Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
File:                     uOssmbjKaFoqU4WIFB2xxLZB03Y.mft (raw, json)
Hash identifier:          zCjEdvKuykjXS2iZaNxRk0hMhAV/pdAO73AS8ps4dOM=
Subject key identifier:   E3:B2:AE:E7:4C:A5:97:DE:12:31:6D:70:DA:4A:E7:1E:36:87:A4:83
Authority key identifier: B8:EB:2C:99:B8:CA:68:5A:2A:53:85:88:14:1D:B1:C4:B6:41:D3:76
Certificate issuer:       /CN=b8eb2c99b8ca685a2a538588141db1c4b641d376
Certificate serial:       01976D3E49A63259B82A9D17FFBBD175B65F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
Manifest number:          158C
Signing time:             Sat 14 Jun 2025 07:01:27 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:27 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:27 +0000
Files and hashes:         1: uOssmbjKaFoqU4WIFB2xxLZB03Y.crl (hash: SpodRoorWLscjsNsS7LIMueE/VSGDpfpRmEPJLCOm8w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:49:a6:32:59:b8:2a:9d:17:ff:bb:d1:75:b6:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8eb2c99b8ca685a2a538588141db1c4b641d376
        Validity
            Not Before: Jun 14 07:01:27 2025 GMT
            Not After : Jun 15 07:01:27 2025 GMT
        Subject: CN=e3b2aee74ca597de12316d70da4ae71e3687a483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0c:85:b4:96:a1:bf:e1:e2:cf:18:aa:f6:37:
                    7d:65:7b:cf:b4:e6:1d:16:48:f0:b3:8d:07:4e:d8:
                    a6:97:a0:b7:a6:8b:ef:a1:8f:5e:25:9d:23:01:2d:
                    fa:69:f5:49:d4:1e:ce:f5:a3:29:c7:5c:75:e2:bd:
                    35:30:33:0c:5c:8e:08:52:b0:36:17:47:eb:dc:71:
                    e4:0d:d0:dc:83:ef:ec:73:49:b2:e2:df:46:1e:3a:
                    33:37:d2:4a:53:8c:18:af:fd:de:df:d0:99:05:68:
                    5f:14:3c:e7:0a:b8:fa:c2:3e:81:44:79:53:52:19:
                    3d:7b:27:67:dd:44:74:21:a1:83:16:87:ec:8b:80:
                    0e:a6:2b:86:8c:35:1c:df:71:92:e0:99:cc:79:99:
                    33:da:78:cb:5d:86:a5:d3:70:85:4a:67:b3:d6:9b:
                    fa:4d:ed:e3:69:ea:02:4a:c3:c5:b4:bd:9f:44:25:
                    78:22:92:a4:28:b6:90:2b:91:43:df:fe:3d:52:98:
                    0b:05:e5:a9:b8:6f:1f:99:33:87:f1:17:08:e4:d1:
                    ed:1c:8c:6d:5a:67:5d:7e:cd:b1:36:d1:fa:a0:ef:
                    b4:61:66:4c:63:5c:11:0d:e5:ff:ac:2a:54:17:13:
                    24:e5:dc:dd:d1:53:0c:c8:28:16:c3:3c:bf:40:06:
                    56:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B2:AE:E7:4C:A5:97:DE:12:31:6D:70:DA:4A:E7:1E:36:87:A4:83
            X509v3 Authority Key Identifier:
                keyid:B8:EB:2C:99:B8:CA:68:5A:2A:53:85:88:14:1D:B1:C4:B6:41:D3:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b8:7a:41:71:50:67:aa:86:60:7a:8b:f9:5c:11:90:08:c1:
         82:9c:c2:d8:a2:b3:d1:ef:04:4e:9c:01:22:5c:6d:a9:ea:99:
         9f:74:c5:02:b7:ba:13:a2:2a:8a:79:39:52:bd:79:4f:80:a6:
         de:cf:cb:31:be:48:e2:95:09:89:78:13:cd:18:fe:a1:4d:9f:
         40:47:c1:b7:e5:4a:09:3c:b3:32:95:d0:64:4c:7b:d7:38:c4:
         80:04:5d:7e:6d:eb:0c:6f:df:74:43:d3:47:9a:aa:25:df:8b:
         60:ce:f2:48:e7:0e:fc:91:dd:48:c3:6d:e9:a7:68:f1:0a:4c:
         ea:c9:b2:44:60:2a:48:c0:b5:6f:07:a9:77:97:bb:bd:d5:f8:
         66:c9:eb:cb:54:93:66:6c:8d:bd:4c:ea:60:e3:3b:13:6a:ba:
         2b:51:be:b7:cf:02:98:ad:f0:cc:a6:11:88:55:1b:c9:1b:d4:
         65:bc:01:f4:cb:6f:d7:9a:6d:ca:c7:c2:fc:21:31:7d:6c:90:
         df:ad:44:93:45:3b:77:1f:e1:cd:96:7e:4b:3f:58:84:21:53:
         b7:95:91:40:df:89:1c:a7:a1:63:b9:21:16:4b:ba:38:53:2f:
         af:02:89:2b:cf:33:2c:bc:da:81:be:9b:ac:91:77:b0:09:77:
         8e:62:7a:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPkmmMlm4Kp0X/7vRdbZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZWIyYzk5YjhjYTY4NWEyYTUzODU4ODE0MWRiMWM0YjY0
MWQzNzYwHhcNMjUwNjE0MDcwMTI3WhcNMjUwNjE1MDcwMTI3WjAzMTEwLwYDVQQD
EyhlM2IyYWVlNzRjYTU5N2RlMTIzMTZkNzBkYTRhZTcxZTM2ODdhNDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgyFtJahv+Hizxiq9jd9ZXvPtOYd
Fkjws40HTtiml6C3povvoY9eJZ0jAS36afVJ1B7O9aMpx1x14r01MDMMXI4IUrA2
F0fr3HHkDdDcg+/sc0my4t9GHjozN9JKU4wYr/3e39CZBWhfFDznCrj6wj6BRHlT
Uhk9eydn3UR0IaGDFofsi4AOpiuGjDUc33GS4JnMeZkz2njLXYal03CFSmez1pv6
Te3jaeoCSsPFtL2fRCV4IpKkKLaQK5FD3/49UpgLBeWpuG8fmTOH8RcI5NHtHIxt
Wmddfs2xNtH6oO+0YWZMY1wRDeX/rCpUFxMk5dzd0VMMyCgWwzy/QAZW9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOyrudMpZfeEjFtcNpK5x42h6SDMB8GA1UdIwQY
MBaAFLjrLJm4ymhaKlOFiBQdscS2QdN2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU9zc21iakthRm9xVTRXSUZCMnh4TFpCMDNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC80NTc1MzMtNjkwNS00ODQwLTg4M2Mt
YWI2ZDBjMjEzZmRjLzEvdU9zc21iakthRm9xVTRXSUZCMnh4TFpCMDNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC80NTc1MzMtNjkwNS00ODQwLTg4M2MtYWI2ZDBjMjEzZmRj
LzEvdU9zc21iakthRm9xVTRXSUZCMnh4TFpCMDNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrh6QXFQ
Z6qGYHqL+VwRkAjBgpzC2KKz0e8ETpwBIlxtqeqZn3TFAre6E6Iqink5Ur15T4Cm
3s/LMb5I4pUJiXgTzRj+oU2fQEfBt+VKCTyzMpXQZEx71zjEgARdfm3rDG/fdEPT
R5qqJd+LYM7ySOcO/JHdSMNt6ado8QpM6smyRGAqSMC1bwepd5e7vdX4Zsnry1ST
ZmyNvUzqYOM7E2q6K1G+t88CmK3wzKYRiFUbyRvUZbwB9Mtv15ptysfC/CExfWyQ
361Ek0U7dx/hzZZ+Sz9YhCFTt5WRQN+JHKehY7khFku6OFMvrwKJK88zLLzagb6b
rJF3sAl3jmJ6Dg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 08:39:05 2025 by rpki-client