Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
File:                     MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft (raw, json)
Hash identifier:          k2PIViAqsBsJoroM4LxknZClGmzFqT8sxXXRnFtKVh8=
Subject key identifier:   3D:D6:C2:2A:D5:9E:B7:DE:E9:35:FD:53:C3:5D:3B:FE:5F:B4:2A:C5
Authority key identifier: 30:7A:44:15:BA:D4:0B:64:3E:10:BE:C4:D2:82:CD:30:72:BA:56:DA
Certificate issuer:       /CN=307a4415bad40b643e10bec4d282cd3072ba56da
Certificate serial:       019759EDF9A753DB2DC8894833A506A0BDF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
Manifest number:          1582
Signing time:             Tue 10 Jun 2025 13:00:57 +0000
Manifest this update:     Tue 10 Jun 2025 13:00:57 +0000
Manifest next update:     Wed 11 Jun 2025 13:00:57 +0000
Files and hashes:         1: MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl (hash: 6vbDmSLcHxMFVnEgxW5u6+K+HwmsMkxcbGOb+Hynl7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:ed:f9:a7:53:db:2d:c8:89:48:33:a5:06:a0:bd:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307a4415bad40b643e10bec4d282cd3072ba56da
        Validity
            Not Before: Jun 10 13:00:57 2025 GMT
            Not After : Jun 11 13:00:57 2025 GMT
        Subject: CN=3dd6c22ad59eb7dee935fd53c35d3bfe5fb42ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1e:6e:ab:df:ec:76:d7:b0:95:bf:cc:d6:2a:
                    2c:37:f4:df:13:41:e8:5a:e3:1f:ac:7e:f4:09:40:
                    9d:18:37:38:44:ce:5b:55:5e:02:62:60:46:79:e9:
                    c6:eb:e7:62:a4:f6:86:c8:ec:82:27:99:f0:ab:cd:
                    d4:ff:85:2a:65:6f:67:fa:13:44:71:a3:08:6b:61:
                    b1:d5:53:e9:05:ec:1e:78:ec:7c:b0:68:49:6e:dd:
                    32:10:ce:88:7a:5e:5f:47:91:bc:4b:ae:8f:c7:5e:
                    6d:2b:6d:a9:38:40:48:0e:a1:a3:1b:cb:a0:6a:c5:
                    50:45:b9:73:0a:ca:af:f0:c5:93:c7:50:3e:91:ec:
                    b1:0c:48:10:09:1d:e1:6f:88:fe:57:6d:d5:98:fe:
                    38:be:a3:df:ae:52:2c:8b:d3:ab:a2:f8:dc:a0:87:
                    b5:fe:6a:2e:ec:c5:dc:81:83:0b:e5:48:5c:08:21:
                    a9:91:3f:1f:7f:59:02:8a:73:82:a9:6d:bf:11:d4:
                    b4:ab:70:97:d5:4e:53:46:4e:05:0c:01:f7:90:6c:
                    50:b6:4e:ce:ff:15:f0:40:1a:04:77:65:74:08:8a:
                    22:f4:86:68:42:2b:02:89:bd:01:24:fe:c5:d2:dc:
                    f8:cb:0d:3c:61:65:28:3e:26:56:66:e3:d9:cb:9e:
                    29:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D6:C2:2A:D5:9E:B7:DE:E9:35:FD:53:C3:5D:3B:FE:5F:B4:2A:C5
            X509v3 Authority Key Identifier:
