Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft
File:                     Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft (raw, json)
Hash identifier:          Ue32y7S7stPvjp7ngguWfRMM7a6uhZzgOKLpyE9S+8Y=
Subject key identifier:   E4:3A:C4:0E:CA:39:87:52:8A:F2:F4:52:E1:3D:4F:C4:01:EC:C3:26
Authority key identifier: 32:8E:FF:BB:BF:D5:53:5D:3E:71:BA:6E:A8:15:EE:49:05:C1:C2:0D
Certificate issuer:       /CN=328effbbbfd5535d3e71ba6ea815ee4905c1c20d
Certificate serial:       0197469DAAB60685400A738394B069582CCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mo7_u7_VU10-cbpuqBXuSQXBwg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft
Manifest number:          0B23
Signing time:             Fri 06 Jun 2025 19:00:27 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:27 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:27 +0000
Files and hashes:         1: Mo7_u7_VU10-cbpuqBXuSQXBwg0.crl (hash: ec0H2Z0Z6/dli+tZO6Na1ZuywcViFQRUgSj6Eic10uQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mo7_u7_VU10-cbpuqBXuSQXBwg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9d:aa:b6:06:85:40:0a:73:83:94:b0:69:58:2c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328effbbbfd5535d3e71ba6ea815ee4905c1c20d
        Validity
            Not Before: Jun  6 19:00:27 2025 GMT
            Not After : Jun  7 19:00:27 2025 GMT
        Subject: CN=e43ac40eca3987528af2f452e13d4fc401ecc326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:60:2f:b6:48:79:63:6c:f7:f8:b9:0a:b1:a7:
                    9e:a1:96:93:e4:fd:13:4e:72:92:55:96:3d:6e:f8:
                    62:27:b5:a7:45:9c:db:d4:76:9d:50:23:58:0f:0e:
                    99:0b:09:a7:ca:7d:cc:41:c8:78:dd:b1:a3:dc:ca:
                    cf:4b:89:34:d7:98:f7:3b:aa:35:75:d2:b8:30:bf:
                    a0:32:bf:b0:2f:4c:bf:85:7c:83:57:f4:e8:a6:e4:
                    c0:30:13:5f:39:09:34:e7:a6:b4:d3:62:9a:d4:a0:
                    7f:00:39:df:ef:ed:3e:a9:2e:c3:02:3f:12:c3:62:
                    cd:e0:bc:84:09:c6:bb:4f:1e:95:48:e2:88:f3:db:
                    4e:83:21:b4:86:e0:8a:1a:05:fc:cd:68:a0:46:86:
                    91:be:35:93:2f:88:89:3c:9f:a9:a5:19:17:cf:1a:
                    07:b7:12:e5:11:92:4e:40:f2:08:c6:ec:03:a1:05:
                    64:d0:e2:15:a0:69:9c:5e:28:ba:68:76:d8:94:9c:
                    98:74:73:d0:45:9a:17:fa:4d:79:fc:86:c6:e2:48:
                    49:d1:25:ef:8b:f1:20:72:68:07:67:af:a3:7a:2e:
                    94:f4:35:51:20:03:db:0e:3c:3a:03:d9:af:bc:35:
                    ec:2b:7b:3f:f9:39:96:14:8e:60:c1:e3:f1:6e:b3:
                    a2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3A:C4:0E:CA:39:87:52:8A:F2:F4:52:E1:3D:4F:C4:01:EC:C3:26
            X509v3 Authority Key Identifier:
