Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
File:                     GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft (raw, json)
Hash identifier:          kDakYzphtw+8kBflGR0uub1oFdfMemUb40uDBhCKspc=
Subject key identifier:   8C:FE:9C:A8:68:31:5B:48:42:43:6C:16:E0:DF:13:EA:DD:EE:A8:16
Authority key identifier: 19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
Certificate issuer:       /CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Certificate serial:       01974779D39D29C65553DCBC388288A488BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
Manifest number:          07E5
Signing time:             Fri 06 Jun 2025 23:00:55 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:55 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:55 +0000
Files and hashes:         1: GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl (hash: gQzSqhgDLaEnfS3efr7RP0WaKmwuEMTpdEtq/zJJopM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 23:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:d3:9d:29:c6:55:53:dc:bc:38:82:88:a4:88:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
        Validity
            Not Before: Jun  6 23:00:55 2025 GMT
            Not After : Jun  7 23:00:55 2025 GMT
        Subject: CN=8cfe9ca868315b4842436c16e0df13eaddeea816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d4:51:80:14:46:86:b2:15:83:4a:9b:e3:5a:
                    35:3d:0c:2d:7b:7a:d1:ea:3b:dc:f2:37:e9:de:28:
                    0d:bf:76:58:97:07:2c:fa:21:96:c9:dd:a7:12:71:
                    1b:30:78:9a:62:d7:b3:17:97:9d:88:25:0a:e4:ca:
                    dc:88:ed:25:f7:0c:78:00:33:f8:74:a0:87:df:44:
                    0e:d9:c9:97:ca:b5:57:cc:ce:f5:98:94:61:4d:d9:
                    3c:9f:2e:d2:00:e9:22:13:dc:dc:71:57:d5:f6:fb:
                    7b:e8:31:89:6c:43:89:e4:d8:56:61:c7:44:b0:e8:
                    e7:c8:99:73:e2:03:87:18:6e:cc:94:d8:88:4e:8e:
                    58:99:86:eb:6a:a9:eb:04:7f:03:e1:5d:2a:10:20:
                    bd:80:5f:b2:cc:19:30:2c:24:7d:98:b4:61:be:42:
                    9e:d8:a8:14:6c:47:68:63:34:54:4c:74:c6:55:a3:
                    20:49:24:c7:f0:11:6f:19:d1:33:c4:24:b2:93:c3:
                    56:9d:a4:15:ac:fb:be:5b:3c:4e:fc:a7:bd:83:de:
                    2d:e8:63:a2:1b:6c:a1:78:51:eb:3b:d0:2b:56:44:
                    bf:53:74:96:de:a7:12:da:41:3e:fa:73:4f:43:fc:
                    10:da:4a:99:21:cf:34:1e:87:5a:bd:85:77:22:cb:
                    0d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FE:9C:A8:68:31:5B:48:42:43:6C:16:E0:DF:13:EA:DD:EE:A8:16
            X509v3 Authority Key Identifier:
                keyid:19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:3d:60:ea:2d:a2:74:19:be:79:b9:88:81:7c:5f:be:45:a3:
         22:26:af:68:96:12:6d:84:b7:6b:de:b9:a4:c3:49:d3:66:8a:
         80:39:f0:50:86:ed:ba:28:e9:fa:e3:a0:65:71:fa:d3:2c:eb:
         02:10:2b:ea:17:a6:77:0d:4b:4f:00:02:7b:4b:0f:f8:de:8e:
         fb:c0:78:6b:e4:c2:ab:7f:43:3d:8d:19:19:2a:a5:3e:6f:cf:
         9a:b0:0f:03:03:a1:76:34:00:00:35:a6:09:85:b8:79:a5:11:
         fd:48:b3:7d:63:89:1b:28:2f:84:a4:e3:c6:94:ea:76:af:77:
         7e:db:7e:ba:35:41:62:d9:d0:4f:41:fc:2c:ca:e5:e1:cc:79:
         4b:f6:c2:1a:64:e8:01:94:31:d5:29:7c:6b:86:87:c6:a9:52:
         22:e7:4f:37:ab:e4:55:fc:18:28:ad:af:2a:5b:d6:67:96:48:
         91:7f:40:19:07:3e:b7:c8:95:ea:12:14:ce:9a:09:0e:0b:6f:
         39:28:f5:de:bc:14:04:b1:09:b6:7c:fc:c4:16:3d:ce:94:c3:
         45:7e:c8:6d:8e:ac:de:bc:ee:ce:99:fe:7b:39:59:12:04:28:
         32:27:19:76:84:98:71:fc:68:a2:8e:c8:03:7d:d6:be:86:a8:
         b9:f9:10:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHedOdKcZVU9y8OIKIpIi8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MDlmNjBjOGI4NWVmZWQzNjFkZjViNmI1MWM5ZmVkYWUx
YzdmOTYwHhcNMjUwNjA2MjMwMDU1WhcNMjUwNjA3MjMwMDU1WjAzMTEwLwYDVQQD
Eyg4Y2ZlOWNhODY4MzE1YjQ4NDI0MzZjMTZlMGRmMTNlYWRkZWVhODE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9RRgBRGhrIVg0qb41o1PQwte3rR
6jvc8jfp3igNv3ZYlwcs+iGWyd2nEnEbMHiaYtezF5ediCUK5MrciO0l9wx4ADP4
dKCH30QO2cmXyrVXzM71mJRhTdk8ny7SAOkiE9zccVfV9vt76DGJbEOJ5NhWYcdE
sOjnyJlz4gOHGG7MlNiITo5YmYbraqnrBH8D4V0qECC9gF+yzBkwLCR9mLRhvkKe
2KgUbEdoYzRUTHTGVaMgSSTH8BFvGdEzxCSyk8NWnaQVrPu+WzxO/Ke9g94t6GOi
G2yheFHrO9ArVkS/U3SW3qcS2kE++nNPQ/wQ2kqZIc80HodavYV3IssNzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIz+nKhoMVtIQkNsFuDfE+rd7qgWMB8GA1UdIwQY
MBaAFBkJ9gyLhe/tNh31trUcn+2uHH+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1FuMkRJdUY3LTAySGZXMnRSeWY3YTRjZjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy83MDIxZTItZWZmZS00MTYzLThiYjMt
NThlN2RiMzBlYTQ0LzEvR1FuMkRJdUY3LTAySGZXMnRSeWY3YTRjZjVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy83MDIxZTItZWZmZS00MTYzLThiYjMtNThlN2RiMzBlYTQ0
LzEvR1FuMkRJdUY3LTAySGZXMnRSeWY3YTRjZjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPz1g6i2i
dBm+ebmIgXxfvkWjIiavaJYSbYS3a965pMNJ02aKgDnwUIbtuijp+uOgZXH60yzr
AhAr6hemdw1LTwACe0sP+N6O+8B4a+TCq39DPY0ZGSqlPm/PmrAPAwOhdjQAADWm
CYW4eaUR/UizfWOJGygvhKTjxpTqdq93ftt+ujVBYtnQT0H8LMrl4cx5S/bCGmTo
AZQx1Sl8a4aHxqlSIudPN6vkVfwYKK2vKlvWZ5ZIkX9AGQc+t8iV6hIUzpoJDgtv
OSj13rwUBLEJtnz8xBY9zpTDRX7IbY6s3rzuzpn+ezlZEgQoMicZdoSYcfxooo7I
A33WvoaoufkQBQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:34:39 2025 by rpki-client