Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
File:                     MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft (raw, json)
Hash identifier:          +BjQUWOJTCu69UBIgiht+QuAoNNoLN3WB4wTnSVDwEA=
Subject key identifier:   3C:8A:C7:EB:57:3E:20:41:EF:24:4C:1E:F1:C9:67:8A:97:3C:DA:40
Authority key identifier: 33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA
Certificate issuer:       /CN=33358b451ee0fe85b004a0564f8310fb211c95fa
Certificate serial:       01974742971C6E6FAA1653D6D12CCF22B85B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
Manifest number:          157F
Signing time:             Fri 06 Jun 2025 22:00:35 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:35 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:35 +0000
Files and hashes:         1: MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl (hash: wFAebK8ocdFANOLMUMnS3vl2RKviyB7Nie6fHPr5hfs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:97:1c:6e:6f:aa:16:53:d6:d1:2c:cf:22:b8:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33358b451ee0fe85b004a0564f8310fb211c95fa
        Validity
            Not Before: Jun  6 22:00:35 2025 GMT
            Not After : Jun  7 22:00:35 2025 GMT
        Subject: CN=3c8ac7eb573e2041ef244c1ef1c9678a973cda40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:13:92:d3:6b:8a:e6:97:a4:31:15:9f:1c:90:
                    05:39:3b:f3:6a:cc:08:bb:5b:76:0c:ee:06:84:88:
                    d2:16:e9:00:8b:fb:61:da:0b:6d:81:01:cf:f5:f2:
                    67:7e:e4:32:2d:31:92:8e:d5:e6:61:b5:58:00:94:
                    2d:fd:3b:27:98:1f:2f:25:56:74:8e:5b:1e:83:ed:
                    a2:2d:25:a1:2a:40:f2:b9:ea:d6:d1:9b:ae:f4:00:
                    8d:91:53:d9:9c:bc:1a:91:8d:2a:80:16:93:9a:71:
                    3f:35:c6:19:7d:92:30:cf:b7:e3:cd:7e:93:0f:1e:
                    b0:51:78:c9:d2:e1:f2:e4:cf:d6:d9:19:30:48:62:
                    8b:4d:0d:47:7d:b6:4b:6a:70:5a:0c:31:ba:3b:70:
                    9d:7a:d7:cd:8a:49:98:04:6f:7b:fd:76:1b:2e:9d:
                    75:aa:ce:74:16:0a:a6:35:f4:f1:f8:54:c4:42:ad:
                    0d:2f:ff:45:ac:27:45:ce:7d:d8:9b:90:c5:21:98:
                    0c:b2:1d:3d:e7:7d:40:91:90:62:31:b6:ac:64:94:
                    18:92:de:75:b4:b6:b1:c5:8a:42:90:0a:b5:e6:a8:
                    56:35:89:38:52:1d:65:98:36:1d:81:66:8e:c5:bf:
                    db:ab:3a:70:99:5e:77:98:31:3b:95:bb:de:39:17:
                    97:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:8A:C7:EB:57:3E:20:41:EF:24:4C:1E:F1:C9:67:8A:97:3C:DA:40
            X509v3 Authority Key Identifier:
                keyid:33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:28:4e:ce:5b:06:39:1b:98:5b:2e:f9:e0:f0:f7:39:99:6f:
         5e:a8:1d:f6:17:95:ce:90:45:e6:97:3a:e0:21:8b:6a:50:94:
         0f:fd:91:56:24:6f:2e:72:57:5c:66:a5:c2:c3:f8:7f:cc:89:
         7a:95:15:d2:35:d1:98:01:19:f1:79:1a:be:07:f4:8c:bb:1f:
         3a:e1:cf:57:ec:a4:ea:27:65:47:57:47:4f:97:a9:63:75:08:
         5a:f2:87:47:e8:4f:aa:bc:90:4a:b4:d7:86:89:05:6c:dd:da:
         fb:32:b4:61:6a:b0:96:ad:2e:3c:4c:25:9c:e5:8f:e1:ad:01:
         12:d0:43:e8:c6:ee:e5:a8:6c:d7:33:9b:e4:d7:03:f2:17:d7:
         31:81:c3:01:c9:af:bc:b2:d3:ed:a1:8e:07:a3:fd:7b:e9:e3:
         4f:ee:9c:e2:16:c2:4d:12:d2:2a:a8:e7:a7:83:64:dd:47:63:
         bb:78:3d:08:03:67:cf:48:dd:73:2d:c2:83:e5:42:c0:c4:1f:
         7d:1c:c4:51:7d:49:ed:eb:b6:99:ff:a9:0c:e7:bc:c4:ec:3d:
         f7:47:c4:2a:0f:c7:ff:ab:1c:7e:6e:86:22:fc:eb:a7:e0:2f:
         ca:fd:8b:55:0e:a8:3a:83:7a:d7:ac:13:52:56:ff:c6:49:45:
         6e:01:a1:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHQpccbm+qFlPW0SzPIrhbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMzU4YjQ1MWVlMGZlODViMDA0YTA1NjRmODMxMGZiMjEx
Yzk1ZmEwHhcNMjUwNjA2MjIwMDM1WhcNMjUwNjA3MjIwMDM1WjAzMTEwLwYDVQQD
EygzYzhhYzdlYjU3M2UyMDQxZWYyNDRjMWVmMWM5Njc4YTk3M2NkYTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BOS02uK5pekMRWfHJAFOTvzaswI
u1t2DO4GhIjSFukAi/th2gttgQHP9fJnfuQyLTGSjtXmYbVYAJQt/TsnmB8vJVZ0
jlseg+2iLSWhKkDyuerW0Zuu9ACNkVPZnLwakY0qgBaTmnE/NcYZfZIwz7fjzX6T
Dx6wUXjJ0uHy5M/W2RkwSGKLTQ1HfbZLanBaDDG6O3CdetfNikmYBG97/XYbLp11
qs50FgqmNfTx+FTEQq0NL/9FrCdFzn3Ym5DFIZgMsh09531AkZBiMbasZJQYkt51
tLaxxYpCkAq15qhWNYk4Uh1lmDYdgWaOxb/bqzpwmV53mDE7lbveOReXkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyKx+tXPiBB7yRMHvHJZ4qXPNpAMB8GA1UdIwQY
MBaAFDM1i0Ue4P6FsASgVk+DEPshHJX6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXpXTFJSN2dfb1d3QktCV1Q0TVEteUVjbGZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85ZjE4ZjgtOTZjNC00YjIzLTkzMWYt
ZDVmMDQ3YzI5MTkwLzEvTXpXTFJSN2dfb1d3QktCV1Q0TVEteUVjbGZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS85ZjE4ZjgtOTZjNC00YjIzLTkzMWYtZDVmMDQ3YzI5MTkw
LzEvTXpXTFJSN2dfb1d3QktCV1Q0TVEteUVjbGZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFChOzlsG
ORuYWy754PD3OZlvXqgd9heVzpBF5pc64CGLalCUD/2RViRvLnJXXGalwsP4f8yJ
epUV0jXRmAEZ8Xkavgf0jLsfOuHPV+yk6idlR1dHT5epY3UIWvKHR+hPqryQSrTX
hokFbN3a+zK0YWqwlq0uPEwlnOWP4a0BEtBD6Mbu5ahs1zOb5NcD8hfXMYHDAcmv
vLLT7aGOB6P9e+njT+6c4hbCTRLSKqjnp4Nk3Udju3g9CANnz0jdcy3Cg+VCwMQf
fRzEUX1J7eu2mf+pDOe8xOw990fEKg/H/6scfm6GIvzrp+Avyv2LVQ6oOoN616wT
Ulb/xklFbgGh8Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:12:02 2025 by rpki-client