Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
File:                     TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft (raw, json)
Hash identifier:          Whb9UMtv14vUkpJIITD3Bkw0jnZvyoTyHtk1gmtpW0s=
Subject key identifier:   8D:A1:7A:24:49:F9:76:C6:DF:DC:91:B0:EE:62:D5:83:D7:FE:31:B0
Authority key identifier: 4E:F2:68:E1:43:D7:E4:4D:14:36:4D:1D:28:E8:6D:C3:E5:50:AA:B7
Certificate issuer:       /CN=4ef268e143d7e44d14364d1d28e86dc3e550aab7
Certificate serial:       01975045B75B67FC08F455EC8163BB731396
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TvJo4UPX5E0UNk0dKOhtw-VQqrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
Manifest number:          157C
Signing time:             Sun 08 Jun 2025 16:00:35 +0000
Manifest this update:     Sun 08 Jun 2025 16:00:35 +0000
Manifest next update:     Mon 09 Jun 2025 16:00:35 +0000
Files and hashes:         1: TvJo4UPX5E0UNk0dKOhtw-VQqrc.crl (hash: FFGtwzupOag5CwAN3A2WACsYZ7K3PoyFj3A3TZWe6Lg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TvJo4UPX5E0UNk0dKOhtw-VQqrc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:45:b7:5b:67:fc:08:f4:55:ec:81:63:bb:73:13:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ef268e143d7e44d14364d1d28e86dc3e550aab7
        Validity
            Not Before: Jun  8 16:00:35 2025 GMT
            Not After : Jun  9 16:00:35 2025 GMT
        Subject: CN=8da17a2449f976c6dfdc91b0ee62d583d7fe31b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4c:71:e0:a4:27:e6:18:2d:a0:be:80:dd:10:
                    ce:d2:d5:8d:38:9e:2b:0c:4b:27:30:8b:41:6b:0d:
                    e5:f4:f6:7c:bc:f6:0f:10:c2:8d:ae:5b:4f:1f:b5:
                    3f:f7:e1:0c:4a:c4:77:6b:0f:3a:30:66:ed:5b:c3:
                    87:0d:03:a4:0a:b4:1e:4a:36:be:29:b0:8b:5b:9d:
                    48:50:05:e3:b8:8b:c7:92:55:61:14:ab:d4:84:58:
                    94:b0:ec:0f:4e:59:0b:6d:b2:e7:37:2d:e1:b4:1b:
                    81:a1:52:f8:c0:b7:a4:8d:31:e3:53:3d:72:7f:9c:
                    cd:f8:9e:0f:90:27:92:26:c4:1f:ad:24:c7:d5:57:
                    58:22:67:72:42:17:6c:5f:09:69:1a:e8:90:4e:f9:
                    5c:6c:b2:50:96:c6:07:db:ca:7c:86:c2:c0:00:78:
                    7b:ab:24:1c:99:ce:2b:78:93:cf:d8:c7:3d:08:93:
                    71:82:e1:d8:63:dc:11:52:55:25:0a:f0:46:94:55:
                    74:22:d5:13:c2:86:58:5f:b8:2d:a6:df:63:65:2e:
                    24:24:fd:6f:2f:8d:37:48:ab:f4:a1:79:d4:ce:48:
                    7d:46:6f:7c:13:42:bb:69:7b:c5:36:6f:b9:ab:51:
                    6f:f7:a5:c7:e7:d6:c0:7c:e8:fb:a3:ad:07:c1:ae:
                    54:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A1:7A:24:49:F9:76:C6:DF:DC:91:B0:EE:62:D5:83:D7:FE:31:B0
            X509v3 Authority Key Identifier:
