Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
File:                     Df5SSMH7abOKMYjflHLozbyFwZM.mft (raw, json)
Hash identifier:          7mf1ZBo99ZW5GCr8k3r0Io+gFx0nXKJ2VY84tSnQxjQ=
Subject key identifier:   4F:98:CF:B6:01:5B:0F:FF:A0:65:CA:24:43:56:1F:87:4B:82:54:8C
Authority key identifier: 0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
Certificate issuer:       /CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Certificate serial:       01974BFB81D8AEE138DE8DE0F262A6C0E2EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
Manifest number:          045D
Signing time:             Sat 07 Jun 2025 20:01:03 +0000
Manifest this update:     Sat 07 Jun 2025 20:01:03 +0000
Manifest next update:     Sun 08 Jun 2025 20:01:03 +0000
Files and hashes:         1: Df5SSMH7abOKMYjflHLozbyFwZM.crl (hash: S4ybh4lkZ8R3QqdjeB0VomVDpd7dc7T5ARH4DkjIOXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:fb:81:d8:ae:e1:38:de:8d:e0:f2:62:a6:c0:e2:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
        Validity
            Not Before: Jun  7 20:01:03 2025 GMT
            Not After : Jun  8 20:01:03 2025 GMT
        Subject: CN=4f98cfb6015b0fffa065ca2443561f874b82548c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:15:80:1d:0c:c8:42:ff:9d:5c:69:86:8b:6c:
                    0f:1a:a5:ca:9c:bb:12:77:b0:4d:02:d7:dc:f3:a6:
                    5d:48:f0:2c:2d:7f:b3:52:74:27:95:bb:30:36:78:
                    88:eb:1a:7f:26:2a:ac:15:80:ce:1c:51:c0:17:45:
                    12:07:0f:9a:e5:ba:73:d6:a7:8d:f2:55:f9:5f:30:
                    a3:5e:87:93:98:de:c5:04:0b:4e:d3:26:e6:b8:68:
                    29:44:e6:09:1b:83:8d:e5:8c:2a:9c:ce:c1:85:23:
                    8c:32:bb:ff:7d:54:8b:70:3c:16:54:47:b4:4e:6f:
                    06:50:58:87:2e:2f:6b:d4:0b:b0:79:79:e0:66:e0:
                    62:2b:8a:a6:5e:df:a9:64:10:6d:b2:fd:48:03:61:
                    47:6b:a6:d4:67:50:45:4f:07:ec:6b:9f:98:51:2b:
                    44:2a:7a:f3:a0:8d:70:1f:8e:8d:49:b1:79:02:29:
                    d0:2e:4d:af:b7:9b:57:11:b1:56:92:6a:00:4a:76:
                    74:aa:93:c9:eb:04:60:a6:e2:21:01:dd:98:b3:5e:
                    6c:34:96:e8:f2:ad:4f:de:9a:95:15:ed:eb:05:bb:
                    de:f8:82:98:3c:fb:1c:c4:d2:d4:c2:5d:c1:64:6e:
                    23:ea:05:3d:d4:ac:27:e0:d6:9a:ac:7e:7c:55:4f:
                    6c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:98:CF:B6:01:5B:0F:FF:A0:65:CA:24:43:56:1F:87:4B:82:54:8C
            X509v3 Authority Key Identifier:
                keyid:0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:03:38:a5:ae:a3:e6:bb:9e:87:fe:26:99:ff:43:e8:9f:43:
         05:be:04:b1:1f:18:92:89:0b:e5:ea:dd:dc:34:7c:8d:e9:3e:
         62:55:d4:25:f6:84:f3:79:d6:6f:ce:1f:ac:f6:c4:c9:7e:7f:
         fc:ba:d5:e4:71:ab:ae:d5:d3:f0:06:92:b8:10:ab:ed:02:91:
         45:70:19:67:cd:6b:0a:96:b8:bd:b3:06:bc:75:66:28:f0:cd:
         63:ba:94:26:f2:0a:80:0b:e2:af:11:97:63:1f:35:44:e6:fe:
         e8:12:46:3a:1d:b8:31:e8:53:b5:95:4c:84:04:95:44:91:f3:
         76:e0:14:74:d2:d4:0b:67:14:3e:ad:91:8e:4f:ea:35:f2:bf:
         e5:f9:fe:e6:29:fc:f2:49:e3:81:7f:b2:09:19:f1:c6:34:62:
         ac:a1:aa:a5:94:d2:18:62:06:6c:13:e4:d5:5f:cc:8d:1b:8d:
         36:6f:0f:9f:9b:e1:1f:59:5b:ba:d8:50:05:65:fd:da:75:12:
         91:a2:d6:10:7b:1b:b0:1f:e0:b5:23:f8:d3:f4:e1:f9:f3:c6:
         4a:2c:94:fa:6f:64:67:00:84:eb:d2:42:93:4f:ae:a5:3b:83:
         2f:a5:0e:0b:a7:7b:86:14:2d:dd:cf:31:0d:f6:9b:2f:d1:f0:
         32:bf:94:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdL+4HYruE43o3g8mKmwOLuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZmU1MjQ4YzFmYjY5YjM4YTMxODhkZjk0NzJlOGNkYmM4
NWMxOTMwHhcNMjUwNjA3MjAwMTAzWhcNMjUwNjA4MjAwMTAzWjAzMTEwLwYDVQQD
Eyg0Zjk4Y2ZiNjAxNWIwZmZmYTA2NWNhMjQ0MzU2MWY4NzRiODI1NDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhWAHQzIQv+dXGmGi2wPGqXKnLsS
d7BNAtfc86ZdSPAsLX+zUnQnlbswNniI6xp/JiqsFYDOHFHAF0USBw+a5bpz1qeN
8lX5XzCjXoeTmN7FBAtO0ybmuGgpROYJG4ON5YwqnM7BhSOMMrv/fVSLcDwWVEe0
Tm8GUFiHLi9r1AuweXngZuBiK4qmXt+pZBBtsv1IA2FHa6bUZ1BFTwfsa5+YUStE
KnrzoI1wH46NSbF5AinQLk2vt5tXEbFWkmoASnZ0qpPJ6wRgpuIhAd2Ys15sNJbo
8q1P3pqVFe3rBbve+IKYPPscxNLUwl3BZG4j6gU91Kwn4NaarH58VU9s/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+Yz7YBWw//oGXKJENWH4dLglSMMB8GA1UdIwQY
MBaAFA3+UkjB+2mzijGI35Ry6M28hcGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGY1U1NNSDdhYk9LTVlqZmxITG96YnlGd1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82YTc1Y2UtM2MxNi00MzAwLWEzMzIt
NTQ4ZDA4NWI0NTVkLzEvRGY1U1NNSDdhYk9LTVlqZmxITG96YnlGd1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82YTc1Y2UtM2MxNi00MzAwLWEzMzItNTQ4ZDA4NWI0NTVk
LzEvRGY1U1NNSDdhYk9LTVlqZmxITG96YnlGd1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgM4pa6j
5rueh/4mmf9D6J9DBb4EsR8YkokL5erd3DR8jek+YlXUJfaE83nWb84frPbEyX5/
/LrV5HGrrtXT8AaSuBCr7QKRRXAZZ81rCpa4vbMGvHVmKPDNY7qUJvIKgAvirxGX
Yx81ROb+6BJGOh24MehTtZVMhASVRJHzduAUdNLUC2cUPq2Rjk/qNfK/5fn+5in8
8knjgX+yCRnxxjRirKGqpZTSGGIGbBPk1V/MjRuNNm8Pn5vhH1lbuthQBWX92nUS
kaLWEHsbsB/gtSP40/Th+fPGSiyU+m9kZwCE69JCk0+upTuDL6UOC6d7hhQt3c8x
DfabL9HwMr+UQw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:03:00 2025 by rpki-client