Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
File:                     muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft (raw, json)
Hash identifier:          LE4a03rwC6xeW5IQLD+aTKt9w1sd3B6eGyIXZK5EB8w=
Subject key identifier:   51:93:60:5B:9D:5A:DF:B9:DE:64:B8:D6:39:56:98:5A:14:42:6E:B7
Authority key identifier: 9A:E0:08:15:D2:BD:04:1D:CC:0E:CE:06:76:56:BE:5E:6E:B1:2B:62
Certificate issuer:       /CN=9ae00815d2bd041dcc0ece067656be5e6eb12b62
Certificate serial:       0197500F136E7B6BC173022156D30C65B85A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
Manifest number:          34
Signing time:             Sun 08 Jun 2025 15:00:54 +0000
Manifest this update:     Sun 08 Jun 2025 15:00:54 +0000
Manifest next update:     Mon 09 Jun 2025 15:00:54 +0000
Files and hashes:         1: muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl (hash: h+qIJeuiQqM89sCNeu9D2LfKfZKlhXE1rqsSurMk4t0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 15:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:0f:13:6e:7b:6b:c1:73:02:21:56:d3:0c:65:b8:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae00815d2bd041dcc0ece067656be5e6eb12b62
        Validity
            Not Before: Jun  8 15:00:54 2025 GMT
            Not After : Jun  9 15:00:54 2025 GMT
        Subject: CN=5193605b9d5adfb9de64b8d63956985a14426eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3a:7a:63:28:1a:8b:be:a5:58:6c:76:a7:c9:
                    11:b5:8f:1c:6e:27:0f:b3:98:4e:20:4e:eb:1a:c6:
                    4a:d3:d5:f6:3d:f1:5a:fe:e8:85:57:54:80:55:cc:
                    91:55:f3:92:66:53:c9:d7:aa:58:61:f8:ca:ac:cf:
                    8a:91:85:18:d9:78:ef:b1:73:14:22:3d:5e:ab:6d:
                    a2:cd:84:a8:ce:a6:c1:c5:4f:11:c6:7e:c0:12:cc:
                    14:a2:e8:8b:f0:8e:ad:7f:a7:fd:1f:9b:8d:dd:3c:
                    d1:fb:63:78:b2:dc:d1:39:8a:7d:da:05:9c:d5:6b:
                    48:69:b9:47:65:3f:fc:8f:d2:c1:10:70:12:e6:c1:
                    b1:db:42:8a:d9:94:ac:24:ea:a9:c1:0e:13:f5:17:
                    bd:f1:77:39:b6:c6:ae:c6:a8:70:69:35:41:57:ab:
                    8c:e1:d8:2f:63:59:11:6a:b5:44:88:e5:d3:83:c4:
                    43:de:ab:86:7c:89:bc:fb:50:7e:c6:55:7e:f3:06:
                    93:ce:ad:9e:d6:0b:38:20:b9:12:80:8d:69:6e:21:
                    ce:88:11:e6:1e:44:3b:e2:ae:c0:11:ea:19:c1:ac:
                    5c:95:5b:da:31:92:3e:d1:48:41:04:58:48:9b:dd:
                    f2:46:31:20:a7:1d:be:c9:b7:ad:bb:20:51:c8:a6:
                    b7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:93:60:5B:9D:5A:DF:B9:DE:64:B8:D6:39:56:98:5A:14:42:6E:B7
            X509v3 Authority Key Identifier:
