Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
File:                     MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft (raw, json)
Hash identifier:          +TYUoSA6dsYKJKw0hOe24PogOHNM+t3lW0+6DOz6HS0=
Subject key identifier:   84:04:00:93:07:A4:D2:D1:A0:18:58:D1:E4:58:65:BF:38:DF:69:7F
Authority key identifier: 30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
Certificate issuer:       /CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
Certificate serial:       019917640B687C81E17AEABDC92816C12E5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
Manifest number:          0A62
Signing time:             Fri 05 Sep 2025 01:00:56 +0000
Manifest this update:     Fri 05 Sep 2025 01:00:56 +0000
Manifest next update:     Sat 06 Sep 2025 01:00:56 +0000
Files and hashes:         1: MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl (hash: 4m6dW4njXCSiF+cf8SKRRhOvTtmwp7qlGj0IX2THeF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:64:0b:68:7c:81:e1:7a:ea:bd:c9:28:16:c1:2e:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
        Validity
            Not Before: Sep  5 01:00:56 2025 GMT
            Not After : Sep  6 01:00:56 2025 GMT
        Subject: CN=8404009307a4d2d1a01858d1e45865bf38df697f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:52:50:31:f0:d4:a4:85:75:01:a2:1f:e8:46:
                    65:12:02:df:a5:b4:32:b8:f1:55:bd:44:2f:4f:ff:
                    49:cb:68:6b:2e:84:b7:a8:51:3d:ca:00:69:6b:f0:
                    9d:9b:6d:64:26:2c:33:0e:4a:5e:e8:36:82:15:c7:
                    3f:c3:58:77:49:a3:88:95:18:6f:74:52:2b:13:22:
                    a1:9e:3e:b5:65:ab:93:59:5f:ce:1c:d2:99:ba:41:
                    ab:bb:22:4f:07:a3:b8:c2:72:0d:5c:38:48:eb:04:
                    be:6b:f3:2f:23:e6:9e:b9:6d:75:33:22:5a:cf:76:
                    42:71:53:d9:f8:b0:b5:ea:24:04:3d:f0:30:8f:8b:
                    f6:7a:73:03:83:5a:ff:a3:8c:4f:21:81:fa:f8:a3:
                    8b:93:e9:03:6a:28:b9:c7:47:38:2e:87:c9:cf:1f:
                    da:e8:ca:03:3f:be:d5:24:ee:24:2a:0d:44:e1:c9:
                    b0:71:86:e7:34:5a:34:9f:7c:b6:f2:a0:2d:11:8d:
                    d3:82:c1:33:13:33:7f:67:e5:f0:94:8c:f7:f1:81:
                    f2:40:ea:8f:fc:02:41:5f:e3:2b:67:61:c5:14:54:
                    46:09:e4:ff:40:fd:35:86:05:40:1a:ef:25:ab:98:
                    71:d8:ea:ef:f1:43:ee:f7:28:67:77:3b:3e:68:a3:
                    12:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:04:00:93:07:A4:D2:D1:A0:18:58:D1:E4:58:65:BF:38:DF:69:7F
            X509v3 Authority Key Identifier:
                keyid:30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:d0:9e:10:5b:25:bb:34:85:0e:cf:9f:e7:ea:8d:16:10:0b:
         b5:a2:2d:bf:0d:db:4a:a0:99:af:b5:fa:e9:12:29:b1:fb:f3:
         a9:29:b1:ec:6e:3b:fb:7e:8e:18:28:08:68:b7:93:21:b6:00:
         85:b4:9d:68:37:6e:f6:12:9a:cf:87:8b:65:18:d0:88:91:ef:
         e2:f6:c9:f4:17:52:f4:0e:e8:8c:1a:5c:00:4b:c0:61:a7:f3:
         0b:b4:df:05:8d:d5:ca:09:8a:6e:71:73:ea:99:d2:bd:4e:37:
         f5:2b:5a:af:ae:b9:89:68:51:63:52:81:90:8c:04:b0:62:ad:
         a8:23:1f:91:21:96:9d:d2:fc:ec:a1:7e:6b:e6:45:68:4f:b5:
         61:51:64:97:35:59:a3:8d:90:0c:ee:3f:8a:21:03:44:e4:90:
         17:0f:3e:b6:a3:f8:7c:2d:1c:79:f5:4d:c6:63:7c:b0:10:71:
         f9:ca:4a:d3:49:c1:23:ca:e6:ea:83:b4:8c:9c:de:b2:56:f0:
         96:d2:ea:5a:83:2b:e6:12:e2:84:eb:c4:5f:95:f5:4e:f7:ca:
         c9:a8:09:16:87:93:65:20:49:54:b0:76:eb:6d:f6:35:a5:dc:
         03:e6:36:a1:39:8d:3e:fe:ea:36:5c:e8:49:e3:0b:84:25:50:
         c6:a8:a6:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkXZAtofIHheuq9ySgWwS5aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMWUzZmNhNmYxMzYyOGU2ZWI4M2NmZmU1ZWQ4YTAxZWRk
NTllOGIwHhcNMjUwOTA1MDEwMDU2WhcNMjUwOTA2MDEwMDU2WjAzMTEwLwYDVQQD
Eyg4NDA0MDA5MzA3YTRkMmQxYTAxODU4ZDFlNDU4NjViZjM4ZGY2OTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VJQMfDUpIV1AaIf6EZlEgLfpbQy
uPFVvUQvT/9Jy2hrLoS3qFE9ygBpa/Cdm21kJiwzDkpe6DaCFcc/w1h3SaOIlRhv
dFIrEyKhnj61ZauTWV/OHNKZukGruyJPB6O4wnINXDhI6wS+a/MvI+aeuW11MyJa
z3ZCcVPZ+LC16iQEPfAwj4v2enMDg1r/o4xPIYH6+KOLk+kDaii5x0c4LofJzx/a
6MoDP77VJO4kKg1E4cmwcYbnNFo0n3y28qAtEY3TgsEzEzN/Z+XwlIz38YHyQOqP
/AJBX+MrZ2HFFFRGCeT/QP01hgVAGu8lq5hx2Orv8UPu9yhndzs+aKMS4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQEAJMHpNLRoBhY0eRYZb8432l/MB8GA1UdIwQY
MBaAFDAeP8pvE2KObrg8/+XtigHt1Z6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUI0X3ltOFRZbzV1dUR6XzVlMktBZTNWbm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC85MmNlNGMtZjFjNS00YzhmLTk5ZGYt
ZDBkN2YyYjJhNWUwLzEvTUI0X3ltOFRZbzV1dUR6XzVlMktBZTNWbm9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC85MmNlNGMtZjFjNS00YzhmLTk5ZGYtZDBkN2YyYjJhNWUw
LzEvTUI0X3ltOFRZbzV1dUR6XzVlMktBZTNWbm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV9CeEFsl
uzSFDs+f5+qNFhALtaItvw3bSqCZr7X66RIpsfvzqSmx7G47+36OGCgIaLeTIbYA
hbSdaDdu9hKaz4eLZRjQiJHv4vbJ9BdS9A7ojBpcAEvAYafzC7TfBY3VygmKbnFz
6pnSvU439Star665iWhRY1KBkIwEsGKtqCMfkSGWndL87KF+a+ZFaE+1YVFklzVZ
o42QDO4/iiEDROSQFw8+tqP4fC0cefVNxmN8sBBx+cpK00nBI8rm6oO0jJzeslbw
ltLqWoMr5hLihOvEX5X1TvfKyagJFoeTZSBJVLB26232NaXcA+Y2oTmNPv7qNlzo
SeMLhCVQxqimBw==
-----END CERTIFICATE-----
Generated at Fri Sep 5 05:52:45 2025 by rpki-client