Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
File:                     1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft (raw, json)
Hash identifier:          vE+/vvqsP9VQ3AxmLKqqW2nHX5NYobeC2tpzDCmxUKQ=
Subject key identifier:   1C:A2:5A:43:5B:9B:21:27:FC:11:99:C4:42:AD:58:D0:27:4C:F9:B5
Authority key identifier: D4:18:1D:E1:B3:2B:7C:10:50:D0:B0:CA:6D:64:0D:46:3A:53:52:F4
Certificate issuer:       /CN=d4181de1b32b7c1050d0b0ca6d640d463a5352f4
Certificate serial:       01974E5869245615347DF23A7EB02031181D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
Manifest number:          05F5
Signing time:             Sun 08 Jun 2025 07:01:46 +0000
Manifest this update:     Sun 08 Jun 2025 07:01:46 +0000
Manifest next update:     Mon 09 Jun 2025 07:01:46 +0000
Files and hashes:         1: 1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl (hash: YgtqSBDD/LirQPmo4mxQdbdSYWCuVRcGe3b5DSX6ed0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:58:69:24:56:15:34:7d:f2:3a:7e:b0:20:31:18:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4181de1b32b7c1050d0b0ca6d640d463a5352f4
        Validity
            Not Before: Jun  8 07:01:46 2025 GMT
            Not After : Jun  9 07:01:46 2025 GMT
        Subject: CN=1ca25a435b9b2127fc1199c442ad58d0274cf9b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0f:71:31:60:e5:51:62:e4:e6:8b:a8:f6:97:
                    bb:59:db:91:5e:84:1e:27:86:6b:54:c8:c4:70:11:
                    cc:9b:0b:74:1d:c5:fe:50:dd:d8:26:e7:7e:f7:eb:
                    4f:f5:03:89:f1:ad:43:9a:aa:e5:b0:29:a1:a3:e4:
                    e6:3b:55:e5:ce:9a:96:b3:c9:1a:87:99:f1:06:85:
                    b6:1b:f0:be:3b:1b:cc:82:1d:c8:16:98:47:35:ff:
                    06:6a:da:fe:62:51:76:2f:23:bf:1e:1a:33:80:f5:
                    bc:1f:21:9c:6a:cd:e1:96:15:53:7a:1b:42:c3:29:
                    f6:61:89:fe:23:dd:dc:71:93:4b:1c:8d:98:84:6c:
                    d8:ac:b3:31:96:2c:f7:5d:34:da:e3:1e:01:01:38:
                    e0:5f:85:ad:ca:3c:e5:32:c4:6a:b5:18:13:51:a5:
                    da:1c:a8:60:eb:a9:f9:c7:2b:dc:1f:cd:bf:f1:c4:
                    3d:09:fc:55:cc:d2:bb:f9:8a:2a:25:29:d5:ab:7a:
                    8f:a7:2b:48:de:4c:c2:81:c3:74:e8:6a:91:b6:c6:
                    02:38:2b:64:63:9f:cf:2c:84:8b:0c:86:d9:c4:06:
                    13:f2:61:61:f7:bd:5e:e7:f4:10:b5:37:e7:96:0f:
                    3a:09:02:28:dc:05:ec:c0:61:94:e2:a3:b5:d8:f3:
                    96:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A2:5A:43:5B:9B:21:27:FC:11:99:C4:42:AD:58:D0:27:4C:F9:B5
            X509v3 Authority Key Identifier:
