Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
File:                     k-DpokYd9Py54i53cLJhOgckE4g.mft (raw, json)
Hash identifier:          pGcfyYIJPLU8049zkyfowut61o9iAAkAN4rfknw+ldk=
Subject key identifier:   B6:37:89:37:19:70:5F:1C:E2:2C:7D:E2:7D:8C:18:43:00:67:2F:9F
Authority key identifier: 93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88
Certificate issuer:       /CN=93e0e9a2461df4fcb9e22e7770b2613a07241388
Certificate serial:       019750EAD1D5A328A38AC4206E0D89985654
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
Manifest number:          150F
Signing time:             Sun 08 Jun 2025 19:00:55 +0000
Manifest this update:     Sun 08 Jun 2025 19:00:55 +0000
Manifest next update:     Mon 09 Jun 2025 19:00:55 +0000
Files and hashes:         1: k-DpokYd9Py54i53cLJhOgckE4g.crl (hash: UJWtxXSvfHeAo9tGkowZhzkaktTSt/n9/eahkFmOo0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:ea:d1:d5:a3:28:a3:8a:c4:20:6e:0d:89:98:56:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e0e9a2461df4fcb9e22e7770b2613a07241388
        Validity
            Not Before: Jun  8 19:00:55 2025 GMT
            Not After : Jun  9 19:00:55 2025 GMT
        Subject: CN=b637893719705f1ce22c7de27d8c184300672f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bc:b5:2f:bf:a6:fb:4c:e9:68:d5:04:a2:b0:
                    9b:47:13:41:11:5f:ce:e3:f8:02:f3:cb:b4:13:68:
                    22:a5:39:0c:f8:49:10:97:94:21:00:b1:85:65:c5:
                    03:6a:f0:1d:1c:0e:ec:aa:a0:6c:b5:92:6e:65:31:
                    2c:f8:ec:d0:e7:c2:c1:64:fe:c5:9e:14:53:0d:c5:
                    0a:40:29:36:02:6e:a7:a9:e7:7f:19:55:5b:50:9b:
                    b7:e1:06:16:16:d8:dc:39:b9:f2:84:ef:23:8b:7f:
                    bb:8d:3e:44:23:bb:c6:f9:ea:c1:93:e9:cb:16:46:
                    60:c0:39:5e:a5:7c:c3:e7:02:cd:a2:b2:1c:cf:bf:
                    f3:d0:95:ee:ab:27:de:4d:a9:c8:e1:7d:42:2f:82:
                    26:bd:fc:33:d9:b0:54:52:c7:a1:b1:8f:93:83:16:
                    4a:34:64:98:6d:f0:83:d4:58:9d:0c:ea:10:d3:ba:
                    4c:0a:60:e3:92:35:17:64:4c:e3:5f:dd:0b:96:3c:
                    32:9b:b4:c9:27:e3:79:94:c5:c6:8e:15:c9:00:a7:
                    de:c8:b2:b4:03:6b:e6:bd:ad:32:9e:47:4c:83:ec:
                    1b:8d:ea:a6:ab:2d:f1:b5:06:95:92:82:18:48:87:
                    ca:e4:55:03:d9:b6:91:c8:1d:aa:66:8e:35:11:87:
                    bb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:37:89:37:19:70:5F:1C:E2:2C:7D:E2:7D:8C:18:43:00:67:2F:9F
            X509v3 Authority Key Identifier:
