Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
File:                     dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft (raw, json)
Hash identifier:          VlEjgwKiCjDipAXlOzEjpzUnFupZvkXzK2dSbUoGGfU=
Subject key identifier:   58:00:A7:61:41:5F:9D:6C:38:30:3D:D5:06:3D:AD:FE:5D:66:4C:67
Authority key identifier: 75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
Certificate issuer:       /CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Certificate serial:       01974E20810C7C062A55F9EF2632045B9A24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
Manifest number:          09A5
Signing time:             Sun 08 Jun 2025 06:00:42 +0000
Manifest this update:     Sun 08 Jun 2025 06:00:42 +0000
Manifest next update:     Mon 09 Jun 2025 06:00:42 +0000
Files and hashes:         1: dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl (hash: 5288Bi7Yf1SkX0OdfQ+molAwo+oL4bQdRd6cMc6yHWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:20:81:0c:7c:06:2a:55:f9:ef:26:32:04:5b:9a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
        Validity
            Not Before: Jun  8 06:00:42 2025 GMT
            Not After : Jun  9 06:00:42 2025 GMT
        Subject: CN=5800a761415f9d6c38303dd5063dadfe5d664c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:04:7e:8a:56:41:49:47:48:be:74:fd:17:70:
                    08:cf:bc:17:c8:e0:df:7e:6e:3e:0e:04:ff:6c:e9:
                    f7:ad:d5:24:11:e2:b1:86:a4:e2:dd:68:0b:cd:ad:
                    07:9d:94:d8:3a:a2:49:de:11:d4:63:e8:34:99:d5:
                    4c:0e:bf:3a:31:da:01:92:cd:69:5e:ff:22:27:94:
                    44:14:25:a7:cc:10:33:1a:06:29:7d:57:21:39:d6:
                    98:7f:7c:08:aa:2b:c2:9c:d7:92:92:9a:66:ae:5e:
                    e1:48:ad:d1:0b:08:5a:ae:a0:e5:bd:c7:9a:a3:43:
                    de:92:d5:55:ae:7e:7b:c3:bf:05:8b:f3:06:0f:83:
                    41:d7:56:2f:e4:33:e0:96:f7:12:e4:49:37:02:8d:
                    f7:11:f5:ab:d3:78:a7:01:9c:3d:6e:4d:e5:c7:e1:
                    43:c2:15:e7:ec:ca:4a:a4:08:c8:b8:85:87:db:9d:
                    12:ed:37:26:36:2b:94:e2:36:89:bc:03:6e:25:e8:
                    bd:d7:6a:df:05:4d:17:73:32:46:35:e2:69:a5:65:
                    89:4f:cb:43:52:0b:13:c5:8e:b9:3d:ba:77:6a:1d:
                    b3:cc:c5:1d:3c:f0:0a:cb:9b:b8:92:1d:ae:ba:47:
                    21:65:7e:79:00:90:89:02:e3:d5:b4:84:4e:3c:ce:
                    62:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:00:A7:61:41:5F:9D:6C:38:30:3D:D5:06:3D:AD:FE:5D:66:4C:67
            X509v3 Authority Key Identifier:
                keyid:75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:6c:ff:50:84:53:e4:44:80:62:f1:ed:00:52:96:d0:7f:c6:
         85:42:70:5f:8a:6c:c9:e4:10:37:a2:f1:bb:e6:61:13:fc:c7:
         0f:ac:02:67:54:64:9b:27:93:33:a9:f0:2b:76:9b:da:6e:7e:
         16:2b:3b:ee:75:27:40:cb:6c:f4:fa:ef:34:2a:83:1b:f7:dd:
         33:0e:2f:65:46:4f:0b:08:1f:6a:35:76:60:e3:bb:99:d0:37:
         72:33:2f:a4:3c:bc:8b:d1:0a:81:d3:ee:d9:3e:c6:04:fc:1b:
         fc:98:5a:44:5c:17:56:e6:7e:af:28:82:88:99:ee:c0:c6:ce:
         a7:29:58:1e:a7:b4:c7:7c:9a:0e:b8:d1:2b:5e:fe:eb:65:ae:
         5d:aa:48:34:b3:da:c3:2e:25:06:56:87:5f:cd:f1:3b:d5:17:
         e9:bc:88:94:e1:be:15:5a:49:10:d9:83:c0:ef:0c:44:7a:57:
         94:59:39:71:5e:45:20:98:fd:68:86:a2:ef:05:91:bd:fb:af:
         ee:20:2f:c4:f1:73:d1:99:29:9c:04:6d:b7:08:b5:9c:8e:13:
         30:31:06:a1:39:20:19:7b:2f:17:96:9f:ca:4c:77:56:89:f6:
         a1:08:f8:40:96:c9:43:13:11:20:fe:60:f7:9d:ee:63:2d:2d:
         a7:5a:bc:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOIIEMfAYqVfnvJjIEW5okMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1OWFhYTM2MTUwZWUxNTVjM2I1MWFkOWM3MDdmNmM0M2Jm
MmJlNjMwHhcNMjUwNjA4MDYwMDQyWhcNMjUwNjA5MDYwMDQyWjAzMTEwLwYDVQQD
Eyg1ODAwYTc2MTQxNWY5ZDZjMzgzMDNkZDUwNjNkYWRmZTVkNjY0YzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugR+ilZBSUdIvnT9F3AIz7wXyODf
fm4+DgT/bOn3rdUkEeKxhqTi3WgLza0HnZTYOqJJ3hHUY+g0mdVMDr86MdoBks1p
Xv8iJ5REFCWnzBAzGgYpfVchOdaYf3wIqivCnNeSkppmrl7hSK3RCwharqDlvcea
o0PektVVrn57w78Fi/MGD4NB11Yv5DPglvcS5Ek3Ao33EfWr03inAZw9bk3lx+FD
whXn7MpKpAjIuIWH250S7TcmNiuU4jaJvANuJei912rfBU0XczJGNeJppWWJT8tD
UgsTxY65Pbp3ah2zzMUdPPAKy5u4kh2uukchZX55AJCJAuPVtIROPM5ixQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgAp2FBX51sODA91QY9rf5dZkxnMB8GA1UdIwQY
MBaAFHWaqjYVDuFVw7Ua2ccH9sQ78r5jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFpxcU5oVU80VlhEdFJyWnh3ZjJ4RHZ5dm1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mMmFmZGYtZTNjYy00OTM5LWFlNGUt
NzNkMTBkNWI5ZmVjLzEvZFpxcU5oVU80VlhEdFJyWnh3ZjJ4RHZ5dm1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9mMmFmZGYtZTNjYy00OTM5LWFlNGUtNzNkMTBkNWI5ZmVj
LzEvZFpxcU5oVU80VlhEdFJyWnh3ZjJ4RHZ5dm1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWz/UIRT
5ESAYvHtAFKW0H/GhUJwX4psyeQQN6Lxu+ZhE/zHD6wCZ1RkmyeTM6nwK3ab2m5+
Fis77nUnQMts9PrvNCqDG/fdMw4vZUZPCwgfajV2YOO7mdA3cjMvpDy8i9EKgdPu
2T7GBPwb/JhaRFwXVuZ+ryiCiJnuwMbOpylYHqe0x3yaDrjRK17+62WuXapINLPa
wy4lBlaHX83xO9UX6byIlOG+FVpJENmDwO8MRHpXlFk5cV5FIJj9aIai7wWRvfuv
7iAvxPFz0ZkpnARttwi1nI4TMDEGoTkgGXsvF5afykx3Von2oQj4QJbJQxMRIP5g
953uYy0tp1q8jQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:04:26 2025 by rpki-client