Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
File:                     5BCXLMRZVogEu0t5HXwTz7IoOIM.mft (raw, json)
Hash identifier:          jESlyCjCoXuX1QQh2QOlE7GExCK3T6li7krYc91C7GI=
Subject key identifier:   AD:D6:6C:A8:79:7B:3E:F4:C6:32:BE:1F:28:6E:B5:B7:17:CD:B9:C3
Authority key identifier: E4:10:97:2C:C4:59:56:88:04:BB:4B:79:1D:7C:13:CF:B2:28:38:83
Certificate issuer:       /CN=e410972cc459568804bb4b791d7c13cfb2283883
Certificate serial:       01976E1945768EB82E0E930ED94016762879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
Manifest number:          135E
Signing time:             Sat 14 Jun 2025 11:00:39 +0000
Manifest this update:     Sat 14 Jun 2025 11:00:39 +0000
Manifest next update:     Sun 15 Jun 2025 11:00:39 +0000
Files and hashes:         1: 5BCXLMRZVogEu0t5HXwTz7IoOIM.crl (hash: nDMXWyfLNzw/5NNpcB96mjjHDcLlh/0JRof//wfV8FU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:19:45:76:8e:b8:2e:0e:93:0e:d9:40:16:76:28:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e410972cc459568804bb4b791d7c13cfb2283883
        Validity
            Not Before: Jun 14 11:00:39 2025 GMT
            Not After : Jun 15 11:00:39 2025 GMT
        Subject: CN=add66ca8797b3ef4c632be1f286eb5b717cdb9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:46:8d:47:2a:12:6e:d9:44:a1:05:34:23:ef:
                    ed:cc:dd:3f:81:bb:3a:52:92:8e:d7:05:aa:61:a5:
                    bd:7f:13:e0:af:56:9e:51:29:12:a8:ab:e6:6e:83:
                    81:28:45:c9:39:c3:0d:0a:4f:cb:61:86:b5:91:bf:
                    60:63:5d:67:a9:15:89:e1:51:1d:df:35:bf:5b:f8:
                    1f:ee:be:ca:f4:ab:98:e4:1e:91:02:d7:79:54:0a:
                    7f:ab:69:b7:b1:63:75:ea:55:f1:d7:05:11:0a:98:
                    a4:ff:04:17:4d:02:37:f3:e4:8b:59:9f:c8:f4:3c:
                    9d:6a:5d:d8:e1:63:6d:9a:ad:71:e7:6e:4d:d5:4d:
                    18:10:78:4b:84:eb:2c:f0:42:a4:7a:d0:6e:e2:8f:
                    c3:86:48:64:5f:39:f7:fe:3e:54:18:85:f7:45:b9:
                    08:8b:9b:62:db:e9:bc:08:1e:01:74:c1:f7:a6:15:
                    0b:0a:6e:f4:15:e9:4b:2d:e4:fc:6e:20:4b:36:c5:
                    0a:7f:06:fc:e6:da:b2:f8:09:ba:0a:1e:0b:dd:3c:
                    9e:c6:bc:e5:a2:fa:48:05:3c:26:77:d7:e7:cc:16:
                    dc:9a:12:ab:dd:1d:6c:ae:12:45:8a:98:9d:72:f2:
                    29:45:d6:cf:75:7d:c1:1f:cb:ba:42:e3:d2:9a:df:
                    5b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D6:6C:A8:79:7B:3E:F4:C6:32:BE:1F:28:6E:B5:B7:17:CD:B9:C3
            X509v3 Authority Key Identifier:
                keyid:E4:10:97:2C:C4:59:56:88:04:BB:4B:79:1D:7C:13:CF:B2:28:38:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:76:59:ef:de:81:e4:e1:03:f6:35:bb:fa:8c:cb:a6:3c:b3:
         46:c1:b3:d0:c6:91:42:80:21:1d:74:30:0b:12:9e:f7:8c:52:
         0f:b7:24:84:dc:b6:c8:8b:9d:c3:23:ab:b8:1a:b7:11:e4:6f:
         24:f9:9c:09:91:c5:59:d4:e2:72:61:9a:5b:7b:8d:dd:34:3a:
         86:21:62:53:30:8f:2f:59:12:dc:e3:de:61:38:27:5e:d5:7b:
         9c:33:a8:06:46:a6:2d:cb:31:a6:0d:77:c6:92:97:d9:ef:a7:
         67:fd:62:a0:8f:af:c1:50:d8:e7:af:6b:16:c0:5b:76:78:56:
         e7:e4:7a:d9:bb:c1:c9:0c:26:48:8d:d5:96:ad:a2:4f:a2:26:
         ce:4b:6f:03:51:dd:f6:9e:f1:e9:7d:6b:bd:13:d0:4f:ac:fa:
         21:61:13:b6:1c:41:16:e1:7e:c0:34:35:d7:4b:00:37:95:8d:
         03:d5:1c:92:f9:af:e5:fe:68:f7:af:af:95:fc:87:dc:92:9b:
         de:22:6a:b5:a7:83:da:17:8a:74:e0:b6:1e:aa:af:23:6c:02:
         fe:ea:5b:d2:fc:1e:11:03:80:f1:8b:3c:fc:35:d7:da:bc:65:
         d9:7a:f7:8e:6d:68:8a:41:4f:99:19:4e:d8:a4:23:88:92:ad:
         c7:6e:05:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduGUV2jrguDpMO2UAWdih5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MTA5NzJjYzQ1OTU2ODgwNGJiNGI3OTFkN2MxM2NmYjIy
ODM4ODMwHhcNMjUwNjE0MTEwMDM5WhcNMjUwNjE1MTEwMDM5WjAzMTEwLwYDVQQD
EyhhZGQ2NmNhODc5N2IzZWY0YzYzMmJlMWYyODZlYjViNzE3Y2RiOWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskaNRyoSbtlEoQU0I+/tzN0/gbs6
UpKO1wWqYaW9fxPgr1aeUSkSqKvmboOBKEXJOcMNCk/LYYa1kb9gY11nqRWJ4VEd
3zW/W/gf7r7K9KuY5B6RAtd5VAp/q2m3sWN16lXx1wURCpik/wQXTQI38+SLWZ/I
9Dydal3Y4WNtmq1x525N1U0YEHhLhOss8EKketBu4o/DhkhkXzn3/j5UGIX3RbkI
i5ti2+m8CB4BdMH3phULCm70FelLLeT8biBLNsUKfwb85tqy+Am6Ch4L3Tyexrzl
ovpIBTwmd9fnzBbcmhKr3R1srhJFipidcvIpRdbPdX3BH8u6QuPSmt9bFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3WbKh5ez70xjK+HyhutbcXzbnDMB8GA1UdIwQY
MBaAFOQQlyzEWVaIBLtLeR18E8+yKDiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUJDWExNUlpWb2dFdTB0NUhYd1R6N0lvT0lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMDZlNjItZTU4NC00OTJhLWJmNDYt
ZjI3Y2VmNGJhMjI0LzEvNUJDWExNUlpWb2dFdTB0NUhYd1R6N0lvT0lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zMDZlNjItZTU4NC00OTJhLWJmNDYtZjI3Y2VmNGJhMjI0
LzEvNUJDWExNUlpWb2dFdTB0NUhYd1R6N0lvT0lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXZZ796B
5OED9jW7+ozLpjyzRsGz0MaRQoAhHXQwCxKe94xSD7ckhNy2yIudwyOruBq3EeRv
JPmcCZHFWdTicmGaW3uN3TQ6hiFiUzCPL1kS3OPeYTgnXtV7nDOoBkamLcsxpg13
xpKX2e+nZ/1ioI+vwVDY569rFsBbdnhW5+R62bvByQwmSI3Vlq2iT6ImzktvA1Hd
9p7x6X1rvRPQT6z6IWETthxBFuF+wDQ110sAN5WNA9Uckvmv5f5o96+vlfyH3JKb
3iJqtaeD2heKdOC2HqqvI2wC/upb0vweEQOA8Ys8/DXX2rxl2Xr3jm1oikFPmRlO
2KQjiJKtx24F9g==
-----END CERTIFICATE-----
Generated at Sat Jun 14 20:03:46 2025 by rpki-client