Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
File:                     i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft (raw, json)
Hash identifier:          qpKRf9ILp0aqvZPp7Xg/Us8RwSDH1vUsxZMkkIYwTBY=
Subject key identifier:   F6:FD:61:42:EB:54:48:5D:2D:11:71:62:DF:0A:F9:EE:D3:80:13:88
Authority key identifier: 8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0
Certificate issuer:       /CN=8b995951fd027fc739b04513b8f8d6bc678418c0
Certificate serial:       0197477961EA21B3CAA4548C3B1A62D3E1E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
Manifest number:          13C8
Signing time:             Fri 06 Jun 2025 23:00:26 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:26 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:26 +0000
Files and hashes:         1: i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl (hash: OX07bT/kS0cNe4JZxcl8SfmoxVJHSGB95dnLzLSfyGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:61:ea:21:b3:ca:a4:54:8c:3b:1a:62:d3:e1:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b995951fd027fc739b04513b8f8d6bc678418c0
        Validity
            Not Before: Jun  6 23:00:26 2025 GMT
            Not After : Jun  7 23:00:26 2025 GMT
        Subject: CN=f6fd6142eb54485d2d117162df0af9eed3801388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a5:7d:33:aa:24:81:cf:9f:74:18:23:6c:7d:
                    c0:d5:00:73:46:04:cf:a6:90:61:bd:02:5b:d2:df:
                    b1:18:98:29:52:3d:ee:ad:21:bb:66:1d:61:0b:71:
                    e8:62:01:94:e7:aa:c8:62:88:d4:eb:60:67:54:4a:
                    9a:7a:7b:4a:9d:17:70:dd:56:a6:a5:bd:10:ec:d4:
                    b1:f9:49:61:f7:63:b5:1a:a9:f3:53:14:5b:5b:b3:
                    c7:0c:76:38:f9:56:a2:a4:ff:b0:d5:f1:99:5b:5b:
                    b8:a4:8d:2f:5c:83:60:14:c5:b4:04:3c:3a:bb:ed:
                    c4:fc:86:82:fe:a9:75:ad:5d:23:ad:9e:0c:1c:12:
                    20:68:19:53:d6:d1:20:b1:e2:4f:ef:03:ed:aa:d6:
                    2a:d7:dc:9c:f2:f1:92:80:ad:85:9d:e4:0b:28:91:
                    e0:1b:3e:25:17:c2:f9:90:5f:b8:01:5b:98:88:87:
                    08:4d:9c:10:11:04:2b:fa:6d:90:27:58:53:94:f6:
                    0e:ad:09:6d:4a:bc:cf:bb:46:39:84:86:c6:e6:d3:
                    31:06:8e:80:9f:2a:83:06:48:55:9d:d3:48:10:a6:
                    8f:0b:10:eb:8f:c3:fc:ca:6d:c4:bb:71:39:86:0e:
                    21:0c:32:7b:25:38:a8:c9:bd:58:d4:83:14:b8:00:
                    c1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FD:61:42:EB:54:48:5D:2D:11:71:62:DF:0A:F9:EE:D3:80:13:88
            X509v3 Authority Key Identifier:
                keyid:8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:69:4e:d5:85:c1:7f:67:a7:df:37:52:f5:ef:3f:e4:ae:54:
         96:2e:15:96:66:a3:e0:3f:3e:55:4d:39:3c:a3:cf:34:35:64:
         8b:66:d3:51:7d:f5:56:86:e5:f9:c5:f1:26:0c:2f:85:c1:ca:
         46:88:8a:17:76:65:0b:43:da:18:e5:2b:fe:3b:a9:f8:b4:5a:
         bb:9d:70:5d:d4:e4:52:8f:ff:0d:9b:72:12:48:3f:dc:ee:6b:
         de:dd:e9:dd:24:5f:64:d2:3b:22:8f:48:ef:ea:ea:08:47:ac:
         0c:31:ba:41:e6:52:19:0e:ef:fd:0d:fb:53:04:56:ab:bf:ab:
         5a:38:b0:ec:ed:a6:ae:6b:6e:27:1a:61:58:be:ad:56:5e:8c:
         07:d0:96:cb:ba:54:44:bd:64:cc:aa:8a:fc:53:1e:ec:e3:40:
         f5:64:88:2c:d1:58:af:c2:d9:f7:75:54:4d:0d:da:02:25:ab:
         5c:24:5c:dd:b1:62:eb:9e:bb:2c:e7:82:b0:5d:8e:07:9b:52:
         24:fa:1d:0b:1b:71:75:91:b5:52:e3:f4:35:64:31:dd:f5:90:
         5b:62:23:75:ef:53:79:7f:cb:4f:f3:ad:89:ec:41:1c:57:ce:
         e0:5a:89:e2:d2:55:e1:18:95:68:82:2a:21:de:59:66:7d:0b:
         7b:10:8d:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHeWHqIbPKpFSMOxpi0+HlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOTk1OTUxZmQwMjdmYzczOWIwNDUxM2I4ZjhkNmJjNjc4
NDE4YzAwHhcNMjUwNjA2MjMwMDI2WhcNMjUwNjA3MjMwMDI2WjAzMTEwLwYDVQQD
EyhmNmZkNjE0MmViNTQ0ODVkMmQxMTcxNjJkZjBhZjllZWQzODAxMzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6V9M6okgc+fdBgjbH3A1QBzRgTP
ppBhvQJb0t+xGJgpUj3urSG7Zh1hC3HoYgGU56rIYojU62BnVEqaentKnRdw3Vam
pb0Q7NSx+Ulh92O1GqnzUxRbW7PHDHY4+VaipP+w1fGZW1u4pI0vXINgFMW0BDw6
u+3E/IaC/ql1rV0jrZ4MHBIgaBlT1tEgseJP7wPtqtYq19yc8vGSgK2FneQLKJHg
Gz4lF8L5kF+4AVuYiIcITZwQEQQr+m2QJ1hTlPYOrQltSrzPu0Y5hIbG5tMxBo6A
nyqDBkhVndNIEKaPCxDrj8P8ym3Eu3E5hg4hDDJ7JTioyb1Y1IMUuADBdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPb9YULrVEhdLRFxYt8K+e7TgBOIMB8GA1UdIwQY
MBaAFIuZWVH9An/HObBFE7j41rxnhBjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTVsWlVmMENmOGM1c0VVVHVQald2R2VFR01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kNTA1MjgtYTAyMC00M2M2LThkMDYt
NTczMGVmYjU4Nzc0LzEvaTVsWlVmMENmOGM1c0VVVHVQald2R2VFR01BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kNTA1MjgtYTAyMC00M2M2LThkMDYtNTczMGVmYjU4Nzc0
LzEvaTVsWlVmMENmOGM1c0VVVHVQald2R2VFR01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWlO1YXB
f2en3zdS9e8/5K5Uli4Vlmaj4D8+VU05PKPPNDVki2bTUX31Vobl+cXxJgwvhcHK
RoiKF3ZlC0PaGOUr/jup+LRau51wXdTkUo//DZtyEkg/3O5r3t3p3SRfZNI7Io9I
7+rqCEesDDG6QeZSGQ7v/Q37UwRWq7+rWjiw7O2mrmtuJxphWL6tVl6MB9CWy7pU
RL1kzKqK/FMe7ONA9WSILNFYr8LZ93VUTQ3aAiWrXCRc3bFi6567LOeCsF2OB5tS
JPodCxtxdZG1UuP0NWQx3fWQW2Ijde9TeX/LT/OtiexBHFfO4FqJ4tJV4RiVaIIq
Id5ZZn0LexCNFQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 08:08:08 2025 by rpki-client