                keyid:93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:66:3b:9e:de:fb:9f:c8:18:32:a2:f1:b6:a0:aa:41:4b:60:
         b9:5e:ac:6d:af:d6:40:45:e5:ec:d1:5d:98:ad:47:19:cf:b5:
         d3:47:da:19:24:5f:3a:d1:68:b2:ce:90:1f:22:b8:2b:58:32:
         0b:3e:2d:22:84:89:38:e0:38:f4:20:d1:08:37:7d:d5:49:6c:
         fc:23:14:ee:b9:08:fa:46:d9:70:91:1d:85:81:ab:3d:78:3a:
         55:ba:d5:39:4e:4d:28:50:fd:5e:8b:85:ed:5a:57:6b:bf:f3:
         0a:68:d8:6e:05:b7:18:b6:ed:80:fa:ba:8b:cd:90:69:0d:bb:
         46:2e:18:48:f4:03:34:4d:61:8b:76:59:be:91:c4:0d:1c:b9:
         c6:3a:a2:04:7c:a7:f2:e9:a2:a9:af:8c:7d:94:70:72:04:e6:
         4d:71:dc:00:ce:f4:de:33:29:3b:c8:34:33:b0:55:27:59:94:
         9d:83:2a:ff:be:95:02:15:c2:ce:f1:6b:4a:ee:c1:89:cb:13:
         80:87:7b:32:20:76:4b:c7:20:52:4c:af:9d:ce:e1:4d:a1:cd:
         21:b7:b2:09:61:9a:d9:14:0b:09:dd:a0:48:5f:02:aa:93:ba:
         da:91:4e:58:e7:60:90:db:ad:18:ed:ef:d4:38:cc:30:9d:18:
         42:5e:15:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQ6tHVoyijisQgbg2JmFZUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZTBlOWEyNDYxZGY0ZmNiOWUyMmU3NzcwYjI2MTNhMDcy
NDEzODgwHhcNMjUwNjA4MTkwMDU1WhcNMjUwNjA5MTkwMDU1WjAzMTEwLwYDVQQD
EyhiNjM3ODkzNzE5NzA1ZjFjZTIyYzdkZTI3ZDhjMTg0MzAwNjcyZjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7y1L7+m+0zpaNUEorCbRxNBEV/O
4/gC88u0E2gipTkM+EkQl5QhALGFZcUDavAdHA7sqqBstZJuZTEs+OzQ58LBZP7F
nhRTDcUKQCk2Am6nqed/GVVbUJu34QYWFtjcObnyhO8ji3+7jT5EI7vG+erBk+nL
FkZgwDlepXzD5wLNorIcz7/z0JXuqyfeTanI4X1CL4Imvfwz2bBUUsehsY+TgxZK
NGSYbfCD1FidDOoQ07pMCmDjkjUXZEzjX90Lljwym7TJJ+N5lMXGjhXJAKfeyLK0
A2vmva0ynkdMg+wbjeqmqy3xtQaVkoIYSIfK5FUD2baRyB2qZo41EYe7WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLY3iTcZcF8c4ix94n2MGEMAZy+fMB8GA1UdIwQY
MBaAFJPg6aJGHfT8ueIud3CyYToHJBOIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1EcG9rWWQ5UHk1NGk1M2NMSmhPZ2NrRTRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80MWU1ODQtOWNmNy00YzYyLTlmNjEt
MGUyZTM2MDE5ODQ5LzEvay1EcG9rWWQ5UHk1NGk1M2NMSmhPZ2NrRTRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC80MWU1ODQtOWNmNy00YzYyLTlmNjEtMGUyZTM2MDE5ODQ5
LzEvay1EcG9rWWQ5UHk1NGk1M2NMSmhPZ2NrRTRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv2Y7nt77
n8gYMqLxtqCqQUtguV6sba/WQEXl7NFdmK1HGc+100faGSRfOtFoss6QHyK4K1gy
Cz4tIoSJOOA49CDRCDd91Uls/CMU7rkI+kbZcJEdhYGrPXg6VbrVOU5NKFD9XouF
7VpXa7/zCmjYbgW3GLbtgPq6i82QaQ27Ri4YSPQDNE1hi3ZZvpHEDRy5xjqiBHyn
8umiqa+MfZRwcgTmTXHcAM703jMpO8g0M7BVJ1mUnYMq/76VAhXCzvFrSu7BicsT
gId7MiB2S8cgUkyvnc7hTaHNIbeyCWGa2RQLCd2gSF8CqpO62pFOWOdgkNutGO3v
1DjMMJ0YQl4VDA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:28:57 2025 by rpki-client