Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft
File:                     adRwF7UV7iFLKEIO2-2zAVwW7ik.mft (raw, json)
Hash identifier:          zCFA44o0FdINXOF1gpBnOO7hZ1h+PLhMPMeCSDRQE70=
Subject key identifier:   DA:BC:77:5F:9A:68:7E:5C:0F:B8:EA:D3:B2:D5:CB:64:E8:65:D9:EF
Authority key identifier: 69:D4:70:17:B5:15:EE:21:4B:28:42:0E:DB:ED:B3:01:5C:16:EE:29
Certificate issuer:       /CN=69d47017b515ee214b28420edbedb3015c16ee29
Certificate serial:       01974A7A8D32D909952774434EAD6366950C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adRwF7UV7iFLKEIO2-2zAVwW7ik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 13:00:34 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:34 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:34 +0000
Files and hashes:         1: adRwF7UV7iFLKEIO2-2zAVwW7ik.crl (hash: aZa9N0zDwP97AQ4m2cSY6peDz0MAECF9eymg+cUdshs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adRwF7UV7iFLKEIO2-2zAVwW7ik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:8d:32:d9:09:95:27:74:43:4e:ad:63:66:95:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d47017b515ee214b28420edbedb3015c16ee29
        Validity
            Not Before: Jun  7 13:00:34 2025 GMT
            Not After : Jun  8 13:00:34 2025 GMT
        Subject: CN=dabc775f9a687e5c0fb8ead3b2d5cb64e865d9ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e1:03:3e:bb:69:01:c5:22:13:47:da:cf:2c:
                    bd:56:07:9c:6d:97:c3:3a:08:7f:90:a4:24:69:67:
                    92:91:dc:56:5f:bc:26:8e:06:1a:fd:19:42:5b:f7:
                    8d:90:ed:5d:51:9b:a9:35:f9:45:23:1f:79:0b:47:
                    a3:0d:98:be:87:95:9e:c8:03:c4:30:07:b0:aa:bc:
                    2f:85:4b:c7:da:e6:75:3b:9f:a2:7a:30:e3:c6:ee:
                    53:c5:88:ef:d5:74:75:0c:0b:3b:2e:e1:05:b9:64:
                    32:c4:91:a0:86:d4:0d:35:88:70:95:c9:73:0f:e1:
                    d5:36:37:5b:1c:4e:b0:4d:f3:47:a5:e1:b5:3b:fc:
                    3a:59:52:72:76:04:db:5a:22:7c:56:ac:5e:4f:e4:
                    8f:07:c3:56:df:48:95:79:48:91:ef:76:c6:df:b4:
                    27:2c:df:12:aa:5e:fb:dd:02:9e:c5:21:85:36:ba:
                    27:82:d1:e2:12:37:80:6d:21:24:b3:13:0b:57:d4:
                    81:04:fe:7a:d5:80:a3:61:d9:c2:48:05:91:45:05:
                    cf:2b:08:0f:75:45:85:64:88:a9:23:76:bd:ed:83:
                    1b:6f:53:b3:59:4c:7f:e4:2a:c7:83:6b:ad:d5:39:
                    73:01:7b:d3:94:c5:c7:92:c7:ed:ca:e2:2e:7b:0a:
                    b6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BC:77:5F:9A:68:7E:5C:0F:B8:EA:D3:B2:D5:CB:64:E8:65:D9:EF
            X509v3 Authority Key Identifier:
                keyid:69:D4:70:17:B5:15:EE:21:4B:28:42:0E:DB:ED:B3:01:5C:16:EE:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adRwF7UV7iFLKEIO2-2zAVwW7ik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:dc:f7:ca:fb:fb:d0:8f:81:8e:e2:16:17:54:b4:de:c0:74:
         d9:6f:a9:0b:e4:eb:e1:71:d6:82:64:34:d2:d6:6a:8d:fc:3b:
         8b:08:4f:8e:94:b9:63:ce:f5:85:2b:b3:6b:00:da:ea:96:08:
         08:93:c1:76:08:67:7e:70:52:74:44:d0:f1:71:77:a1:e5:57:
         91:54:95:fa:ed:99:b3:8c:80:f9:84:d3:84:cd:57:48:af:76:
         3f:a4:c1:8e:ef:c7:46:75:9f:aa:3a:ee:1d:21:91:84:13:ef:
         b2:80:50:f7:86:56:d0:72:c2:95:1a:fc:1a:fd:0a:f9:dc:76:
         71:57:59:cb:a5:c9:85:15:c9:bc:d0:2c:7a:49:ad:33:e3:22:
         d2:f1:dd:16:a2:ef:e4:c6:ac:29:59:79:a4:69:81:21:90:b0:
         63:18:c6:bc:2f:9b:e6:07:72:39:03:6b:96:4b:e8:62:7f:e1:
         4c:90:9f:d5:34:bd:5d:f3:86:30:e0:c2:75:9b:65:2c:27:ca:
         04:b4:f0:fd:fa:6a:9a:f0:27:0b:d2:c9:9e:f5:b0:c8:93:20:
         35:8c:d7:15:4b:bc:01:9d:6b:17:9b:37:9e:a0:38:c3:1e:73:
         24:da:f9:22:98:67:0e:93:02:87:e3:43:ed:1d:1d:f1:ec:77:
         e7:8f:47:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKeo0y2QmVJ3RDTq1jZpUMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZDQ3MDE3YjUxNWVlMjE0YjI4NDIwZWRiZWRiMzAxNWMx
NmVlMjkwHhcNMjUwNjA3MTMwMDM0WhcNMjUwNjA4MTMwMDM0WjAzMTEwLwYDVQQD
EyhkYWJjNzc1ZjlhNjg3ZTVjMGZiOGVhZDNiMmQ1Y2I2NGU4NjVkOWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOEDPrtpAcUiE0fazyy9VgecbZfD
Ogh/kKQkaWeSkdxWX7wmjgYa/RlCW/eNkO1dUZupNflFIx95C0ejDZi+h5WeyAPE
MAewqrwvhUvH2uZ1O5+iejDjxu5TxYjv1XR1DAs7LuEFuWQyxJGghtQNNYhwlclz
D+HVNjdbHE6wTfNHpeG1O/w6WVJydgTbWiJ8VqxeT+SPB8NW30iVeUiR73bG37Qn
LN8Sql773QKexSGFNrongtHiEjeAbSEksxMLV9SBBP561YCjYdnCSAWRRQXPKwgP
dUWFZIipI3a97YMbb1OzWUx/5CrHg2ut1TlzAXvTlMXHksftyuIuewq2BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNq8d1+aaH5cD7jq07LVy2ToZdnvMB8GA1UdIwQY
MBaAFGnUcBe1Fe4hSyhCDtvtswFcFu4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWRSd0Y3VVY3aUZMS0VJTzItMnpBVndXN2lrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC81MzdjZmMtMzcwYy00YjdiLTk4ZDQt
MjNiNGM5MzM1NmY4LzEvYWRSd0Y3VVY3aUZMS0VJTzItMnpBVndXN2lrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC81MzdjZmMtMzcwYy00YjdiLTk4ZDQtMjNiNGM5MzM1NmY4
LzEvYWRSd0Y3VVY3aUZMS0VJTzItMnpBVndXN2lrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9z3yvv7
0I+BjuIWF1S03sB02W+pC+Tr4XHWgmQ00tZqjfw7iwhPjpS5Y871hSuzawDa6pYI
CJPBdghnfnBSdETQ8XF3oeVXkVSV+u2Zs4yA+YTThM1XSK92P6TBju/HRnWfqjru
HSGRhBPvsoBQ94ZW0HLClRr8Gv0K+dx2cVdZy6XJhRXJvNAsekmtM+Mi0vHdFqLv
5MasKVl5pGmBIZCwYxjGvC+b5gdyOQNrlkvoYn/hTJCf1TS9XfOGMODCdZtlLCfK
BLTw/fpqmvAnC9LJnvWwyJMgNYzXFUu8AZ1rF5s3nqA4wx5zJNr5IphnDpMCh+ND
7R0d8ex3549HMA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:03:51 2025 by rpki-client