Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
File:                     79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft (raw, json)
Hash identifier:          9dmIIhyBj59qF+6tGXS+Io8rx8dxMn+BpflKCm9VDv8=
Subject key identifier:   24:7F:14:25:AD:15:14:1E:82:F6:63:FD:FD:5E:B0:68:E7:85:07:50
Authority key identifier: EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63
Certificate issuer:       /CN=efd30d69329d33f44212bf86b69ff20881051063
Certificate serial:       01976026F32148F519CC518335309498909B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
Manifest number:          1584
Signing time:             Wed 11 Jun 2025 18:00:54 +0000
Manifest this update:     Wed 11 Jun 2025 18:00:54 +0000
Manifest next update:     Thu 12 Jun 2025 18:00:54 +0000
Files and hashes:         1: 79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl (hash: rwaTlVwtuMbIuBRc9T/PcKI+I3H7CvKlZ+pBrMhnYew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 15:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:60:26:f3:21:48:f5:19:cc:51:83:35:30:94:98:90:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd30d69329d33f44212bf86b69ff20881051063
        Validity
            Not Before: Jun 11 18:00:54 2025 GMT
            Not After : Jun 12 18:00:54 2025 GMT
        Subject: CN=247f1425ad15141e82f663fdfd5eb068e7850750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:58:13:5b:89:f2:66:bb:7e:4b:f7:e7:05:c8:
                    cc:91:7c:e4:54:0e:4d:75:96:41:8d:d6:45:66:f8:
                    8a:a3:c5:ba:af:88:ca:07:7c:ce:d5:2f:49:ef:a8:
                    b4:30:f1:c2:53:9b:d7:bb:bd:ee:1b:b8:22:f7:fc:
                    be:f3:6c:40:8b:7c:b0:23:01:08:47:18:aa:4c:b2:
                    38:71:a9:fd:1d:ba:28:a2:6a:dd:8f:71:98:75:3f:
                    d1:e0:99:67:ea:01:31:f7:cb:73:39:e2:8a:83:33:
                    f4:f4:e6:3d:08:54:55:58:7b:f2:7c:12:f2:b3:5e:
                    b0:64:50:54:55:c4:6a:6b:16:6f:f7:f1:59:24:3f:
                    07:5c:90:72:3b:de:00:b0:c8:d6:6b:e5:49:bc:75:
                    e0:0a:06:b9:31:c4:7f:03:47:92:7c:74:2b:98:4b:
                    99:0b:ab:c9:a2:4b:e7:08:62:03:94:6a:e6:1f:4a:
                    2d:e9:45:be:87:66:fc:35:8b:f5:d9:37:ee:72:27:
                    c5:77:32:dd:f4:dd:68:d5:18:7f:d6:99:b5:1d:87:
                    07:aa:b7:e8:c0:48:68:98:4d:af:dd:36:62:c5:8a:
                    8d:cf:ee:22:49:64:47:d6:cb:d9:49:ca:b9:8c:da:
                    ee:8b:4a:48:86:97:d9:50:2a:b9:1b:be:4e:da:4c:
                    63:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7F:14:25:AD:15:14:1E:82:F6:63:FD:FD:5E:B0:68:E7:85:07:50
            X509v3 Authority Key Identifier:
                keyid:EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:1d:f5:f4:a8:cb:a1:a6:57:3a:18:7c:d6:25:74:ce:7f:02:
         93:9e:1a:70:69:2f:2d:17:d6:8f:66:f0:ce:c7:4c:a1:77:d4:
         ac:9d:1a:d3:3c:cd:47:be:c7:51:ad:ab:8d:03:34:28:6b:00:
         a2:18:66:2c:94:3d:47:fa:a2:22:17:48:29:ae:2f:a2:c8:e4:
         f5:b7:eb:5a:30:39:8a:d0:d9:70:86:48:d1:d9:17:e2:b4:4a:
         86:1d:ca:ad:1a:ee:e7:c5:20:c7:d3:91:62:6e:ee:0b:a8:e9:
         79:ce:8b:c1:c8:17:e0:26:f6:38:a1:b8:50:73:b2:1e:5d:9e:
         52:96:31:bd:17:97:80:03:eb:04:9d:9e:f5:ae:67:4d:f2:4f:
         1e:5c:81:ba:46:5d:4e:a1:b5:6b:c4:01:31:31:3b:c8:86:ee:
         a5:20:06:12:2c:b2:c1:b1:37:05:28:40:5b:1e:f0:cb:8b:1a:
         0f:33:3c:e2:c4:81:46:f2:77:cd:46:b2:77:64:b4:30:f0:95:
         20:86:7e:42:1e:72:b7:2a:74:16:dc:50:e9:85:64:ee:2c:51:
         9f:39:8f:09:45:d8:be:5e:63:9e:e6:64:8e:36:61:a2:ba:e5:
         69:b6:31:12:9f:38:45:a5:42:0d:6c:3d:9d:95:18:2e:8a:23:
         64:fb:d0:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdgJvMhSPUZzFGDNTCUmJCbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZDMwZDY5MzI5ZDMzZjQ0MjEyYmY4NmI2OWZmMjA4ODEw
NTEwNjMwHhcNMjUwNjExMTgwMDU0WhcNMjUwNjEyMTgwMDU0WjAzMTEwLwYDVQQD
EygyNDdmMTQyNWFkMTUxNDFlODJmNjYzZmRmZDVlYjA2OGU3ODUwNzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lgTW4nyZrt+S/fnBcjMkXzkVA5N
dZZBjdZFZviKo8W6r4jKB3zO1S9J76i0MPHCU5vXu73uG7gi9/y+82xAi3ywIwEI
RxiqTLI4can9Hbooomrdj3GYdT/R4Jln6gEx98tzOeKKgzP09OY9CFRVWHvyfBLy
s16wZFBUVcRqaxZv9/FZJD8HXJByO94AsMjWa+VJvHXgCga5McR/A0eSfHQrmEuZ
C6vJokvnCGIDlGrmH0ot6UW+h2b8NYv12TfucifFdzLd9N1o1Rh/1pm1HYcHqrfo
wEhomE2v3TZixYqNz+4iSWRH1svZScq5jNrui0pIhpfZUCq5G75O2kxj+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCR/FCWtFRQegvZj/f1esGjnhQdQMB8GA1UdIwQY
MBaAFO/TDWkynTP0QhK/hraf8giBBRBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzlNTmFUS2RNX1JDRXItR3RwX3lDSUVGRUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lMjU0YWQtNjg4OS00MTk1LTgyMGEt
ZjM3MzkyMTc3OGUxLzEvNzlNTmFUS2RNX1JDRXItR3RwX3lDSUVGRUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9lMjU0YWQtNjg4OS00MTk1LTgyMGEtZjM3MzkyMTc3OGUx
LzEvNzlNTmFUS2RNX1JDRXItR3RwX3lDSUVGRUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALR319KjL
oaZXOhh81iV0zn8Ck54acGkvLRfWj2bwzsdMoXfUrJ0a0zzNR77HUa2rjQM0KGsA
ohhmLJQ9R/qiIhdIKa4vosjk9bfrWjA5itDZcIZI0dkX4rRKhh3KrRru58Ugx9OR
Ym7uC6jpec6LwcgX4Cb2OKG4UHOyHl2eUpYxvReXgAPrBJ2e9a5nTfJPHlyBukZd
TqG1a8QBMTE7yIbupSAGEiyywbE3BShAWx7wy4saDzM84sSBRvJ3zUayd2S0MPCV
IIZ+Qh5ytyp0FtxQ6YVk7ixRnzmPCUXYvl5jnuZkjjZhorrlabYxEp84RaVCDWw9
nZUYLoojZPvQNw==
-----END CERTIFICATE-----
Generated at Thu Jun 12 00:03:30 2025 by rpki-client