Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
File:                     9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft (raw, json)
Hash identifier:          QldmH1scr7WGBUXieIu7viVzDHr3j/m1Og/ZrrnsekQ=
Subject key identifier:   20:54:60:0C:A0:72:92:FC:81:1F:5E:5A:8E:7C:8F:4F:D6:19:DD:EA
Authority key identifier: F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
Certificate issuer:       /CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Certificate serial:       01975D260016341C21503812E118514E1AD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
Manifest number:          1583
Signing time:             Wed 11 Jun 2025 04:01:00 +0000
Manifest this update:     Wed 11 Jun 2025 04:01:00 +0000
Manifest next update:     Thu 12 Jun 2025 04:01:00 +0000
Files and hashes:         1: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl (hash: hiUuGCL9B7V5DQmiZ51UvsSjZmdRIL3nK32qVuucNa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 04:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:26:00:16:34:1c:21:50:38:12:e1:18:51:4e:1a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
        Validity
            Not Before: Jun 11 04:01:00 2025 GMT
            Not After : Jun 12 04:01:00 2025 GMT
        Subject: CN=2054600ca07292fc811f5e5a8e7c8f4fd619ddea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c4:e3:cd:46:4d:1c:8b:c9:e9:0d:50:7c:ea:
                    62:07:b2:a3:ac:c9:ec:3c:c7:7b:ba:2a:e8:c3:fc:
                    2a:20:af:bb:1c:aa:ec:02:21:bb:0e:55:87:0a:5f:
                    04:41:04:57:6f:ba:68:47:46:91:d6:12:1d:21:08:
                    f1:12:26:b7:f7:20:b7:dc:33:47:a3:12:63:48:a5:
                    b8:9e:07:bb:a9:41:ea:60:9b:77:c4:8b:1f:df:43:
                    6a:dc:aa:1a:a1:8b:65:a0:ad:99:26:7d:2a:ae:b6:
                    2a:f0:ac:49:7e:00:f2:2a:00:bf:db:d8:4e:db:06:
                    9d:16:83:9a:3c:35:3b:be:0f:fb:97:a2:4a:30:46:
                    6d:e9:40:62:03:71:70:71:5a:fd:4f:ee:6e:27:15:
                    f0:c8:5c:a9:67:1b:3c:5d:f7:54:93:fa:c0:15:38:
                    c0:39:73:1e:b5:92:13:cd:43:79:f5:75:6c:69:cf:
                    a2:12:d7:37:fd:93:00:4a:7e:f9:6e:25:8c:9f:b3:
                    9b:cb:6c:47:27:f9:5a:17:e3:a7:9d:da:f7:00:64:
                    27:68:5a:e0:9b:58:9f:66:b2:3c:5f:2e:94:8c:67:
                    d8:9d:9e:3d:3f:01:5b:ab:c0:7c:99:fc:cc:74:44:
                    a8:78:be:83:e7:8f:35:d5:36:86:bb:b8:94:3a:54:
                    08:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:54:60:0C:A0:72:92:FC:81:1F:5E:5A:8E:7C:8F:4F:D6:19:DD:EA
            X509v3 Authority Key Identifier:
                keyid:F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e1:84:d1:ee:df:1b:1e:b8:c9:8f:66:f3:46:93:da:6a:e4:
         be:e6:03:9f:90:e9:25:be:06:55:ef:83:ba:fd:23:29:35:d8:
         c2:c6:04:e9:f8:57:47:81:f9:75:7a:46:ef:8e:75:4e:c1:70:
         91:18:9a:7c:d6:ea:91:5a:f4:5e:5c:8b:ec:ae:74:d6:a6:35:
         0d:53:bd:82:8a:0f:bb:39:84:cf:86:86:9d:9f:7e:63:05:16:
         14:02:83:20:6d:5e:1b:ce:16:1e:71:2c:b2:60:8a:c9:10:41:
         c7:54:9e:dc:12:5d:84:7b:f2:e1:51:55:d0:82:ba:22:38:f3:
         c4:61:74:cc:f6:fd:d1:3c:5d:fb:b7:70:76:e9:cc:cc:b2:6d:
         d2:19:25:b2:f2:44:cb:1e:2a:e9:ad:45:f6:36:70:d8:92:52:
         28:de:0c:c3:9a:83:33:ab:ae:4a:49:41:25:84:9a:dd:b4:c1:
         da:ad:8a:d4:f8:fe:05:45:4e:53:ee:21:ac:27:fd:af:d5:84:
         67:92:0a:01:50:6f:fb:f1:5d:12:b4:9f:76:6a:e5:f6:00:8a:
         a9:4e:6e:cd:31:00:48:08:8b:8b:d9:c9:ed:76:d6:2b:d0:32:
         f6:bf:b2:51:82:70:d6:15:c6:f1:4a:1f:eb:80:83:57:45:f0:
         60:1e:b8:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZddJgAWNBwhUDgS4RhRThrUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NWM2ZGNkOWZkYmQyNGMxNmU1MGFlMTU1MWVlOGY0M2Fj
OGJmZDQwHhcNMjUwNjExMDQwMTAwWhcNMjUwNjEyMDQwMTAwWjAzMTEwLwYDVQQD
EygyMDU0NjAwY2EwNzI5MmZjODExZjVlNWE4ZTdjOGY0ZmQ2MTlkZGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMTjzUZNHIvJ6Q1QfOpiB7KjrMns
PMd7uirow/wqIK+7HKrsAiG7DlWHCl8EQQRXb7poR0aR1hIdIQjxEia39yC33DNH
oxJjSKW4nge7qUHqYJt3xIsf30Nq3KoaoYtloK2ZJn0qrrYq8KxJfgDyKgC/29hO
2wadFoOaPDU7vg/7l6JKMEZt6UBiA3FwcVr9T+5uJxXwyFypZxs8XfdUk/rAFTjA
OXMetZITzUN59XVsac+iEtc3/ZMASn75biWMn7Oby2xHJ/laF+Onndr3AGQnaFrg
m1ifZrI8Xy6UjGfYnZ49PwFbq8B8mfzMdESoeL6D54811TaGu7iUOlQIkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBUYAygcpL8gR9eWo58j0/WGd3qMB8GA1UdIwQY
MBaAFPZcbc2f29JMFuUK4VUe6PQ6yL/UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWx4dHpaX2Iwa3dXNVFyaFZSN285RHJJdjlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NWE5M2UtMzNlZi00NzYwLWJkNGUt
MTk3MzYzNTE2N2IyLzEvOWx4dHpaX2Iwa3dXNVFyaFZSN285RHJJdjlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NWE5M2UtMzNlZi00NzYwLWJkNGUtMTk3MzYzNTE2N2Iy
LzEvOWx4dHpaX2Iwa3dXNVFyaFZSN285RHJJdjlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauGE0e7f
Gx64yY9m80aT2mrkvuYDn5DpJb4GVe+Duv0jKTXYwsYE6fhXR4H5dXpG7451TsFw
kRiafNbqkVr0XlyL7K501qY1DVO9gooPuzmEz4aGnZ9+YwUWFAKDIG1eG84WHnEs
smCKyRBBx1Se3BJdhHvy4VFV0IK6IjjzxGF0zPb90Txd+7dwdunMzLJt0hklsvJE
yx4q6a1F9jZw2JJSKN4Mw5qDM6uuSklBJYSa3bTB2q2K1Pj+BUVOU+4hrCf9r9WE
Z5IKAVBv+/FdErSfdmrl9gCKqU5uzTEASAiLi9nJ7XbWK9Ay9r+yUYJw1hXG8Uof
64CDV0XwYB648g==
-----END CERTIFICATE-----
Generated at Wed Jun 11 12:49:36 2025 by rpki-client