Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
File:                     Cp_TCP4-rbozRozku5lrvdjN5hU.mft (raw, json)
Hash identifier:          Kps1TSY6buYe2MF6o2yuH3yCH5H3nP1Wq5Vm8mzmxtI=
Subject key identifier:   12:D7:12:9C:12:C3:B7:F4:8B:31:FA:58:F8:F5:B1:0C:FF:A7:B5:ED
Authority key identifier: 0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
Certificate issuer:       /CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Certificate serial:       0197488D3A47F66ED64765792A6FC76BC521
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 04:01:44 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:44 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:44 +0000
Files and hashes:         1: Cp_TCP4-rbozRozku5lrvdjN5hU.crl (hash: LQjJz0lAfHyla+agR7hJiaPqQpCajCGBt/zpdm17SIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8d:3a:47:f6:6e:d6:47:65:79:2a:6f:c7:6b:c5:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
        Validity
            Not Before: Jun  7 04:01:44 2025 GMT
            Not After : Jun  8 04:01:44 2025 GMT
        Subject: CN=12d7129c12c3b7f48b31fa58f8f5b10cffa7b5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6e:0a:65:a1:2a:8c:d6:51:e5:3f:90:83:b7:
                    f2:98:8b:21:9b:53:4b:c8:df:61:9e:85:46:43:12:
                    af:40:c2:28:e8:a6:85:6a:d0:6c:1e:40:1c:87:b8:
                    c6:cb:02:ac:ab:e1:05:4a:91:40:e5:f7:53:aa:c6:
                    cc:f5:c6:09:13:03:58:3c:f0:b4:b8:ab:17:47:da:
                    14:e8:1f:dd:c2:ec:18:1e:01:60:b9:cd:bd:01:b7:
                    e0:a0:be:55:4b:b9:03:db:c8:e8:83:6f:bb:88:a6:
                    7d:ee:4f:cd:a5:15:38:b9:72:2b:99:d2:9f:be:34:
                    bf:9c:8e:02:c0:23:c5:6e:6b:f3:c6:7f:56:56:95:
                    14:69:1b:d1:91:75:85:db:3c:49:3f:b7:12:28:f2:
                    82:75:b8:86:7b:6d:db:67:c7:7a:33:6e:47:a6:53:
                    5f:06:9f:76:11:04:5e:4b:d7:be:2d:23:06:f6:f5:
                    74:d0:13:8e:1d:43:a9:eb:44:dd:54:f2:eb:cf:e6:
                    4b:e7:62:43:6d:e2:c0:ed:a5:e4:c9:18:59:cb:36:
                    e0:f5:9a:e5:fb:94:56:06:79:0c:e0:bb:12:7f:35:
                    ae:9e:77:8e:39:8e:5d:13:3c:e4:6f:07:33:ed:dd:
                    14:0b:9f:e7:b7:17:80:46:67:44:84:1f:82:39:d4:
                    b5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D7:12:9C:12:C3:B7:F4:8B:31:FA:58:F8:F5:B1:0C:FF:A7:B5:ED
            X509v3 Authority Key Identifier:
                keyid:0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:64:0e:3f:9d:b5:8c:cf:a3:9f:78:7b:46:de:b6:de:b3:38:
         f1:b6:92:f5:59:2a:62:4d:4a:5d:8d:05:13:1a:8f:74:e4:0c:
         60:92:33:fc:79:a0:55:d8:17:0d:d0:1b:5b:26:49:84:b5:b4:
         50:0a:8c:e0:80:b2:a7:92:f9:15:b0:9b:d2:82:03:c1:4f:d3:
         1f:dc:a1:46:d3:e6:bd:b9:06:1f:3e:56:06:65:7a:62:bf:2d:
         65:6a:2e:90:2c:18:05:77:4f:e1:5c:a2:8c:c7:2b:4b:ce:e2:
         75:98:51:8e:8f:eb:59:d3:13:02:aa:6c:c4:04:19:d2:e4:49:
         ea:50:a9:b2:04:cf:46:37:98:ef:fb:12:b7:8e:d1:77:76:d0:
         03:86:f8:08:29:a4:fb:f8:f4:ca:c3:31:a6:6d:aa:f9:03:52:
         d0:4c:f2:db:7d:10:02:3d:b8:d9:4e:44:94:5a:92:ae:86:c8:
         73:32:9d:f0:cb:b0:11:f0:cc:02:00:fa:96:4e:2b:ac:25:6f:
         95:77:7d:47:f9:99:ee:79:7f:72:66:35:f2:bf:5f:c8:f2:32:
         31:ab:1d:93:06:a8:94:c2:05:be:bf:a2:5b:97:9a:c1:63:4e:
         37:74:a5:93:00:e4:40:c0:7d:9d:82:a6:63:52:4f:8f:67:0c:
         56:dd:05:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjTpH9m7WR2V5Km/Ha8UhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhOWZkMzA4ZmUzZWFkYmEzMzQ2OGNlNGJiOTk2YmJkZDhj
ZGU2MTUwHhcNMjUwNjA3MDQwMTQ0WhcNMjUwNjA4MDQwMTQ0WjAzMTEwLwYDVQQD
EygxMmQ3MTI5YzEyYzNiN2Y0OGIzMWZhNThmOGY1YjEwY2ZmYTdiNWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0m4KZaEqjNZR5T+Qg7fymIshm1NL
yN9hnoVGQxKvQMIo6KaFatBsHkAch7jGywKsq+EFSpFA5fdTqsbM9cYJEwNYPPC0
uKsXR9oU6B/dwuwYHgFguc29AbfgoL5VS7kD28jog2+7iKZ97k/NpRU4uXIrmdKf
vjS/nI4CwCPFbmvzxn9WVpUUaRvRkXWF2zxJP7cSKPKCdbiGe23bZ8d6M25HplNf
Bp92EQReS9e+LSMG9vV00BOOHUOp60TdVPLrz+ZL52JDbeLA7aXkyRhZyzbg9Zrl
+5RWBnkM4LsSfzWunneOOY5dEzzkbwcz7d0UC5/ntxeARmdEhB+COdS16wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLXEpwSw7f0izH6WPj1sQz/p7XtMB8GA1UdIwQY
MBaAFAqf0wj+Pq26M0aM5LuZa73YzeYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3BfVENQNC1yYm96Um96a3U1bHJ2ZGpONWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9jZjE3OGMtZGEzZS00ZGM1LWIyNDct
YTFhYmIyZWZjODFjLzEvQ3BfVENQNC1yYm96Um96a3U1bHJ2ZGpONWhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9jZjE3OGMtZGEzZS00ZGM1LWIyNDctYTFhYmIyZWZjODFj
LzEvQ3BfVENQNC1yYm96Um96a3U1bHJ2ZGpONWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2QOP521
jM+jn3h7Rt623rM48baS9VkqYk1KXY0FExqPdOQMYJIz/HmgVdgXDdAbWyZJhLW0
UAqM4ICyp5L5FbCb0oIDwU/TH9yhRtPmvbkGHz5WBmV6Yr8tZWoukCwYBXdP4Vyi
jMcrS87idZhRjo/rWdMTAqpsxAQZ0uRJ6lCpsgTPRjeY7/sSt47Rd3bQA4b4CCmk
+/j0ysMxpm2q+QNS0Ezy230QAj242U5ElFqSrobIczKd8MuwEfDMAgD6lk4rrCVv
lXd9R/mZ7nl/cmY18r9fyPIyMasdkwaolMIFvr+iW5eawWNON3SlkwDkQMB9nYKm
Y1JPj2cMVt0FQA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:11:57 2025 by rpki-client