Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
File:                     3sQzl3xytL5diI9WhT7TGh_x78Y.mft (raw, json)
Hash identifier:          o/0lkObE84ycgwRJGINvpF6CjOjzzRsIu9S/5OPJHto=
Subject key identifier:   46:FF:3F:26:19:DE:7B:4E:1B:DE:77:AE:87:81:81:C3:C9:70:B8:8F
Authority key identifier: DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
Certificate issuer:       /CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Certificate serial:       0197628332DD1B5DEA7940C0F4DB3B39E261
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
Manifest number:          0C69
Signing time:             Thu 12 Jun 2025 05:00:54 +0000
Manifest this update:     Thu 12 Jun 2025 05:00:54 +0000
Manifest next update:     Fri 13 Jun 2025 05:00:54 +0000
Files and hashes:         1: 3sQzl3xytL5diI9WhT7TGh_x78Y.crl (hash: NZRVo0iK4WQbE6gne+EG2GQ+0oknB/b/6Q2UoB3Haa8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:62:83:32:dd:1b:5d:ea:79:40:c0:f4:db:3b:39:e2:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
        Validity
            Not Before: Jun 12 05:00:54 2025 GMT
            Not After : Jun 13 05:00:54 2025 GMT
        Subject: CN=46ff3f2619de7b4e1bde77ae878181c3c970b88f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c6:5a:e8:b8:bf:fa:88:68:9a:4b:5f:da:8b:
                    50:66:fa:06:ca:cc:ad:d7:ea:cf:1f:a8:18:31:95:
                    cc:b9:03:bc:4e:d7:66:02:7b:92:d6:96:41:ce:77:
                    64:da:2a:02:39:1a:92:86:28:10:b2:d9:07:98:11:
                    34:15:1e:bf:4a:09:d4:8d:3f:b4:c4:0e:57:b9:77:
                    bc:d7:3c:c1:ca:4d:b4:84:ae:77:3f:89:00:86:3c:
                    28:8e:e1:97:d9:d4:db:26:ec:af:ad:7a:1b:a6:f9:
                    b0:15:fd:42:8b:8c:e3:09:ad:94:6a:bb:83:83:57:
                    80:d4:14:85:22:39:1d:0e:a0:2c:5e:a4:c0:12:44:
                    42:24:ee:d4:87:aa:58:57:9e:63:f9:f0:66:5d:e0:
                    9c:b8:2e:e1:41:7b:ef:56:d3:d8:bf:14:0c:d7:2a:
                    82:9c:6c:80:65:b7:74:a0:c7:3e:aa:f4:2d:54:7b:
                    2f:6a:2a:81:26:75:01:dc:a5:96:b0:65:6b:7a:d2:
                    10:c1:bf:a7:b5:51:2d:ec:7b:09:01:03:72:17:21:
                    c6:17:a9:73:e5:34:b4:24:00:eb:99:16:c8:42:c4:
                    7c:a8:c1:39:9a:4f:83:fe:f8:bf:87:b9:f4:0c:73:
                    f9:48:ae:5f:ef:b8:e2:46:e0:de:19:d2:97:fd:af:
                    f3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FF:3F:26:19:DE:7B:4E:1B:DE:77:AE:87:81:81:C3:C9:70:B8:8F
            X509v3 Authority Key Identifier:
