Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
File:                     vMdRnWKILvRnL6ISdmJXJ6L74GE.mft (raw, json)
Hash identifier:          fhYcrDvx0VrPHZdYbLAnzKJG52DYahnYvIEVrqjUDMI=
Subject key identifier:   F6:F4:67:D0:79:E1:57:58:9C:4D:E2:03:CF:F8:E8:19:A6:A6:03:D4
Authority key identifier: BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61
Certificate issuer:       /CN=bcc7519d62882ef4672fa21276625727a2fbe061
Certificate serial:       01974C68FB8DA8D3E049B3BBA3A652FEA9CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
Manifest number:          0DE3
Signing time:             Sat 07 Jun 2025 22:00:37 +0000
Manifest this update:     Sat 07 Jun 2025 22:00:37 +0000
Manifest next update:     Sun 08 Jun 2025 22:00:37 +0000
Files and hashes:         1: vMdRnWKILvRnL6ISdmJXJ6L74GE.crl (hash: i9aJGuoe3nYnASivRdOrNtMNnznNhqw9OzzfIiOJn+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:68:fb:8d:a8:d3:e0:49:b3:bb:a3:a6:52:fe:a9:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc7519d62882ef4672fa21276625727a2fbe061
        Validity
            Not Before: Jun  7 22:00:37 2025 GMT
            Not After : Jun  8 22:00:37 2025 GMT
        Subject: CN=f6f467d079e157589c4de203cff8e819a6a603d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b2:44:87:55:59:57:74:24:59:1f:3c:1c:c8:
                    2a:2e:65:8c:b4:b5:c5:a5:87:47:e8:d4:b0:63:82:
                    09:70:f9:4a:03:1b:7c:d6:db:d5:4d:cf:b5:97:ed:
                    4c:00:57:d0:ef:b7:d9:bc:d6:25:a7:4e:01:cb:67:
                    0f:f2:01:fd:0d:01:ab:80:78:42:cf:2a:95:3e:50:
                    fb:8a:f4:62:94:64:24:cc:10:79:a7:a3:96:b5:0a:
                    07:5d:be:6a:5e:5d:b4:fd:6d:d4:ec:5b:79:2e:a8:
                    a5:02:62:d0:55:88:22:5f:8e:cc:09:0b:f3:e1:1f:
                    fb:bc:0f:3b:c6:51:2c:4c:60:63:e5:8a:a7:17:95:
                    88:c2:c7:2d:59:ff:7b:63:84:2f:2f:73:d0:90:11:
                    a7:33:f1:d1:f2:f9:05:5e:1d:1d:1d:21:49:28:ef:
                    a6:2b:6b:55:dc:b7:42:03:c8:2b:f7:51:8b:b8:5c:
                    1f:67:a7:6c:28:1c:71:11:f4:30:06:8b:d5:9e:61:
                    ee:8a:c1:65:40:81:37:5c:16:b1:c5:8e:ec:64:cf:
                    91:52:fb:9b:94:9c:d4:1d:32:70:dc:d5:73:a6:8a:
                    6e:51:ec:6a:03:dc:ef:ab:42:bf:0e:1e:22:0e:f2:
                    61:c8:af:9a:cd:3f:0e:bf:43:ed:6a:20:01:aa:c6:
                    0c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F4:67:D0:79:E1:57:58:9C:4D:E2:03:CF:F8:E8:19:A6:A6:03:D4
            X509v3 Authority Key Identifier:
                keyid:BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:27:33:d1:04:95:48:b9:a7:3c:38:52:d9:cc:a3:54:39:53:
         49:1c:92:52:b3:b3:ce:43:ca:e4:fa:92:8d:5d:48:b3:bf:f8:
         16:aa:00:5b:3c:ab:1a:fa:61:ca:6f:78:f5:95:16:34:6b:a9:
         ff:b3:c4:e4:fa:bc:a3:42:07:a7:6e:5b:5e:78:e7:cc:1a:01:
         cc:5a:54:0c:e9:6d:c2:94:e8:e7:01:89:d7:38:5b:07:a0:bb:
         8a:f0:af:67:2f:9a:0b:4a:a3:80:ac:e6:18:61:bf:9f:6d:d8:
         26:ba:f3:45:dc:bd:d2:13:35:dc:3b:27:6b:8f:32:d2:82:89:
         34:1e:a2:cf:82:4a:bc:5c:e7:83:19:ea:ac:0f:e9:c1:6b:72:
         22:e5:94:a8:80:3a:cb:4e:94:c8:e8:2b:8d:07:84:7b:98:b7:
         5a:1b:71:0e:2e:e8:f6:4d:ef:53:49:16:92:75:5f:62:da:00:
         aa:1b:cd:25:ac:90:b7:ec:28:de:07:66:09:fd:5c:66:a6:f4:
         e8:a3:a1:4f:eb:6b:40:d5:ad:56:74:b3:40:f2:ff:c5:1b:cf:
         a6:f1:97:33:c7:2c:72:2b:56:db:8e:dc:77:09:dd:64:3b:ff:
         4f:11:ff:a9:c7:f2:44:41:bb:a5:10:ab:4d:90:3a:a2:a4:1b:
         7e:7c:bd:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMaPuNqNPgSbO7o6ZS/qnOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYzc1MTlkNjI4ODJlZjQ2NzJmYTIxMjc2NjI1NzI3YTJm
YmUwNjEwHhcNMjUwNjA3MjIwMDM3WhcNMjUwNjA4MjIwMDM3WjAzMTEwLwYDVQQD
EyhmNmY0NjdkMDc5ZTE1NzU4OWM0ZGUyMDNjZmY4ZTgxOWE2YTYwM2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobJEh1VZV3QkWR88HMgqLmWMtLXF
pYdH6NSwY4IJcPlKAxt81tvVTc+1l+1MAFfQ77fZvNYlp04By2cP8gH9DQGrgHhC
zyqVPlD7ivRilGQkzBB5p6OWtQoHXb5qXl20/W3U7Ft5LqilAmLQVYgiX47MCQvz
4R/7vA87xlEsTGBj5YqnF5WIwsctWf97Y4QvL3PQkBGnM/HR8vkFXh0dHSFJKO+m
K2tV3LdCA8gr91GLuFwfZ6dsKBxxEfQwBovVnmHuisFlQIE3XBaxxY7sZM+RUvub
lJzUHTJw3NVzpopuUexqA9zvq0K/Dh4iDvJhyK+azT8Ov0PtaiABqsYMWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPb0Z9B54VdYnE3iA8/46BmmpgPUMB8GA1UdIwQY
MBaAFLzHUZ1iiC70Zy+iEnZiVyei++BhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk1kUm5XS0lMdlJuTDZJU2RtSlhKNkw3NEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8yNTk0NGUtYzUxYy00ZTIwLTg3NTMt
MmJmMGM2Nzg3ZmJiLzEvdk1kUm5XS0lMdlJuTDZJU2RtSlhKNkw3NEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8yNTk0NGUtYzUxYy00ZTIwLTg3NTMtMmJmMGM2Nzg3ZmJi
LzEvdk1kUm5XS0lMdlJuTDZJU2RtSlhKNkw3NEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCcz0QSV
SLmnPDhS2cyjVDlTSRySUrOzzkPK5PqSjV1Is7/4FqoAWzyrGvphym949ZUWNGup
/7PE5Pq8o0IHp25bXnjnzBoBzFpUDOltwpTo5wGJ1zhbB6C7ivCvZy+aC0qjgKzm
GGG/n23YJrrzRdy90hM13Dsna48y0oKJNB6iz4JKvFzngxnqrA/pwWtyIuWUqIA6
y06UyOgrjQeEe5i3WhtxDi7o9k3vU0kWknVfYtoAqhvNJayQt+wo3gdmCf1cZqb0
6KOhT+trQNWtVnSzQPL/xRvPpvGXM8cscitW247cdwndZDv/TxH/qcfyREG7pRCr
TZA6oqQbfny9Ow==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:13:55 2025 by rpki-client