Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
File:                     0o9VSu1_jnFG6ctj9eMaXbHhupM.mft (raw, json)
Hash identifier:          89oGDuwDjkmdB9zx72etJSrawBKE2HDAYjb+LenFl/U=
Subject key identifier:   D6:49:F7:BF:81:B7:F4:30:A8:66:D4:E0:6D:D0:D8:1A:F1:ED:EA:F1
Authority key identifier: D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
Certificate issuer:       /CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Certificate serial:       0197643A1A4EA9FC257A14D32C57B84E67B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
Manifest number:          1584
Signing time:             Thu 12 Jun 2025 13:00:18 +0000
Manifest this update:     Thu 12 Jun 2025 13:00:18 +0000
Manifest next update:     Fri 13 Jun 2025 13:00:18 +0000
Files and hashes:         1: 0o9VSu1_jnFG6ctj9eMaXbHhupM.crl (hash: jHdpLm9J1EGnXpE90AcMV1SLcNqqC2oorofdSr8zO+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:3a:1a:4e:a9:fc:25:7a:14:d3:2c:57:b8:4e:67:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
        Validity
            Not Before: Jun 12 13:00:18 2025 GMT
            Not After : Jun 13 13:00:18 2025 GMT
        Subject: CN=d649f7bf81b7f430a866d4e06dd0d81af1edeaf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dc:2a:d9:18:4d:fe:14:83:09:22:4e:86:d4:
                    c8:d9:9e:e8:34:47:82:37:4c:f8:c0:8a:a1:73:87:
                    54:06:46:90:01:3a:5e:7a:a8:70:cf:66:c4:f9:ea:
                    2d:e2:ae:13:99:d8:c6:9f:1a:6c:de:de:3e:96:52:
                    39:f4:67:a1:cd:c9:09:6b:6d:a9:2f:b6:db:a3:2d:
                    73:48:ec:b4:3e:1b:8b:d3:25:5e:19:da:1b:5a:4e:
                    eb:f4:78:21:0e:0e:96:2d:9d:7f:59:0b:93:71:22:
                    18:b7:8d:01:af:30:8a:22:e3:fa:f6:9f:8d:a8:a9:
                    4b:86:35:08:80:c3:0d:9e:39:88:8e:ee:bb:36:e3:
                    72:9b:10:b5:a0:db:fc:58:1a:9a:ff:77:95:a2:65:
                    e7:9f:02:e1:db:2e:60:c8:18:54:2d:a6:4f:66:c4:
                    a0:08:86:0c:1d:d8:a0:1f:99:9e:a8:15:59:72:26:
                    c9:85:61:22:97:34:a1:57:4c:5c:8c:94:16:c9:71:
                    e6:66:e9:bb:11:0e:fa:c8:70:44:6d:ed:db:e6:b1:
                    28:09:c2:65:05:53:0d:a0:57:7e:46:e7:ad:06:ff:
                    44:13:fd:82:99:59:91:ed:99:39:ca:ee:3a:27:7f:
                    71:62:bb:97:b7:d4:e2:d5:76:fd:ab:6d:af:f8:9a:
                    8b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:49:F7:BF:81:B7:F4:30:A8:66:D4:E0:6D:D0:D8:1A:F1:ED:EA:F1
            X509v3 Authority Key Identifier:
                keyid:D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:e9:69:87:b7:cb:dc:93:27:0f:f3:1b:b8:b6:62:2c:67:e4:
         64:35:fd:f8:0e:d6:7e:e6:be:34:7f:f8:da:96:3b:2e:59:70:
         c5:bc:7c:de:94:c3:55:ca:a4:51:c7:8c:9b:ca:0e:98:93:06:
         47:3f:0f:02:e4:63:4d:94:eb:73:66:f9:70:83:dd:a4:24:ff:
         80:63:97:19:6e:aa:d4:76:50:62:86:e8:b1:52:fc:3f:76:46:
         b2:7f:fe:38:ae:38:75:ab:06:ba:d0:2b:6b:eb:e5:eb:1d:dd:
         c4:4f:aa:87:ff:f6:7a:f2:4e:89:00:ef:06:6d:5c:91:88:c1:
         eb:1a:c3:cc:c5:1a:ca:27:f2:a7:ea:c3:01:b7:43:40:79:36:
         2c:59:ed:f0:19:1a:a7:39:ff:3c:06:56:35:03:72:c5:dd:8a:
         08:07:d4:8e:f0:a4:25:3a:b1:4a:e2:95:66:9c:28:2f:4c:55:
         8d:2f:34:16:d9:b2:17:e2:78:f7:68:d1:c1:e3:ab:a7:e2:ca:
         bf:80:c2:c8:dc:8c:4d:29:51:aa:d2:b9:51:ab:77:8f:06:35:
         49:c7:e2:69:89:5d:b1:b0:79:1f:a9:28:a2:f2:5f:cf:14:9a:
         53:73:a7:68:c9:59:f1:36:4c:76:d5:c1:fc:9d:78:46:9d:61:
         37:dd:40:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdkOhpOqfwlehTTLFe4Tme1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyOGY1NTRhZWQ3ZjhlNzE0NmU5Y2I2M2Y1ZTMxYTVkYjFl
MWJhOTMwHhcNMjUwNjEyMTMwMDE4WhcNMjUwNjEzMTMwMDE4WjAzMTEwLwYDVQQD
EyhkNjQ5ZjdiZjgxYjdmNDMwYTg2NmQ0ZTA2ZGQwZDgxYWYxZWRlYWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtwq2RhN/hSDCSJOhtTI2Z7oNEeC
N0z4wIqhc4dUBkaQATpeeqhwz2bE+eot4q4TmdjGnxps3t4+llI59GehzckJa22p
L7bboy1zSOy0PhuL0yVeGdobWk7r9HghDg6WLZ1/WQuTcSIYt40BrzCKIuP69p+N
qKlLhjUIgMMNnjmIju67NuNymxC1oNv8WBqa/3eVomXnnwLh2y5gyBhULaZPZsSg
CIYMHdigH5meqBVZcibJhWEilzShV0xcjJQWyXHmZum7EQ76yHBEbe3b5rEoCcJl
BVMNoFd+RuetBv9EE/2CmVmR7Zk5yu46J39xYruXt9Ti1Xb9q22v+JqLPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZJ97+Bt/QwqGbU4G3Q2Brx7erxMB8GA1UdIwQY
MBaAFNKPVUrtf45xRunLY/XjGl2x4bqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG85VlN1MV9qbkZHNmN0ajllTWFYYkhodXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZjZiNGYtNzU5MC00ZDA1LTg1M2Mt
MTA2ZWQxNTkwMTI5LzEvMG85VlN1MV9qbkZHNmN0ajllTWFYYkhodXBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8zZjZiNGYtNzU5MC00ZDA1LTg1M2MtMTA2ZWQxNTkwMTI5
LzEvMG85VlN1MV9qbkZHNmN0ajllTWFYYkhodXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlOlph7fL
3JMnD/MbuLZiLGfkZDX9+A7Wfua+NH/42pY7Lllwxbx83pTDVcqkUceMm8oOmJMG
Rz8PAuRjTZTrc2b5cIPdpCT/gGOXGW6q1HZQYobosVL8P3ZGsn/+OK44dasGutAr
a+vl6x3dxE+qh//2evJOiQDvBm1ckYjB6xrDzMUayifyp+rDAbdDQHk2LFnt8Bka
pzn/PAZWNQNyxd2KCAfUjvCkJTqxSuKVZpwoL0xVjS80FtmyF+J492jRweOrp+LK
v4DCyNyMTSlRqtK5Uat3jwY1ScfiaYldsbB5H6koovJfzxSaU3OnaMlZ8TZMdtXB
/J14Rp1hN91AxA==
-----END CERTIFICATE-----
Generated at Thu Jun 12 18:03:27 2025 by rpki-client