                keyid:30:7A:44:15:BA:D4:0B:64:3E:10:BE:C4:D2:82:CD:30:72:BA:56:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:6e:9d:ac:b4:3b:2a:a7:d4:9d:61:66:e6:3d:6e:cb:d0:30:
         88:1f:a6:b3:67:70:f4:93:48:a9:26:1e:74:f3:5b:b7:5c:da:
         06:77:97:ed:84:02:38:d8:2a:b7:cd:3d:17:b3:5c:15:77:c5:
         1b:19:2c:50:41:60:bd:0f:ed:ba:d1:aa:df:d6:9a:06:b1:94:
         87:f8:e9:2f:32:72:4f:88:2e:34:55:f7:95:87:16:60:6f:06:
         a3:48:b5:62:33:28:3f:98:78:78:ec:76:55:3f:54:a4:de:9e:
         8d:8e:23:b8:33:e8:0d:3d:1d:85:60:a7:8b:02:fe:8d:3c:90:
         3b:cb:93:43:b6:b9:62:68:a7:a9:f3:95:98:5a:a5:d7:8d:2a:
         cc:5f:69:5d:74:7b:6b:90:3f:1d:e9:45:b5:2b:83:d8:19:fd:
         b8:68:7e:97:f3:c0:23:ba:f8:74:8d:ac:8e:f4:7c:bf:d7:99:
         52:af:fa:79:dd:68:90:25:7e:e0:85:f3:a5:1e:f7:c1:f3:cf:
         ff:56:27:3b:bc:3c:5e:43:6f:b0:71:c4:2a:f9:4e:aa:65:f6:
         51:b1:a9:8a:fa:62:23:4c:89:6f:1f:47:c5:aa:b9:8a:7f:23:
         3f:bc:f1:57:a1:ab:44:a5:ab:a5:f5:75:46:39:35:62:c7:56:
         df:e3:7c:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZ7fmnU9styIlIM6UGoL32MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2E0NDE1YmFkNDBiNjQzZTEwYmVjNGQyODJjZDMwNzJi
YTU2ZGEwHhcNMjUwNjEwMTMwMDU3WhcNMjUwNjExMTMwMDU3WjAzMTEwLwYDVQQD
EygzZGQ2YzIyYWQ1OWViN2RlZTkzNWZkNTNjMzVkM2JmZTVmYjQyYWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB5uq9/sdtewlb/M1iosN/TfE0Ho
WuMfrH70CUCdGDc4RM5bVV4CYmBGeenG6+dipPaGyOyCJ5nwq83U/4UqZW9n+hNE
caMIa2Gx1VPpBeweeOx8sGhJbt0yEM6Iel5fR5G8S66Px15tK22pOEBIDqGjG8ug
asVQRblzCsqv8MWTx1A+keyxDEgQCR3hb4j+V23VmP44vqPfrlIsi9OrovjcoIe1
/mou7MXcgYML5UhcCCGpkT8ff1kCinOCqW2/EdS0q3CX1U5TRk4FDAH3kGxQtk7O
/xXwQBoEd2V0CIoi9IZoQisCib0BJP7F0tz4yw08YWUoPiZWZuPZy54p4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3WwirVnrfe6TX9U8NdO/5ftCrFMB8GA1UdIwQY
MBaAFDB6RBW61AtkPhC+xNKCzTByulbaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhwRUZiclVDMlEtRUw3RTBvTE5NSEs2VnRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9hZGU2NjktY2M1Yi00ZWRkLWI5NzEt
NmFlMjg0NmQ4YTUxLzEvTUhwRUZiclVDMlEtRUw3RTBvTE5NSEs2VnRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9hZGU2NjktY2M1Yi00ZWRkLWI5NzEtNmFlMjg0NmQ4YTUx
LzEvTUhwRUZiclVDMlEtRUw3RTBvTE5NSEs2VnRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAom6drLQ7
KqfUnWFm5j1uy9AwiB+ms2dw9JNIqSYedPNbt1zaBneX7YQCONgqt809F7NcFXfF
GxksUEFgvQ/tutGq39aaBrGUh/jpLzJyT4guNFX3lYcWYG8Go0i1YjMoP5h4eOx2
VT9UpN6ejY4juDPoDT0dhWCniwL+jTyQO8uTQ7a5YminqfOVmFql140qzF9pXXR7
a5A/HelFtSuD2Bn9uGh+l/PAI7r4dI2sjvR8v9eZUq/6ed1okCV+4IXzpR73wfPP
/1YnO7w8XkNvsHHEKvlOqmX2UbGpivpiI0yJbx9Hxaq5in8jP7zxV6GrRKWrpfV1
Rjk1YsdW3+N8Xg==
-----END CERTIFICATE-----
Generated at Tue Jun 10 19:50:01 2025 by rpki-client