Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
File:                     wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft (raw, json)
Hash identifier:          8IsYikC9UA6NVRgWukfBmmsc37Nx4F0CYmbn0meqhcA=
Subject key identifier:   18:21:9A:8D:ED:AC:15:4E:2C:D2:B9:6C:8C:4E:0A:F9:71:64:2B:05
Authority key identifier: C0:52:D5:D9:35:72:2C:2C:5C:C4:9F:05:2C:D5:A5:A8:F1:45:73:6B
Certificate issuer:       /CN=c052d5d935722c2c5cc49f052cd5a5a8f145736b
Certificate serial:       019745F8D88FEEB12E850290CEAEACC45C7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
Manifest number:          1449
Signing time:             Fri 06 Jun 2025 16:00:25 +0000
Manifest this update:     Fri 06 Jun 2025 16:00:25 +0000
Manifest next update:     Sat 07 Jun 2025 16:00:25 +0000
Files and hashes:         1: wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl (hash: iSg2kePXHR6RGp5URRmnfDhd6GmkO3jEszL/loItr2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:f8:d8:8f:ee:b1:2e:85:02:90:ce:ae:ac:c4:5c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c052d5d935722c2c5cc49f052cd5a5a8f145736b
        Validity
            Not Before: Jun  6 16:00:25 2025 GMT
            Not After : Jun  7 16:00:25 2025 GMT
        Subject: CN=18219a8dedac154e2cd2b96c8c4e0af971642b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:43:e2:ea:1b:4d:32:f1:82:a3:8d:96:f0:40:
                    d5:49:3c:d2:c7:c9:7c:24:92:b0:c1:65:8e:e6:d1:
                    af:1d:77:3d:a8:38:e3:8e:e5:fb:57:26:b6:55:e3:
                    54:a9:9d:6b:e7:77:c2:20:84:42:26:60:71:9c:83:
                    2b:37:a8:20:5b:f4:19:af:d4:3e:fa:9b:ab:79:bb:
                    c4:22:4e:3a:c8:3b:0a:c0:89:96:ff:cb:35:a0:3d:
                    9c:ea:73:8f:a9:bc:06:b6:b2:93:36:8d:2d:7b:05:
                    d4:79:78:37:3e:89:c2:61:5b:44:7f:e4:c8:1c:ec:
                    84:5f:ce:37:75:d2:52:50:8a:7e:e9:44:72:da:e7:
                    e8:a6:71:b5:77:13:67:51:62:41:05:ec:3e:44:7f:
                    bb:88:54:a2:98:42:4c:e8:0a:29:09:59:45:5a:5d:
                    12:13:5b:31:fb:b8:ab:d1:a4:d4:0d:5e:84:97:64:
                    db:4c:8f:06:82:c0:69:cf:81:65:47:f4:2e:ed:86:
                    db:ae:50:17:97:4c:79:50:a3:e3:0a:b0:7d:4b:21:
                    93:ce:45:75:aa:21:9c:79:89:49:f5:e0:90:35:2f:
                    08:52:17:2f:40:f3:d7:b9:51:25:33:ab:c6:30:dc:
                    6c:01:6b:5a:ac:a7:f5:5e:75:0e:a7:ed:a3:e7:9b:
                    ac:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:21:9A:8D:ED:AC:15:4E:2C:D2:B9:6C:8C:4E:0A:F9:71:64:2B:05
            X509v3 Authority Key Identifier:
                keyid:C0:52:D5:D9:35:72:2C:2C:5C:C4:9F:05:2C:D5:A5:A8:F1:45:73:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:22:aa:37:70:46:01:dd:ef:b3:f1:12:42:a6:e0:68:2f:04:
         81:35:e4:50:4c:ab:b6:0f:1a:53:49:cc:e3:48:db:56:7c:0a:
         47:4b:6f:94:7e:3b:c6:c9:f1:84:1b:4a:a1:db:5c:cd:6f:7d:
         a4:45:d1:56:a2:06:ca:dc:f0:e5:13:5a:4b:de:b6:3d:18:f5:
         c6:0e:54:af:bb:a0:ac:d2:19:19:9d:5a:d0:34:93:cc:dc:a1:
         c9:cd:0a:13:38:c3:8d:46:17:e0:ea:cb:36:df:08:37:e9:fb:
         22:14:6d:ad:92:8a:b7:d9:19:33:cc:fa:1a:59:ea:f7:4d:19:
         85:7a:bd:02:f1:63:a6:02:a2:e2:f4:19:d0:49:c1:e7:26:43:
         8a:92:78:6e:44:45:bc:eb:41:4e:1f:2a:0b:97:3f:b3:b7:3c:
         ac:c9:aa:7f:3d:85:3e:54:52:f7:28:f2:e3:c2:1d:04:59:15:
         b9:cb:ba:2d:29:27:f0:ff:8b:ed:a2:ed:77:f6:29:dc:e0:42:
         8e:0a:72:b2:75:cd:ee:ce:7d:43:af:be:bb:6d:ed:8f:f1:33:
         b5:7a:54:d2:0a:51:fd:e9:0d:7b:72:15:1d:04:68:a2:c0:f7:
         1f:12:89:12:0c:30:ee:b2:81:6d:ba:d6:2f:95:45:0f:88:26:
         12:e4:1d:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdF+NiP7rEuhQKQzq6sxFx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNTJkNWQ5MzU3MjJjMmM1Y2M0OWYwNTJjZDVhNWE4ZjE0
NTczNmIwHhcNMjUwNjA2MTYwMDI1WhcNMjUwNjA3MTYwMDI1WjAzMTEwLwYDVQQD
EygxODIxOWE4ZGVkYWMxNTRlMmNkMmI5NmM4YzRlMGFmOTcxNjQyYjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEPi6htNMvGCo42W8EDVSTzSx8l8
JJKwwWWO5tGvHXc9qDjjjuX7Vya2VeNUqZ1r53fCIIRCJmBxnIMrN6ggW/QZr9Q+
+purebvEIk46yDsKwImW/8s1oD2c6nOPqbwGtrKTNo0tewXUeXg3PonCYVtEf+TI
HOyEX843ddJSUIp+6URy2ufopnG1dxNnUWJBBew+RH+7iFSimEJM6AopCVlFWl0S
E1sx+7ir0aTUDV6El2TbTI8GgsBpz4FlR/Qu7YbbrlAXl0x5UKPjCrB9SyGTzkV1
qiGceYlJ9eCQNS8IUhcvQPPXuVElM6vGMNxsAWtarKf1XnUOp+2j55usxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBghmo3trBVOLNK5bIxOCvlxZCsFMB8GA1UdIwQY
MBaAFMBS1dk1ciwsXMSfBSzVpajxRXNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0ZMVjJUVnlMQ3hjeEo4RkxOV2xxUEZGYzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9iYjczMzUtYjhjOS00ZTQxLWIxMjQt
YmY5ZTM3YjdiODcwLzEvd0ZMVjJUVnlMQ3hjeEo4RkxOV2xxUEZGYzJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9iYjczMzUtYjhjOS00ZTQxLWIxMjQtYmY5ZTM3YjdiODcw
LzEvd0ZMVjJUVnlMQ3hjeEo4RkxOV2xxUEZGYzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUiKqN3BG
Ad3vs/ESQqbgaC8EgTXkUEyrtg8aU0nM40jbVnwKR0tvlH47xsnxhBtKodtczW99
pEXRVqIGytzw5RNaS962PRj1xg5Ur7ugrNIZGZ1a0DSTzNyhyc0KEzjDjUYX4OrL
Nt8IN+n7IhRtrZKKt9kZM8z6Glnq900ZhXq9AvFjpgKi4vQZ0EnB5yZDipJ4bkRF
vOtBTh8qC5c/s7c8rMmqfz2FPlRS9yjy48IdBFkVucu6LSkn8P+L7aLtd/Yp3OBC
jgpysnXN7s59Q6++u23tj/EztXpU0gpR/ekNe3IVHQRoosD3HxKJEgww7rKBbbrW
L5VFD4gmEuQdsw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:59 2025 by rpki-client