Q0NyVlRpTUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lYmM4MDQtZTNjNi00MGU2LWJmYmUt
YmRmMzY0YmE3N2NkLzEva1VQRjlJeDNwNXlZWDE1VFl1Q0NyVlRpTUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9lYmM4MDQtZTNjNi00MGU2LWJmYmUtYmRmMzY0YmE3N2Nk
LzEva1VQRjlJeDNwNXlZWDE1VFl1Q0NyVlRpTUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOQklv68
u5KpzAhsCNWpltOGRNU84Sp1WOKvKKTfhOi4rPH094O6xl76UMgtgADXKFtfRTYW
/Q/yFoJfdL9z9YPAyMjD6j5LXTPIFAqQL27oQQ7PY7PEDznP+AsddVqI+rft1e8P
agDU7LgFHKWwTvAN0TW8T3ZoC2HnPm5QWeA+vx0NRZ8T8xN0J18eq4IhTk71JOHQ
Bnj52YnnkCf+XBtqHZmgx0Q0DLv/IJdgwrvIggUEBBrqZhsAd7EuHjHv/xB/mJ23
MEtFFFZDXgwAVoXtwlz0XnrG/ZWCXukgC2pPDV59ocR6u412sB7c2FX6Cly3QdrK
KthBY3d15ZX1HA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:26:06 2025 by rpki-client