                keyid:DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:51:05:92:4f:4d:b4:a7:d1:6b:6b:f7:29:b6:a1:f1:5b:14:
         4e:69:bc:dc:88:77:c3:bf:8a:6d:10:a1:ce:99:b4:66:e8:72:
         f6:bd:e7:e5:58:a3:6e:8b:c8:28:62:f7:82:0c:95:5c:bd:f6:
         7b:d9:cb:3b:3d:bb:fb:cb:f6:ae:42:1b:1c:aa:af:52:da:4b:
         cd:25:83:dc:0c:2e:ff:f6:cf:fe:ec:f6:ae:90:c1:1a:fc:61:
         51:6c:76:88:c4:8b:b9:91:26:db:64:c7:4a:d3:d2:63:62:77:
         93:10:b4:be:c6:ec:e9:37:02:4c:8c:a2:64:be:04:cc:0b:05:
         f5:05:eb:f4:8e:73:1a:82:9e:10:20:83:09:af:e1:4e:86:88:
         ea:c4:84:63:d4:26:6f:1b:f2:87:79:65:59:db:ac:d2:82:f4:
         62:a6:ed:c6:06:c3:33:d1:da:d5:e4:5b:80:e0:32:64:d4:80:
         18:c2:f7:c0:cb:79:fe:c6:1e:7c:62:31:47:9c:53:16:48:1f:
         bf:b5:25:a9:67:5e:d0:d5:fe:7d:a4:ab:78:77:1b:6f:91:93:
         e2:84:74:ee:38:3c:26:fa:5d:fc:1e:6e:c3:82:16:94:65:d1:
         ea:94:c5:87:e9:2a:41:54:58:71:40:73:b0:e4:3b:12:54:0a:
         9d:bd:da:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdigzLdG13qeUDA9Ns7OeJhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYzQzMzk3N2M3MmI0YmU1ZDg4OGY1Njg1M2VkMzFhMWZm
MWVmYzYwHhcNMjUwNjEyMDUwMDU0WhcNMjUwNjEzMDUwMDU0WjAzMTEwLwYDVQQD
Eyg0NmZmM2YyNjE5ZGU3YjRlMWJkZTc3YWU4NzgxODFjM2M5NzBiODhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcZa6Li/+ohomktf2otQZvoGysyt
1+rPH6gYMZXMuQO8TtdmAnuS1pZBzndk2ioCORqShigQstkHmBE0FR6/SgnUjT+0
xA5XuXe81zzByk20hK53P4kAhjwojuGX2dTbJuyvrXobpvmwFf1Ci4zjCa2UaruD
g1eA1BSFIjkdDqAsXqTAEkRCJO7Uh6pYV55j+fBmXeCcuC7hQXvvVtPYvxQM1yqC
nGyAZbd0oMc+qvQtVHsvaiqBJnUB3KWWsGVretIQwb+ntVEt7HsJAQNyFyHGF6lz
5TS0JADrmRbIQsR8qME5mk+D/vi/h7n0DHP5SK5f77jiRuDeGdKX/a/zIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEb/PyYZ3ntOG953roeBgcPJcLiPMB8GA1UdIwQY
MBaAFN7EM5d8crS+XYiPVoU+0xof8e/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3NRemwzeHl0TDVkaUk5V2hUN1RHaF94NzhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80NTZhODUtYjdhMS00MTgzLWE2NGYt
MjIzZjUwOGMwNTVhLzEvM3NRemwzeHl0TDVkaUk5V2hUN1RHaF94NzhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80NTZhODUtYjdhMS00MTgzLWE2NGYtMjIzZjUwOGMwNTVh
LzEvM3NRemwzeHl0TDVkaUk5V2hUN1RHaF94NzhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlEFkk9N
tKfRa2v3Kbah8VsUTmm83Ih3w7+KbRChzpm0Zuhy9r3n5VijbovIKGL3ggyVXL32
e9nLOz27+8v2rkIbHKqvUtpLzSWD3Awu//bP/uz2rpDBGvxhUWx2iMSLuZEm22TH
StPSY2J3kxC0vsbs6TcCTIyiZL4EzAsF9QXr9I5zGoKeECCDCa/hToaI6sSEY9Qm
bxvyh3llWdus0oL0YqbtxgbDM9Ha1eRbgOAyZNSAGML3wMt5/sYefGIxR5xTFkgf
v7UlqWde0NX+faSreHcbb5GT4oR07jg8Jvpd/B5uw4IWlGXR6pTFh+kqQVRYcUBz
sOQ7ElQKnb3aEg==
-----END CERTIFICATE-----
Generated at Thu Jun 12 10:38:14 2025 by rpki-client