Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft
File:                     ML2W-0iWciqJyEZRjLXmbLVMhU8.mft (raw, json)
Hash identifier:          C7237wF4PD1noVNf3uRMg6ZHcaVByd/3Ehhml+DrnYM=
Subject key identifier:   3D:93:4A:B0:7B:01:71:58:D7:8C:03:5D:35:98:EF:12:2C:CB:A2:5F
Authority key identifier: 30:BD:96:FB:48:96:72:2A:89:C8:46:51:8C:B5:E6:6C:B5:4C:85:4F
Certificate issuer:       /CN=30bd96fb4896722a89c846518cb5e66cb54c854f
Certificate serial:       019749684B43577D457FF630753B720E8E37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ML2W-0iWciqJyEZRjLXmbLVMhU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft
Manifest number:          1578
Signing time:             Sat 07 Jun 2025 08:01:01 +0000
Manifest this update:     Sat 07 Jun 2025 08:01:01 +0000
Manifest next update:     Sun 08 Jun 2025 08:01:01 +0000
Files and hashes:         1: ML2W-0iWciqJyEZRjLXmbLVMhU8.crl (hash: rGGU1fMwrsiGlT1JDWMlManA7EpxjCmlRkrMFidoa4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ML2W-0iWciqJyEZRjLXmbLVMhU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:68:4b:43:57:7d:45:7f:f6:30:75:3b:72:0e:8e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30bd96fb4896722a89c846518cb5e66cb54c854f
        Validity
            Not Before: Jun  7 08:01:01 2025 GMT
            Not After : Jun  8 08:01:01 2025 GMT
        Subject: CN=3d934ab07b017158d78c035d3598ef122ccba25f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:bb:75:0a:85:89:06:bd:74:2b:5c:ad:e4:
                    c8:d5:86:16:83:d5:cf:97:0c:b5:5f:70:c0:ca:7b:
                    e4:f4:8b:cb:ef:8b:c3:f6:19:1d:66:9d:3b:81:0d:
                    fc:e4:40:20:de:21:8e:a4:e5:45:f0:63:61:ce:65:
                    bc:a7:cb:b8:ae:65:3d:26:b4:10:d2:cb:27:c0:55:
                    4c:b5:a5:49:24:59:bb:1b:2e:bd:64:23:c2:1d:d1:
                    7e:70:de:00:18:2c:13:6b:32:11:36:8f:b0:84:8c:
                    51:48:79:36:f5:7d:f4:de:68:e8:4f:34:94:17:0d:
                    3b:0f:fb:26:32:6b:c1:08:ba:15:e8:f3:b0:ef:33:
                    7a:06:a0:d1:ae:83:80:eb:0a:02:71:f1:68:ab:1b:
                    b0:25:42:bf:6f:09:c8:90:1f:ae:16:78:fb:5a:0e:
                    28:dd:df:cf:86:63:4d:d0:d5:e6:57:9b:44:71:70:
                    7d:6b:28:1f:d1:7f:92:1a:47:ff:12:3e:d3:b6:d5:
                    f8:85:7e:26:61:ca:9f:ae:86:62:3d:b2:28:e9:61:
                    b7:1e:3b:8f:00:5c:6f:22:53:6b:5e:59:65:66:a1:
                    d2:e2:8b:74:4d:e4:25:c8:f0:51:04:f0:17:23:f3:
                    84:ee:e4:56:a0:6f:f6:14:25:6b:9c:fe:e1:b4:d8:
                    c5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:93:4A:B0:7B:01:71:58:D7:8C:03:5D:35:98:EF:12:2C:CB:A2:5F
            X509v3 Authority Key Identifier:
                keyid:30:BD:96:FB:48:96:72:2A:89:C8:46:51:8C:B5:E6:6C:B5:4C:85:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ML2W-0iWciqJyEZRjLXmbLVMhU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:8b:96:7d:9b:d0:0e:60:61:e0:36:39:00:33:08:15:87:3f:
         71:d5:5d:c1:15:97:58:3c:ea:30:30:90:c5:9e:22:99:47:3d:
         ab:d5:51:bc:cb:80:88:6d:ea:3e:dd:09:cd:2c:9d:5f:61:3a:
         ec:b4:c5:99:1d:0d:b5:3f:28:c8:f1:3c:4e:ae:59:61:b5:27:
         34:27:aa:ee:15:d4:38:22:ed:37:d5:f3:de:82:61:27:65:19:
         a8:67:07:8d:c9:b1:f9:59:ee:d6:12:c1:a2:e0:49:8a:4a:58:
         e1:3b:2a:84:ea:2b:d4:07:fc:43:a0:5d:c9:ac:82:95:b8:c0:
         76:58:7a:b3:c8:2c:86:0b:b6:79:29:f6:80:5d:ff:5f:71:63:
         7b:5b:f6:7c:3f:f6:d8:69:f2:5a:92:11:7d:56:d6:0d:40:5b:
         f8:0d:0e:81:3c:c8:e4:09:85:62:ee:7b:d4:ee:15:bc:a3:58:
         19:11:52:b1:94:7c:37:a5:df:77:c4:32:45:69:46:38:d3:ad:
         db:0a:7e:46:10:ff:f1:ba:cc:81:c1:eb:08:0a:2e:11:0a:ce:
         81:1e:03:7e:06:e2:24:43:5b:e0:f4:30:7f:67:70:1b:e8:86:
         8f:b3:05:ac:0a:60:46:00:e9:2f:1a:a5:e0:59:a9:3c:ba:3d:
         90:17:2b:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaEtDV31Ff/YwdTtyDo43MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYmQ5NmZiNDg5NjcyMmE4OWM4NDY1MThjYjVlNjZjYjU0
Yzg1NGYwHhcNMjUwNjA3MDgwMTAxWhcNMjUwNjA4MDgwMTAxWjAzMTEwLwYDVQQD
EygzZDkzNGFiMDdiMDE3MTU4ZDc4YzAzNWQzNTk4ZWYxMjJjY2JhMjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZu7dQqFiQa9dCtcreTI1YYWg9XP
lwy1X3DAynvk9IvL74vD9hkdZp07gQ385EAg3iGOpOVF8GNhzmW8p8u4rmU9JrQQ
0ssnwFVMtaVJJFm7Gy69ZCPCHdF+cN4AGCwTazIRNo+whIxRSHk29X303mjoTzSU
Fw07D/smMmvBCLoV6POw7zN6BqDRroOA6woCcfFoqxuwJUK/bwnIkB+uFnj7Wg4o
3d/PhmNN0NXmV5tEcXB9aygf0X+SGkf/Ej7TttX4hX4mYcqfroZiPbIo6WG3HjuP
AFxvIlNrXlllZqHS4ot0TeQlyPBRBPAXI/OE7uRWoG/2FCVrnP7htNjFXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2TSrB7AXFY14wDXTWY7xIsy6JfMB8GA1UdIwQY
MBaAFDC9lvtIlnIqichGUYy15my1TIVPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUwyVy0waVdjaXFKeUVaUmpMWG1iTFZNaFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zOGIwOGEtZGQ0NS00ZDNkLWIwMWIt
MjkwNDdlYmU4YmJiLzEvTUwyVy0waVdjaXFKeUVaUmpMWG1iTFZNaFU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8zOGIwOGEtZGQ0NS00ZDNkLWIwMWItMjkwNDdlYmU4YmJi
LzEvTUwyVy0waVdjaXFKeUVaUmpMWG1iTFZNaFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4uWfZvQ
DmBh4DY5ADMIFYc/cdVdwRWXWDzqMDCQxZ4imUc9q9VRvMuAiG3qPt0JzSydX2E6
7LTFmR0NtT8oyPE8Tq5ZYbUnNCeq7hXUOCLtN9Xz3oJhJ2UZqGcHjcmx+Vnu1hLB
ouBJikpY4TsqhOor1Af8Q6BdyayClbjAdlh6s8gshgu2eSn2gF3/X3Fje1v2fD/2
2GnyWpIRfVbWDUBb+A0OgTzI5AmFYu571O4VvKNYGRFSsZR8N6Xfd8QyRWlGONOt
2wp+RhD/8brMgcHrCAouEQrOgR4DfgbiJENb4PQwf2dwG+iGj7MFrApgRgDpLxql
4FmpPLo9kBcrxg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:00:01 2025 by rpki-client