Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
File:                     u03_X665REU6fISwl-V8ccBPEfw.mft (raw, json)
Hash identifier:          NgI3xcy1fRdXemxtSooeGzsPMhINUkklxGQLRdmT8kE=
Subject key identifier:   74:B0:33:A4:C2:C5:F2:40:C7:3C:28:D5:5D:6D:74:A1:B9:A1:97:AE
Authority key identifier: BB:4D:FF:5F:AE:B9:44:45:3A:7C:84:B0:97:E5:7C:71:C0:4F:11:FC
Certificate issuer:       /CN=bb4dff5faeb944453a7c84b097e57c71c04f11fc
Certificate serial:       01974E57243C69478F482C3ADD2CCD1ECD52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u03_X665REU6fISwl-V8ccBPEfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
Manifest number:          08BD
Signing time:             Sun 08 Jun 2025 07:00:23 +0000
Manifest this update:     Sun 08 Jun 2025 07:00:23 +0000
Manifest next update:     Mon 09 Jun 2025 07:00:23 +0000
Files and hashes:         1: u03_X665REU6fISwl-V8ccBPEfw.crl (hash: E9mRQCacUrdIgNYL/M7cCMmEBnJzsqSTm9vss25aFT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u03_X665REU6fISwl-V8ccBPEfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:57:24:3c:69:47:8f:48:2c:3a:dd:2c:cd:1e:cd:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb4dff5faeb944453a7c84b097e57c71c04f11fc
        Validity
            Not Before: Jun  8 07:00:23 2025 GMT
            Not After : Jun  9 07:00:23 2025 GMT
        Subject: CN=74b033a4c2c5f240c73c28d55d6d74a1b9a197ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:57:43:89:50:bf:38:c8:74:f2:3e:6b:68:67:
                    bf:fd:9b:fb:3d:44:45:26:b8:1c:25:16:f7:85:3b:
                    fb:a1:ae:a6:40:90:ba:92:d1:60:9b:40:d7:0c:ae:
                    84:30:88:b2:a3:43:3e:e6:6f:35:e6:f0:fe:a7:9e:
                    80:69:20:9f:d9:a9:e1:5f:2e:a0:ff:42:05:63:62:
                    3f:ec:51:85:21:01:0f:31:ba:db:cf:9f:59:3a:ca:
                    dc:34:52:30:32:fb:48:9c:cb:c0:91:74:9b:10:82:
                    d4:12:3d:72:9c:74:04:52:f4:70:79:b5:94:55:07:
                    70:62:8b:e8:06:99:d5:fc:88:15:6d:93:06:5b:6c:
                    fc:4f:ae:91:3c:be:61:6e:64:57:d5:80:a4:18:8d:
                    79:c1:36:fd:f5:01:85:25:ee:f4:c5:c7:3f:60:dc:
                    8a:61:ad:d9:2c:7a:5b:98:b1:67:92:88:ef:36:dc:
                    db:de:30:0c:bf:3b:ed:e8:1c:1a:1a:62:fd:25:7d:
                    10:38:12:3f:ea:90:3a:b7:cf:36:9b:16:de:40:f2:
                    dd:80:56:af:e5:17:8a:7b:f1:5d:00:98:0b:e3:89:
                    28:81:03:6e:d0:55:8f:6b:f8:c0:09:83:7c:7d:86:
                    39:5e:d5:d0:c4:d9:5f:10:2d:6f:af:c6:1f:aa:34:
                    30:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B0:33:A4:C2:C5:F2:40:C7:3C:28:D5:5D:6D:74:A1:B9:A1:97:AE
            X509v3 Authority Key Identifier:
                keyid:BB:4D:FF:5F:AE:B9:44:45:3A:7C:84:B0:97:E5:7C:71:C0:4F:11:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u03_X665REU6fISwl-V8ccBPEfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ea:aa:72:47:b3:5a:7d:11:8e:fb:28:07:6d:f1:0e:61:be:
         9e:56:f6:09:07:72:d5:9f:bb:a0:4f:ba:45:a1:4f:f4:4a:f1:
         0c:57:e9:3b:b1:b8:dc:a1:37:63:7f:ff:85:3e:80:58:12:c9:
         c8:0c:c1:b9:d3:b3:18:ac:bf:96:cb:3b:1a:33:a9:51:e0:fa:
         e8:fc:7f:97:69:bd:0f:5f:d4:d2:68:52:3e:d9:17:d8:fd:04:
         20:2b:60:96:4d:39:f1:58:3c:63:8b:a2:1c:db:21:14:4d:76:
         10:fb:87:57:f5:a8:2f:68:63:81:90:f3:83:7a:46:48:2e:85:
         2d:3b:2b:40:25:ef:ac:a1:3c:bf:71:3d:e0:7b:33:1c:f9:d7:
         82:5d:d4:cd:35:a9:64:be:9e:d9:8e:ff:d6:a3:ff:07:29:64:
         2e:2b:5e:6b:82:d5:30:9f:12:db:eb:07:8e:84:e6:bf:ac:bd:
         ba:59:72:80:98:64:d0:a8:87:30:4f:7d:18:69:49:3f:bf:ed:
         d9:9f:a0:24:07:8c:35:b6:7d:a6:43:df:a6:b8:0d:13:de:a6:
         9e:75:8e:d3:3c:4b:7e:97:55:c6:00:7d:bd:55:6a:30:e2:c1:
         78:22:56:be:c5:93:12:ca:7e:a0:08:34:44:2e:23:3a:4f:ef:
         14:94:0d:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOVyQ8aUePSCw63SzNHs1SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNGRmZjVmYWViOTQ0NDUzYTdjODRiMDk3ZTU3YzcxYzA0
ZjExZmMwHhcNMjUwNjA4MDcwMDIzWhcNMjUwNjA5MDcwMDIzWjAzMTEwLwYDVQQD
Eyg3NGIwMzNhNGMyYzVmMjQwYzczYzI4ZDU1ZDZkNzRhMWI5YTE5N2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1dDiVC/OMh08j5raGe//Zv7PURF
JrgcJRb3hTv7oa6mQJC6ktFgm0DXDK6EMIiyo0M+5m815vD+p56AaSCf2anhXy6g
/0IFY2I/7FGFIQEPMbrbz59ZOsrcNFIwMvtInMvAkXSbEILUEj1ynHQEUvRwebWU
VQdwYovoBpnV/IgVbZMGW2z8T66RPL5hbmRX1YCkGI15wTb99QGFJe70xcc/YNyK
Ya3ZLHpbmLFnkojvNtzb3jAMvzvt6BwaGmL9JX0QOBI/6pA6t882mxbeQPLdgFav
5ReKe/FdAJgL44kogQNu0FWPa/jACYN8fYY5XtXQxNlfEC1vr8YfqjQw/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSwM6TCxfJAxzwo1V1tdKG5oZeuMB8GA1UdIwQY
MBaAFLtN/1+uuURFOnyEsJflfHHATxH8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTAzX1g2NjVSRVU2ZklTd2wtVjhjY0JQRWZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9kMTM1MjYtYzFhYy00NWU0LWJlYmMt
NjZmNDE2N2Y4M2IyLzEvdTAzX1g2NjVSRVU2ZklTd2wtVjhjY0JQRWZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9kMTM1MjYtYzFhYy00NWU0LWJlYmMtNjZmNDE2N2Y4M2Iy
LzEvdTAzX1g2NjVSRVU2ZklTd2wtVjhjY0JQRWZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOqqckez
Wn0RjvsoB23xDmG+nlb2CQdy1Z+7oE+6RaFP9ErxDFfpO7G43KE3Y3//hT6AWBLJ
yAzBudOzGKy/lss7GjOpUeD66Px/l2m9D1/U0mhSPtkX2P0EICtglk058Vg8Y4ui
HNshFE12EPuHV/WoL2hjgZDzg3pGSC6FLTsrQCXvrKE8v3E94HszHPnXgl3UzTWp
ZL6e2Y7/1qP/BylkLitea4LVMJ8S2+sHjoTmv6y9ullygJhk0KiHME99GGlJP7/t
2Z+gJAeMNbZ9pkPfprgNE96mnnWO0zxLfpdVxgB9vVVqMOLBeCJWvsWTEsp+oAg0
RC4jOk/vFJQNHg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:31:44 2025 by rpki-client