Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
File:                     UJw4zD6qNVb6OaIvMNwbpINv6J8.mft (raw, json)
Hash identifier:          V7rr7Dk040OFuolLf32sYfFwMywxX/EHM2eBQzh7VGg=
Subject key identifier:   92:89:C4:96:8E:2B:99:F6:BA:91:71:35:3E:BA:34:B6:BB:29:48:D6
Authority key identifier: 50:9C:38:CC:3E:AA:35:56:FA:39:A2:2F:30:DC:1B:A4:83:6F:E8:9F
Certificate issuer:       /CN=509c38cc3eaa3556fa39a22f30dc1ba4836fe89f
Certificate serial:       0197488C723750CB6215FC0027DAAC966564
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
Manifest number:          1578
Signing time:             Sat 07 Jun 2025 04:00:53 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:53 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:53 +0000
Files and hashes:         1: UJw4zD6qNVb6OaIvMNwbpINv6J8.crl (hash: wK89VVHK8C3MWmHwj0QF9VK6HohYUdez02rqHzQw5QA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:72:37:50:cb:62:15:fc:00:27:da:ac:96:65:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509c38cc3eaa3556fa39a22f30dc1ba4836fe89f
        Validity
            Not Before: Jun  7 04:00:53 2025 GMT
            Not After : Jun  8 04:00:53 2025 GMT
        Subject: CN=9289c4968e2b99f6ba9171353eba34b6bb2948d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f8:ad:e5:82:f1:bd:20:55:e0:58:27:e4:4a:
                    5a:71:63:29:c5:ab:bf:ca:69:2a:22:9f:f5:7d:ac:
                    9e:82:62:ef:3d:ca:c2:ac:c6:fb:1a:2a:d9:74:b5:
                    c9:cf:38:50:a4:98:cb:00:01:7f:65:44:05:3f:0c:
                    9b:14:a6:f1:63:92:2c:fc:85:22:31:b0:61:ce:93:
                    e8:ec:81:ae:c0:3b:2f:af:2f:47:fe:08:f7:77:06:
                    81:d7:4a:48:70:14:49:2e:e6:31:27:dd:e4:72:ad:
                    30:ec:b8:c6:cd:21:15:e9:ba:0f:6d:e7:84:3d:e2:
                    9e:ef:be:b7:ea:29:10:74:8a:60:93:07:39:31:9b:
                    27:a3:8a:b2:3e:97:29:be:6e:4b:b9:49:36:11:a5:
                    ba:6b:43:51:79:d8:f8:c4:7e:e6:c7:86:4a:95:a5:
                    af:72:3e:d8:b6:0b:6e:05:0d:95:14:5a:1d:fa:c3:
                    a1:b8:95:d8:29:01:54:25:3e:47:aa:0b:05:7a:e6:
                    e1:fb:4e:6b:d5:e0:fe:f1:63:75:3b:c6:58:2d:1d:
                    bf:e2:80:1c:02:0b:56:73:c2:67:cf:84:93:bd:9a:
                    c1:7c:a9:37:50:27:6b:a5:0a:f7:b4:bc:04:60:8d:
                    14:5b:12:a0:d9:8b:54:93:9b:ac:32:4c:42:57:22:
                    3b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:89:C4:96:8E:2B:99:F6:BA:91:71:35:3E:BA:34:B6:BB:29:48:D6
            X509v3 Authority Key Identifier:
                keyid:50:9C:38:CC:3E:AA:35:56:FA:39:A2:2F:30:DC:1B:A4:83:6F:E8:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:9a:25:d2:f1:3e:97:d8:3f:87:e9:b9:f8:2a:bf:4d:34:e4:
         83:49:97:6f:c6:5c:06:df:3b:0a:a8:0d:b5:cd:9a:a7:18:86:
         ed:28:5d:94:c3:60:fd:a6:5a:1b:f1:e8:eb:4d:0d:d5:52:b2:
         a0:ae:cf:72:83:7d:70:1b:1d:17:c5:6f:72:ee:4a:04:e6:e1:
         bf:44:b8:52:c2:6c:b0:e1:17:91:e7:1a:6e:a7:cf:b9:88:e2:
         68:ea:cd:a9:22:ae:57:6f:46:4d:bc:82:9a:a4:76:8f:94:e0:
         b2:63:07:6a:b9:d9:5d:7e:1a:d0:a3:52:58:aa:fa:5a:b6:27:
         7b:1a:51:08:6b:50:6f:2c:b9:79:d6:b4:ab:cc:65:dc:42:12:
         62:c2:57:9b:16:93:d1:b2:59:62:9c:12:bf:ab:8e:fb:6b:cc:
         5f:62:4b:18:ff:fc:1d:32:ba:ad:61:17:da:9a:76:79:de:f5:
         98:53:fa:b5:7c:a0:e1:1e:c2:9a:3e:af:c1:c8:c5:e7:30:14:
         11:13:fd:62:54:a8:f0:0c:81:f4:10:af:61:9b:09:e4:ef:c8:
         2f:3d:84:fd:1e:fe:81:a1:c8:10:86:70:e6:16:8e:6b:f3:ea:
         0d:71:a3:94:18:4e:2a:ad:48:3f:e6:0a:4c:f0:9c:10:37:f8:
         71:2f:3f:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjHI3UMtiFfwAJ9qslmVkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOWMzOGNjM2VhYTM1NTZmYTM5YTIyZjMwZGMxYmE0ODM2
ZmU4OWYwHhcNMjUwNjA3MDQwMDUzWhcNMjUwNjA4MDQwMDUzWjAzMTEwLwYDVQQD
Eyg5Mjg5YzQ5NjhlMmI5OWY2YmE5MTcxMzUzZWJhMzRiNmJiMjk0OGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPit5YLxvSBV4Fgn5EpacWMpxau/
ymkqIp/1fayegmLvPcrCrMb7GirZdLXJzzhQpJjLAAF/ZUQFPwybFKbxY5Is/IUi
MbBhzpPo7IGuwDsvry9H/gj3dwaB10pIcBRJLuYxJ93kcq0w7LjGzSEV6boPbeeE
PeKe77636ikQdIpgkwc5MZsno4qyPpcpvm5LuUk2EaW6a0NRedj4xH7mx4ZKlaWv
cj7YtgtuBQ2VFFod+sOhuJXYKQFUJT5HqgsFeubh+05r1eD+8WN1O8ZYLR2/4oAc
AgtWc8Jnz4STvZrBfKk3UCdrpQr3tLwEYI0UWxKg2YtUk5usMkxCVyI7iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKJxJaOK5n2upFxNT66NLa7KUjWMB8GA1UdIwQY
MBaAFFCcOMw+qjVW+jmiLzDcG6SDb+ifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUp3NHpENnFOVmI2T2FJdk1Od2JwSU52Nko4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9mYjAwZWMtYmFiZC00MTcyLThkNGQt
MmE2NGY5OWJhZjVmLzEvVUp3NHpENnFOVmI2T2FJdk1Od2JwSU52Nko4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9mYjAwZWMtYmFiZC00MTcyLThkNGQtMmE2NGY5OWJhZjVm
LzEvVUp3NHpENnFOVmI2T2FJdk1Od2JwSU52Nko4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZol0vE+
l9g/h+m5+Cq/TTTkg0mXb8ZcBt87CqgNtc2apxiG7ShdlMNg/aZaG/Ho600N1VKy
oK7PcoN9cBsdF8Vvcu5KBObhv0S4UsJssOEXkecabqfPuYjiaOrNqSKuV29GTbyC
mqR2j5TgsmMHarnZXX4a0KNSWKr6WrYnexpRCGtQbyy5eda0q8xl3EISYsJXmxaT
0bJZYpwSv6uO+2vMX2JLGP/8HTK6rWEX2pp2ed71mFP6tXyg4R7Cmj6vwcjF5zAU
ERP9YlSo8AyB9BCvYZsJ5O/ILz2E/R7+gaHIEIZw5haOa/PqDXGjlBhOKq1IP+YK
TPCcEDf4cS8/gQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:05:57 2025 by rpki-client