Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
File:                     4uQkJWNHPN8ULMt8zjwsw26j1GU.mft (raw, json)
Hash identifier:          b4xdAJBzdVH0/FO2FeR1C/nb1ioA2yzCXP1MeaVdVA8=
Subject key identifier:   A5:AA:A3:8F:85:C0:F6:01:1D:96:5C:5A:F8:C1:52:68:98:A8:CC:0A
Authority key identifier: E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65
Certificate issuer:       /CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
Certificate serial:       0197499EE5D3C54764821A4B315DB8AC4676
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
Manifest number:          0B7B
Signing time:             Sat 07 Jun 2025 09:00:39 +0000
Manifest this update:     Sat 07 Jun 2025 09:00:39 +0000
Manifest next update:     Sun 08 Jun 2025 09:00:39 +0000
Files and hashes:         1: 4uQkJWNHPN8ULMt8zjwsw26j1GU.crl (hash: eKq6eTOeiQsINly8R6I7MNrDaotQZetSZGfSViQUkr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9e:e5:d3:c5:47:64:82:1a:4b:31:5d:b8:ac:46:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
        Validity
            Not Before: Jun  7 09:00:39 2025 GMT
            Not After : Jun  8 09:00:39 2025 GMT
        Subject: CN=a5aaa38f85c0f6011d965c5af8c1526898a8cc0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:48:72:9d:b7:78:85:5c:e9:40:14:4a:6e:25:
                    9a:a2:e2:e4:83:e3:47:91:d7:0e:c5:b8:16:6c:49:
                    67:cb:1e:c9:42:f1:6b:7e:5e:3f:0c:99:7f:7b:26:
                    d5:2e:ee:76:ae:67:87:83:ad:7a:3b:58:87:74:fd:
                    0e:9b:32:c2:04:8e:37:60:4e:a9:37:66:c5:00:0b:
                    27:9b:a1:fd:38:fb:4e:50:de:8e:6c:11:a3:4f:d8:
                    3e:b8:cd:44:3d:9c:37:bf:4c:9b:76:1a:a0:3a:78:
                    54:86:b7:cc:91:09:63:54:52:35:dc:bf:ff:37:85:
                    f9:66:5a:e6:50:70:fc:f5:c2:ff:cb:70:4e:4e:e1:
                    72:f5:9a:0b:11:2e:37:08:99:62:b3:a6:12:86:b1:
                    ef:d4:32:a5:38:1a:09:24:3a:9d:53:19:92:34:8c:
                    0b:85:e4:aa:bd:0a:96:35:34:4d:9f:e5:0b:0e:8d:
                    9d:3d:d6:5e:a0:70:73:63:b4:d7:27:10:6c:2e:3d:
                    5d:28:23:8c:d0:88:0e:50:52:60:82:86:32:7d:94:
                    ec:09:0f:7a:d0:bc:de:ee:7f:c1:ad:24:13:34:4e:
                    57:4a:69:0f:fb:ee:ae:15:d2:34:0f:e7:99:36:b7:
                    ae:df:d2:9b:2b:e7:db:3a:e7:9e:15:35:1b:af:fb:
                    f3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AA:A3:8F:85:C0:F6:01:1D:96:5C:5A:F8:C1:52:68:98:A8:CC:0A
            X509v3 Authority Key Identifier:
                keyid:E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d9:03:35:3f:d1:d3:d0:b8:50:dc:85:9b:7d:44:64:79:ac:
         30:66:b1:81:65:e7:2c:3b:aa:b4:51:32:86:73:d2:25:d3:13:
         2f:55:e0:b6:d5:71:58:2b:09:96:24:74:d4:a4:d8:f0:3c:28:
         aa:b2:31:fe:ea:a0:61:93:88:1d:f1:af:ab:35:59:5b:3a:b8:
         6e:75:69:ba:70:9e:c6:58:7a:47:65:87:29:55:3f:c1:35:67:
         f3:ad:f0:4d:de:73:d7:d6:ca:2d:83:45:2d:ef:b7:a5:88:9c:
         ab:8d:65:d1:a6:e5:65:27:92:8d:05:32:26:7d:b5:23:79:6a:
         c0:87:00:21:5c:96:8a:f8:5a:a7:e7:20:c2:db:df:2a:a8:a9:
         88:52:96:0f:d0:b7:20:6e:8a:04:0a:a6:04:9f:8c:22:5f:64:
         d3:c9:76:6b:9a:c2:92:06:b2:7f:0b:9b:66:7c:59:66:d7:75:
         60:b1:1d:64:be:bb:54:f0:bb:7d:f9:11:02:d1:a1:86:4b:91:
         dc:b5:d2:8d:b3:ab:a6:0d:3c:72:e1:c3:7a:1e:3e:91:ab:6f:
         57:17:98:5c:bb:e1:12:4b:96:38:63:df:a1:93:f2:64:d9:e1:
         97:a1:06:11:76:63:2f:0c:8c:fe:fb:0f:e1:41:94:4a:74:60:
         10:11:30:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJnuXTxUdkghpLMV24rEZ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZTQyNDI1NjM0NzNjZGYxNDJjY2I3Y2NlM2MyY2MzNmVh
M2Q0NjUwHhcNMjUwNjA3MDkwMDM5WhcNMjUwNjA4MDkwMDM5WjAzMTEwLwYDVQQD
EyhhNWFhYTM4Zjg1YzBmNjAxMWQ5NjVjNWFmOGMxNTI2ODk4YThjYzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0hynbd4hVzpQBRKbiWaouLkg+NH
kdcOxbgWbElnyx7JQvFrfl4/DJl/eybVLu52rmeHg616O1iHdP0OmzLCBI43YE6p
N2bFAAsnm6H9OPtOUN6ObBGjT9g+uM1EPZw3v0ybdhqgOnhUhrfMkQljVFI13L//
N4X5ZlrmUHD89cL/y3BOTuFy9ZoLES43CJlis6YShrHv1DKlOBoJJDqdUxmSNIwL
heSqvQqWNTRNn+ULDo2dPdZeoHBzY7TXJxBsLj1dKCOM0IgOUFJggoYyfZTsCQ96
0Lze7n/BrSQTNE5XSmkP++6uFdI0D+eZNreu39KbK+fbOueeFTUbr/vzswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWqo4+FwPYBHZZcWvjBUmiYqMwKMB8GA1UdIwQY
MBaAFOLkJCVjRzzfFCzLfM48LMNuo9RlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVRa0pXTkhQTjhVTE10OHpqd3N3MjZqMUdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MGZiNzgtNDE4OS00OTdkLWIwNmIt
OGU3YjcwOWRhNjUzLzEvNHVRa0pXTkhQTjhVTE10OHpqd3N3MjZqMUdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MGZiNzgtNDE4OS00OTdkLWIwNmItOGU3YjcwOWRhNjUz
LzEvNHVRa0pXTkhQTjhVTE10OHpqd3N3MjZqMUdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtkDNT/R
09C4UNyFm31EZHmsMGaxgWXnLDuqtFEyhnPSJdMTL1XgttVxWCsJliR01KTY8Dwo
qrIx/uqgYZOIHfGvqzVZWzq4bnVpunCexlh6R2WHKVU/wTVn863wTd5z19bKLYNF
Le+3pYicq41l0ablZSeSjQUyJn21I3lqwIcAIVyWivhap+cgwtvfKqipiFKWD9C3
IG6KBAqmBJ+MIl9k08l2a5rCkgayfwubZnxZZtd1YLEdZL67VPC7ffkRAtGhhkuR
3LXSjbOrpg08cuHDeh4+katvVxeYXLvhEkuWOGPfoZPyZNnhl6EGEXZjLwyM/vsP
4UGUSnRgEBEwcw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:19:33 2025 by rpki-client