Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
File:                     plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft (raw, json)
Hash identifier:          0AziIxFF0nUrsTA58gWDTTLkvekTcvzpKKs/IwuNbaQ=
Subject key identifier:   13:E3:F6:EB:16:F5:03:0B:12:86:0B:13:1A:EC:6F:BE:A2:2B:93:94
Authority key identifier: A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC
Certificate issuer:       /CN=a656830499378698e3e6e6597993cd3b00e1dccc
Certificate serial:       01974E578FAE6441AFB103C431BF20256D23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
Manifest number:          0A56
Signing time:             Sun 08 Jun 2025 07:00:50 +0000
Manifest this update:     Sun 08 Jun 2025 07:00:50 +0000
Manifest next update:     Mon 09 Jun 2025 07:00:50 +0000
Files and hashes:         1: plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl (hash: 0m5GtJuSihceObpEpvQHxrVO2FJPXpoeKBPCzw8Lqpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 07:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:57:8f:ae:64:41:af:b1:03:c4:31:bf:20:25:6d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a656830499378698e3e6e6597993cd3b00e1dccc
        Validity
            Not Before: Jun  8 07:00:50 2025 GMT
            Not After : Jun  9 07:00:50 2025 GMT
        Subject: CN=13e3f6eb16f5030b12860b131aec6fbea22b9394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:db:cc:71:a2:63:41:05:7f:86:4a:27:98:28:
                    72:cc:3b:03:c9:ab:7e:d3:d8:de:47:e9:3d:1e:ff:
                    02:b7:14:6f:99:d6:7e:f2:df:6a:4e:12:bd:24:fb:
                    47:48:8e:57:54:b0:b7:8f:39:0b:7f:2c:75:46:11:
                    18:a6:c0:8b:70:bf:92:99:04:7a:bd:e5:7a:66:7e:
                    57:bd:74:cf:76:d5:c4:1b:13:a6:3c:55:b9:23:46:
                    2e:eb:9b:5f:80:61:3b:b7:fe:f2:ea:07:78:0d:34:
                    e7:8b:58:d1:16:0b:da:43:a0:97:42:a4:ed:10:d3:
                    20:d4:99:42:19:0c:5f:2a:36:b1:05:02:79:50:b6:
                    32:85:ab:b7:78:4c:7b:46:23:64:33:b6:22:7a:14:
                    16:5b:df:f7:0f:34:44:01:8f:a3:42:ab:da:ba:d6:
                    1d:38:27:a5:ad:65:69:2e:ed:86:19:fa:8b:01:f7:
                    04:06:74:c0:c1:d8:38:ee:e2:9d:f1:9f:73:24:1f:
                    36:d6:36:75:d0:21:01:13:f9:18:5e:e9:42:89:b4:
                    8b:33:b2:be:f6:7e:2a:05:1b:de:fe:2c:43:5d:57:
                    2b:25:bf:c5:82:3f:29:71:d9:54:bc:ce:fb:98:c4:
                    a4:0f:a4:79:da:a8:4a:ec:5a:2a:21:95:fd:58:9a:
                    4c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E3:F6:EB:16:F5:03:0B:12:86:0B:13:1A:EC:6F:BE:A2:2B:93:94
            X509v3 Authority Key Identifier:
                keyid:A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:71:97:c4:8c:cc:ae:b9:03:9d:fe:27:a1:bb:cc:31:3c:12:
         18:ca:ce:b4:60:2d:24:c2:d3:f7:63:a3:f2:e2:85:99:82:7f:
         2a:e4:89:ae:5a:26:27:ae:f7:22:48:f6:91:69:73:35:a0:cb:
         a7:b8:22:2b:6a:87:aa:7f:95:98:f4:b6:1e:76:cd:90:aa:0f:
         20:8d:8a:93:85:99:51:d7:11:61:2d:20:b9:cb:97:23:0d:46:
         6d:93:da:ca:8c:86:d4:95:be:00:88:4d:f2:88:ad:0e:b8:5e:
         18:f1:c4:df:7f:7f:85:44:d6:c5:55:4e:57:54:7f:e8:67:e4:
         bc:a4:99:91:87:d1:81:6b:cf:cf:8f:f1:11:45:8b:1a:bc:b2:
         4b:67:33:e5:bc:bc:7a:65:3f:90:6b:c7:31:80:9f:f8:cf:b8:
         dd:2d:81:4e:96:3b:30:bb:42:99:eb:e2:71:5e:35:4c:e3:4f:
         81:ad:6f:34:c2:32:93:87:74:33:f5:40:b6:c6:7f:e2:a2:29:
         80:24:6c:c4:78:2b:7a:79:17:82:eb:0c:43:58:d2:1d:ed:35:
         08:72:f7:e4:c0:d4:e3:a3:31:ff:96:93:8f:ce:58:4e:29:e0:
         71:b0:60:2a:9d:ed:79:ef:bd:aa:8f:d9:0a:07:cf:d3:5d:ed:
         ad:0a:ac:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOV4+uZEGvsQPEMb8gJW0jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NTY4MzA0OTkzNzg2OThlM2U2ZTY1OTc5OTNjZDNiMDBl
MWRjY2MwHhcNMjUwNjA4MDcwMDUwWhcNMjUwNjA5MDcwMDUwWjAzMTEwLwYDVQQD
EygxM2UzZjZlYjE2ZjUwMzBiMTI4NjBiMTMxYWVjNmZiZWEyMmI5Mzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NvMcaJjQQV/hkonmChyzDsDyat+
09jeR+k9Hv8CtxRvmdZ+8t9qThK9JPtHSI5XVLC3jzkLfyx1RhEYpsCLcL+SmQR6
veV6Zn5XvXTPdtXEGxOmPFW5I0Yu65tfgGE7t/7y6gd4DTTni1jRFgvaQ6CXQqTt
ENMg1JlCGQxfKjaxBQJ5ULYyhau3eEx7RiNkM7YiehQWW9/3DzREAY+jQqvautYd
OCelrWVpLu2GGfqLAfcEBnTAwdg47uKd8Z9zJB821jZ10CEBE/kYXulCibSLM7K+
9n4qBRve/ixDXVcrJb/Fgj8pcdlUvM77mMSkD6R52qhK7FoqIZX9WJpMKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPj9usW9QMLEoYLExrsb76iK5OUMB8GA1UdIwQY
MBaAFKZWgwSZN4aY4+bmWXmTzTsA4dzMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGxhREJKazNocGpqNXVaWmVaUE5Pd0RoM013LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zOTAwYzYtNTYyYi00N2JjLWEzZWUt
NjU2NDcwMzQzNGUyLzEvcGxhREJKazNocGpqNXVaWmVaUE5Pd0RoM013Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zOTAwYzYtNTYyYi00N2JjLWEzZWUtNjU2NDcwMzQzNGUy
LzEvcGxhREJKazNocGpqNXVaWmVaUE5Pd0RoM013LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHGXxIzM
rrkDnf4nobvMMTwSGMrOtGAtJMLT92Oj8uKFmYJ/KuSJrlomJ673Ikj2kWlzNaDL
p7giK2qHqn+VmPS2HnbNkKoPII2Kk4WZUdcRYS0gucuXIw1GbZPayoyG1JW+AIhN
8oitDrheGPHE339/hUTWxVVOV1R/6GfkvKSZkYfRgWvPz4/xEUWLGryyS2cz5by8
emU/kGvHMYCf+M+43S2BTpY7MLtCmevicV41TONPga1vNMIyk4d0M/VAtsZ/4qIp
gCRsxHgrenkXgusMQ1jSHe01CHL35MDU46Mx/5aTj85YTingcbBgKp3tee+9qo/Z
CgfP013trQqszw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 15:35:11 2025 by rpki-client