Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
File:                     r1UJ13Yi0who8jYTxagW5ySEAWU.mft (raw, json)
Hash identifier:          0THQRpaSdDLvaoSTrXRr+8bDZNde1TGBplMx711C2jU=
Subject key identifier:   27:9F:C2:A4:52:DA:D9:70:6C:2B:08:51:01:80:32:E4:36:67:C0:EF
Authority key identifier: AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65
Certificate issuer:       /CN=af5509d77622d30868f23613c5a816e724840165
Certificate serial:       01974E571B95901BDDB1FCFDA9FE4526CE40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
Manifest number:          0633
Signing time:             Sun 08 Jun 2025 07:00:20 +0000
Manifest this update:     Sun 08 Jun 2025 07:00:20 +0000
Manifest next update:     Mon 09 Jun 2025 07:00:20 +0000
Files and hashes:         1: r1UJ13Yi0who8jYTxagW5ySEAWU.crl (hash: 7XN1FXXTOpT0qKXahaHVEu4bgmzfyirAh6qZA62sOQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:57:1b:95:90:1b:dd:b1:fc:fd:a9:fe:45:26:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af5509d77622d30868f23613c5a816e724840165
        Validity
            Not Before: Jun  8 07:00:20 2025 GMT
            Not After : Jun  9 07:00:20 2025 GMT
        Subject: CN=279fc2a452dad9706c2b0851018032e43667c0ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c1:e1:72:29:70:f0:41:2a:67:6b:6f:fd:1f:
                    c0:cd:68:d2:c5:0c:c6:14:1e:46:ac:05:ec:f3:1a:
                    18:9f:cd:7f:30:a1:da:18:48:3f:c1:c4:c7:6f:19:
                    bd:85:1e:da:52:53:71:f8:93:6c:79:b2:21:d7:74:
                    da:8d:65:a0:53:15:0a:00:15:42:3c:e2:73:32:e6:
                    fe:2e:4c:79:c1:9e:01:ce:dd:ec:2e:68:ef:99:35:
                    cd:92:b1:93:d8:76:9b:07:93:cc:4d:a5:22:80:f5:
                    0b:75:d8:81:2f:55:fc:c5:48:93:0b:2f:0a:ed:30:
                    52:b4:c3:67:8a:bf:5c:22:b3:a5:d6:f1:e7:2a:2f:
                    49:3f:be:b7:8e:62:d5:7a:98:84:28:f5:13:cf:60:
                    6a:c7:aa:ef:88:69:b4:42:85:d8:cb:ab:50:ec:ad:
                    ca:2c:a0:a3:b8:dc:18:54:12:64:53:dc:80:66:65:
                    fa:6e:7a:6e:40:48:e7:80:51:3e:bf:8a:87:49:63:
                    3f:72:1c:1a:a9:35:0d:f6:84:cb:fd:fe:cc:ab:bd:
                    f4:f2:e8:1c:1e:92:76:07:8e:e4:77:dd:13:d9:ee:
                    8f:df:4c:bd:bb:ef:9d:d4:eb:9d:e8:c8:3f:8f:8b:
                    d7:a7:d5:fd:0d:0f:15:88:01:ab:4f:f0:de:0a:f8:
                    06:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9F:C2:A4:52:DA:D9:70:6C:2B:08:51:01:80:32:E4:36:67:C0:EF
            X509v3 Authority Key Identifier:
                keyid:AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:49:64:71:58:4e:aa:dc:90:45:15:13:ff:96:7d:6d:4b:59:
         cf:e9:05:ef:ce:57:77:83:f5:87:79:f2:6c:b0:7c:dd:ce:0b:
         93:b2:1f:08:63:b7:b6:62:c5:69:ed:0d:e9:1f:1f:63:19:e4:
         d0:3c:34:83:e2:27:d9:73:ba:55:4d:30:b5:85:34:5b:61:22:
         75:e3:1f:18:e0:d1:64:b5:a5:95:b2:49:f2:fa:1b:14:b1:ae:
         27:12:2f:16:ea:38:20:79:8c:61:23:2d:df:96:51:ec:fe:a4:
         68:1d:cc:0d:dd:59:d5:65:21:15:de:8a:47:1a:7f:bd:96:7b:
         fa:3f:81:13:d4:42:78:8b:5d:27:99:6b:f4:1f:a3:6e:26:27:
         47:d9:91:89:f6:e1:45:fe:83:41:df:e6:ab:3f:77:29:a1:d5:
         ad:84:39:a4:54:9f:48:18:95:bf:99:4a:f2:69:72:61:ea:d8:
         c5:0a:18:40:92:aa:a9:e1:82:64:1e:3c:ba:cb:29:43:c0:7c:
         3a:cf:88:e9:32:d2:99:65:85:fb:d7:40:e9:3c:97:91:38:35:
         a2:b3:8f:a1:2d:4a:a4:32:a8:66:6e:32:0d:94:5f:e3:e8:f2:
         c6:1b:8e:1e:35:48:9e:46:1c:26:95:d9:d2:12:1c:fb:f6:64:
         32:b0:36:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOVxuVkBvdsfz9qf5FJs5AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNTUwOWQ3NzYyMmQzMDg2OGYyMzYxM2M1YTgxNmU3MjQ4
NDAxNjUwHhcNMjUwNjA4MDcwMDIwWhcNMjUwNjA5MDcwMDIwWjAzMTEwLwYDVQQD
EygyNzlmYzJhNDUyZGFkOTcwNmMyYjA4NTEwMTgwMzJlNDM2NjdjMGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8Hhcilw8EEqZ2tv/R/AzWjSxQzG
FB5GrAXs8xoYn81/MKHaGEg/wcTHbxm9hR7aUlNx+JNsebIh13TajWWgUxUKABVC
POJzMub+Lkx5wZ4Bzt3sLmjvmTXNkrGT2HabB5PMTaUigPULddiBL1X8xUiTCy8K
7TBStMNnir9cIrOl1vHnKi9JP763jmLVepiEKPUTz2Bqx6rviGm0QoXYy6tQ7K3K
LKCjuNwYVBJkU9yAZmX6bnpuQEjngFE+v4qHSWM/chwaqTUN9oTL/f7Mq7308ugc
HpJ2B47kd90T2e6P30y9u++d1Oud6Mg/j4vXp9X9DQ8ViAGrT/DeCvgGUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCefwqRS2tlwbCsIUQGAMuQ2Z8DvMB8GA1UdIwQY
MBaAFK9VCdd2ItMIaPI2E8WoFuckhAFlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjFVSjEzWWkwd2hvOGpZVHhhZ1c1eVNFQVdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85OTcxZTEtNTdmYy00ZjhjLTlmMDMt
MGFlZTZlMjM3MjQzLzEvcjFVSjEzWWkwd2hvOGpZVHhhZ1c1eVNFQVdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85OTcxZTEtNTdmYy00ZjhjLTlmMDMtMGFlZTZlMjM3MjQz
LzEvcjFVSjEzWWkwd2hvOGpZVHhhZ1c1eVNFQVdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEElkcVhO
qtyQRRUT/5Z9bUtZz+kF785Xd4P1h3nybLB83c4Lk7IfCGO3tmLFae0N6R8fYxnk
0Dw0g+In2XO6VU0wtYU0W2EideMfGODRZLWllbJJ8vobFLGuJxIvFuo4IHmMYSMt
35ZR7P6kaB3MDd1Z1WUhFd6KRxp/vZZ7+j+BE9RCeItdJ5lr9B+jbiYnR9mRifbh
Rf6DQd/mqz93KaHVrYQ5pFSfSBiVv5lK8mlyYerYxQoYQJKqqeGCZB48usspQ8B8
Os+I6TLSmWWF+9dA6TyXkTg1orOPoS1KpDKoZm4yDZRf4+jyxhuOHjVInkYcJpXZ
0hIc+/ZkMrA2BQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:37:08 2025 by rpki-client