                keyid:D4:18:1D:E1:B3:2B:7C:10:50:D0:B0:CA:6D:64:0D:46:3A:53:52:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:e2:07:eb:8d:71:73:88:d9:4d:e0:4c:bd:bf:6e:93:ab:45:
         14:41:58:53:d6:3d:63:ef:8b:29:3f:cb:fb:db:79:8d:ae:70:
         a9:4e:3e:76:f9:ec:b3:16:f9:69:d9:d5:f0:7c:a4:a2:f0:fd:
         da:43:67:b7:f8:fe:04:0d:ba:86:51:69:a2:ee:a0:af:f7:68:
         8e:2f:58:ad:78:f8:53:62:1e:d8:b5:8e:61:5a:20:82:56:58:
         30:b8:c5:54:9f:72:32:02:a1:71:93:e1:cd:ec:08:b3:4e:47:
         aa:18:0d:87:fd:6d:bd:84:ab:94:7c:70:14:dd:83:a7:47:12:
         cf:b1:29:2b:f6:d6:3c:2a:d3:76:47:f0:1d:fd:ba:7d:0b:8b:
         c8:37:0f:22:21:71:06:0b:01:f9:11:75:d9:87:b2:24:a9:f8:
         df:5b:41:69:28:34:84:c1:0d:7d:f6:c0:9d:06:3b:00:95:a9:
         58:17:be:fa:e3:72:0e:2c:75:71:98:0e:e8:19:1a:1c:01:28:
         a9:5c:a3:ca:e1:93:30:10:4f:81:72:95:2d:54:4f:53:0b:2e:
         13:27:c7:d9:63:17:17:95:b1:6a:96:34:2c:2a:ff:e0:e7:54:
         c5:92:b4:c0:ca:76:1f:4e:e4:a4:ff:c2:ba:cf:bc:f5:02:20:
         8e:b7:a7:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOWGkkVhU0ffI6frAgMRgdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MTgxZGUxYjMyYjdjMTA1MGQwYjBjYTZkNjQwZDQ2M2E1
MzUyZjQwHhcNMjUwNjA4MDcwMTQ2WhcNMjUwNjA5MDcwMTQ2WjAzMTEwLwYDVQQD
EygxY2EyNWE0MzViOWIyMTI3ZmMxMTk5YzQ0MmFkNThkMDI3NGNmOWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA9xMWDlUWLk5ouo9pe7WduRXoQe
J4ZrVMjEcBHMmwt0HcX+UN3YJud+9+tP9QOJ8a1DmqrlsCmho+TmO1XlzpqWs8ka
h5nxBoW2G/C+OxvMgh3IFphHNf8Gatr+YlF2LyO/HhozgPW8HyGcas3hlhVTehtC
wyn2YYn+I93ccZNLHI2YhGzYrLMxliz3XTTa4x4BATjgX4WtyjzlMsRqtRgTUaXa
HKhg66n5xyvcH82/8cQ9CfxVzNK7+YoqJSnVq3qPpytI3kzCgcN06GqRtsYCOCtk
Y5/PLISLDIbZxAYT8mFh971e5/QQtTfnlg86CQIo3AXswGGU4qO12POWvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByiWkNbmyEn/BGZxEKtWNAnTPm1MB8GA1UdIwQY
MBaAFNQYHeGzK3wQUNCwym1kDUY6U1L0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUJnZDRiTXJmQkJRMExES2JXUU5SanBUVXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zMThhMjYtNTJmNS00ZGMxLWFhNDct
YWYxZTJkZjViZGMzLzEvMUJnZDRiTXJmQkJRMExES2JXUU5SanBUVXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zMThhMjYtNTJmNS00ZGMxLWFhNDctYWYxZTJkZjViZGMz
LzEvMUJnZDRiTXJmQkJRMExES2JXUU5SanBUVXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACuIH641x
c4jZTeBMvb9uk6tFFEFYU9Y9Y++LKT/L+9t5ja5wqU4+dvnssxb5adnV8HykovD9
2kNnt/j+BA26hlFpou6gr/doji9YrXj4U2Ie2LWOYVogglZYMLjFVJ9yMgKhcZPh
zewIs05HqhgNh/1tvYSrlHxwFN2Dp0cSz7EpK/bWPCrTdkfwHf26fQuLyDcPIiFx
BgsB+RF12YeyJKn431tBaSg0hMENffbAnQY7AJWpWBe++uNyDix1cZgO6BkaHAEo
qVyjyuGTMBBPgXKVLVRPUwsuEyfH2WMXF5WxapY0LCr/4OdUxZK0wMp2H07kpP/C
us+89QIgjrenfA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:45:15 2025 by rpki-client