                keyid:4E:F2:68:E1:43:D7:E4:4D:14:36:4D:1D:28:E8:6D:C3:E5:50:AA:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TvJo4UPX5E0UNk0dKOhtw-VQqrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:39:15:a5:94:2e:97:9a:f0:d3:a1:bd:0c:cb:51:d8:eb:b3:
         12:53:05:18:c3:07:c5:eb:7e:98:a7:2b:5e:ef:30:e8:2f:80:
         ff:4f:ea:a3:55:40:3f:26:7a:01:86:0b:93:cd:9a:1e:6d:d8:
         9c:35:f7:d8:4c:16:31:0a:31:bf:11:93:b2:51:d7:dd:0a:81:
         4a:b3:a1:ed:14:d7:6f:a0:7b:ae:aa:f5:64:34:d1:08:b3:1a:
         40:46:70:e9:c9:51:39:ac:31:b5:25:01:b5:9d:72:e6:01:ed:
         e0:5b:23:83:63:a7:b8:60:9f:6e:32:7c:43:2e:eb:a3:e9:7e:
         06:04:67:90:30:7f:4f:af:29:c8:4c:fb:3c:af:71:11:77:86:
         c7:26:18:42:e1:cf:cd:b0:66:fc:1a:ad:57:7e:6a:2a:a1:4c:
         c6:77:94:8b:46:1a:e2:51:98:d0:87:90:85:07:5d:62:57:65:
         a0:e1:bb:aa:23:a5:0a:6b:7a:e1:75:b2:3a:a0:39:f9:6e:44:
         70:12:1a:ac:ad:1b:0f:5a:d2:11:45:98:24:62:3c:e0:09:26:
         f1:a3:b7:30:b8:b9:14:ca:d8:38:11:65:d8:c6:ee:86:c5:7c:
         c3:5f:58:10:83:13:32:07:e7:d2:b4:e8:eb:fe:f5:f6:27:0a:
         97:a5:bd:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQRbdbZ/wI9FXsgWO7cxOWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZjI2OGUxNDNkN2U0NGQxNDM2NGQxZDI4ZTg2ZGMzZTU1
MGFhYjcwHhcNMjUwNjA4MTYwMDM1WhcNMjUwNjA5MTYwMDM1WjAzMTEwLwYDVQQD
Eyg4ZGExN2EyNDQ5Zjk3NmM2ZGZkYzkxYjBlZTYyZDU4M2Q3ZmUzMWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20xx4KQn5hgtoL6A3RDO0tWNOJ4r
DEsnMItBaw3l9PZ8vPYPEMKNrltPH7U/9+EMSsR3aw86MGbtW8OHDQOkCrQeSja+
KbCLW51IUAXjuIvHklVhFKvUhFiUsOwPTlkLbbLnNy3htBuBoVL4wLekjTHjUz1y
f5zN+J4PkCeSJsQfrSTH1VdYImdyQhdsXwlpGuiQTvlcbLJQlsYH28p8hsLAAHh7
qyQcmc4reJPP2Mc9CJNxguHYY9wRUlUlCvBGlFV0ItUTwoZYX7gtpt9jZS4kJP1v
L403SKv0oXnUzkh9Rm98E0K7aXvFNm+5q1Fv96XH59bAfOj7o60Hwa5UtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2heiRJ+XbG39yRsO5i1YPX/jGwMB8GA1UdIwQY
MBaAFE7yaOFD1+RNFDZNHSjobcPlUKq3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHZKbzRVUFg1RTBVTmswZEtPaHR3LVZRcXJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC83YTAxMWItMzFhNC00OTlmLWEzOTEt
MDMyOWM3OGE0Y2ZhLzEvVHZKbzRVUFg1RTBVTmswZEtPaHR3LVZRcXJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC83YTAxMWItMzFhNC00OTlmLWEzOTEtMDMyOWM3OGE0Y2Zh
LzEvVHZKbzRVUFg1RTBVTmswZEtPaHR3LVZRcXJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjkVpZQu
l5rw06G9DMtR2OuzElMFGMMHxet+mKcrXu8w6C+A/0/qo1VAPyZ6AYYLk82aHm3Y
nDX32EwWMQoxvxGTslHX3QqBSrOh7RTXb6B7rqr1ZDTRCLMaQEZw6clROawxtSUB
tZ1y5gHt4Fsjg2OnuGCfbjJ8Qy7ro+l+BgRnkDB/T68pyEz7PK9xEXeGxyYYQuHP
zbBm/BqtV35qKqFMxneUi0Ya4lGY0IeQhQddYldloOG7qiOlCmt64XWyOqA5+W5E
cBIarK0bD1rSEUWYJGI84Akm8aO3MLi5FMrYOBFl2MbuhsV8w19YEIMTMgfn0rTo
6/719icKl6W9Xg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 20:12:13 2025 by rpki-client