                keyid:9A:E0:08:15:D2:BD:04:1D:CC:0E:CE:06:76:56:BE:5E:6E:B1:2B:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:6f:f5:38:a9:12:bc:ee:bc:b4:db:0a:61:34:91:fb:bd:f2:
         d4:22:fd:2a:ee:50:1e:f3:2a:51:de:c3:2b:6c:ba:80:2c:11:
         c5:de:8c:29:9c:88:41:c4:26:33:d1:87:91:f4:09:e4:95:17:
         27:55:56:bf:05:f6:83:27:90:eb:7f:61:99:a8:fb:54:40:33:
         7a:5c:9a:e4:43:a7:44:42:b6:87:7a:5e:41:47:42:c4:3b:dc:
         fc:28:ba:73:10:be:64:81:6a:76:77:f1:77:e8:59:9d:08:cb:
         ab:8e:ee:16:7a:69:15:17:d3:3a:fe:16:34:57:79:5a:04:d0:
         f7:fc:e6:a1:83:83:ee:9d:dd:55:82:b2:8d:73:05:4d:72:75:
         fb:1d:90:a1:7e:3a:06:23:3e:a4:21:ac:de:4a:c8:24:a6:d4:
         c1:bb:11:a5:91:1b:eb:68:28:f8:02:e7:e2:8f:8c:06:81:5b:
         c1:0c:d3:78:d2:1a:ef:30:ff:98:9f:37:cb:39:02:55:e8:db:
         42:b0:30:cc:40:f5:e2:da:09:d7:ce:6f:02:ec:1d:c4:01:fa:
         5d:d2:54:f2:22:80:74:66:e3:c2:66:c4:4e:49:b2:8e:24:51:
         59:d5:54:4a:64:a9:89:b2:ef:6a:87:5e:6e:2f:32:73:37:b0:
         f6:19:fb:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQDxNue2vBcwIhVtMMZbhaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZTAwODE1ZDJiZDA0MWRjYzBlY2UwNjc2NTZiZTVlNmVi
MTJiNjIwHhcNMjUwNjA4MTUwMDU0WhcNMjUwNjA5MTUwMDU0WjAzMTEwLwYDVQQD
Eyg1MTkzNjA1YjlkNWFkZmI5ZGU2NGI4ZDYzOTU2OTg1YTE0NDI2ZWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjp6Yygai76lWGx2p8kRtY8cbicP
s5hOIE7rGsZK09X2PfFa/uiFV1SAVcyRVfOSZlPJ16pYYfjKrM+KkYUY2XjvsXMU
Ij1eq22izYSozqbBxU8Rxn7AEswUouiL8I6tf6f9H5uN3TzR+2N4stzROYp92gWc
1WtIablHZT/8j9LBEHAS5sGx20KK2ZSsJOqpwQ4T9Re98Xc5tsauxqhwaTVBV6uM
4dgvY1kRarVEiOXTg8RD3quGfIm8+1B+xlV+8waTzq2e1gs4ILkSgI1pbiHOiBHm
HkQ74q7AEeoZwaxclVvaMZI+0UhBBFhIm93yRjEgpx2+ybetuyBRyKa3nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGTYFudWt+53mS41jlWmFoUQm63MB8GA1UdIwQY
MBaAFJrgCBXSvQQdzA7OBnZWvl5usStiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXVBSUZkSzlCQjNNRHM0R2RsYS1YbTZ4SzJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MDQxNWItNTk2Yy00ODBkLThiZTIt
ZjQ4NTFkYTg3NjNkLzEvbXVBSUZkSzlCQjNNRHM0R2RsYS1YbTZ4SzJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80MDQxNWItNTk2Yy00ODBkLThiZTItZjQ4NTFkYTg3NjNk
LzEvbXVBSUZkSzlCQjNNRHM0R2RsYS1YbTZ4SzJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2/1OKkS
vO68tNsKYTSR+73y1CL9Ku5QHvMqUd7DK2y6gCwRxd6MKZyIQcQmM9GHkfQJ5JUX
J1VWvwX2gyeQ639hmaj7VEAzelya5EOnREK2h3peQUdCxDvc/Ci6cxC+ZIFqdnfx
d+hZnQjLq47uFnppFRfTOv4WNFd5WgTQ9/zmoYOD7p3dVYKyjXMFTXJ1+x2QoX46
BiM+pCGs3krIJKbUwbsRpZEb62go+ALn4o+MBoFbwQzTeNIa7zD/mJ83yzkCVejb
QrAwzED14toJ185vAuwdxAH6XdJU8iKAdGbjwmbETkmyjiRRWdVUSmSpibLvaode
bi8yczew9hn7aQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:22:15 2025 by rpki-client