                keyid:32:8E:FF:BB:BF:D5:53:5D:3E:71:BA:6E:A8:15:EE:49:05:C1:C2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mo7_u7_VU10-cbpuqBXuSQXBwg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1305f2-6f87-4cfe-a6d5-9b5bd6c9e449/1/Mo7_u7_VU10-cbpuqBXuSQXBwg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:b1:2c:d2:50:53:e9:6d:78:c4:93:1c:11:38:60:5b:4e:56:
         51:08:aa:fc:0d:18:d3:01:b9:36:83:58:c9:56:02:16:da:d3:
         60:02:fa:a8:c7:c8:c9:1b:b8:8c:19:56:ea:6d:bc:d2:e1:87:
         38:2c:f7:e0:73:3c:3f:0a:f7:f4:cf:80:f2:f6:0e:df:54:f7:
         bd:97:06:7e:42:c0:8a:7f:11:d5:27:7b:c5:f3:24:05:1a:76:
         9a:e1:da:6a:c5:93:3f:66:09:ab:7d:40:24:e4:ab:f8:c2:13:
         b9:c1:25:b9:73:bf:fe:c4:f5:dc:8d:af:41:ba:03:a6:54:65:
         13:43:53:bb:a4:d9:3f:78:78:62:51:42:5c:9f:39:c4:87:25:
         81:fd:79:b1:40:44:c6:bf:86:0b:c4:f6:cc:0e:cc:96:b7:91:
         2a:e4:91:9c:f8:35:fc:19:23:b0:63:a5:bf:b2:6c:b5:22:49:
         fc:8a:ff:2b:51:08:e0:b9:21:ae:b1:8c:65:4b:59:ba:a4:4b:
         6c:03:e2:dc:c6:c8:a4:be:62:d1:32:74:9f:8d:f1:f2:ae:55:
         c9:5f:89:90:66:da:3f:11:e8:56:82:f1:d0:55:08:a4:0c:91:
         38:49:1c:26:3d:39:da:c6:a2:f1:76:7d:3e:22:45:18:4d:9e:
         8f:bf:52:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnaq2BoVACnODlLBpWCzOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyOGVmZmJiYmZkNTUzNWQzZTcxYmE2ZWE4MTVlZTQ5MDVj
MWMyMGQwHhcNMjUwNjA2MTkwMDI3WhcNMjUwNjA3MTkwMDI3WjAzMTEwLwYDVQQD
EyhlNDNhYzQwZWNhMzk4NzUyOGFmMmY0NTJlMTNkNGZjNDAxZWNjMzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmAvtkh5Y2z3+LkKsaeeoZaT5P0T
TnKSVZY9bvhiJ7WnRZzb1HadUCNYDw6ZCwmnyn3MQch43bGj3MrPS4k015j3O6o1
ddK4ML+gMr+wL0y/hXyDV/TopuTAMBNfOQk056a002Ka1KB/ADnf7+0+qS7DAj8S
w2LN4LyECca7Tx6VSOKI89tOgyG0huCKGgX8zWigRoaRvjWTL4iJPJ+ppRkXzxoH
txLlEZJOQPIIxuwDoQVk0OIVoGmcXii6aHbYlJyYdHPQRZoX+k15/IbG4khJ0SXv
i/EgcmgHZ6+jei6U9DVRIAPbDjw6A9mvvDXsK3s/+TmWFI5gwePxbrOiMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQ6xA7KOYdSivL0UuE9T8QB7MMmMB8GA1UdIwQY
MBaAFDKO/7u/1VNdPnG6bqgV7kkFwcINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW83X3U3X1ZVMTAtY2JwdXFCWHVTUVhCd2cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xMzA1ZjItNmY4Ny00Y2ZlLWE2ZDUt
OWI1YmQ2YzllNDQ5LzEvTW83X3U3X1ZVMTAtY2JwdXFCWHVTUVhCd2cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8xMzA1ZjItNmY4Ny00Y2ZlLWE2ZDUtOWI1YmQ2YzllNDQ5
LzEvTW83X3U3X1ZVMTAtY2JwdXFCWHVTUVhCd2cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLEs0lBT
6W14xJMcEThgW05WUQiq/A0Y0wG5NoNYyVYCFtrTYAL6qMfIyRu4jBlW6m280uGH
OCz34HM8Pwr39M+A8vYO31T3vZcGfkLAin8R1Sd7xfMkBRp2muHaasWTP2YJq31A
JOSr+MITucEluXO//sT13I2vQboDplRlE0NTu6TZP3h4YlFCXJ85xIclgf15sUBE
xr+GC8T2zA7MlreRKuSRnPg1/BkjsGOlv7JstSJJ/Ir/K1EI4LkhrrGMZUtZuqRL
bAPi3MbIpL5i0TJ0n43x8q5VyV+JkGbaPxHoVoLx0FUIpAyROEkcJj052sai8XZ9
PiJFGE2ej79Szg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:07 2025 by rpki-client