Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
File:                     z4Qias59GqsqQYMm94QorK38x4E.mft (raw, json)
Hash identifier:          F4dT8jTuUcfJ+SUZxGjyKwQtK16S/XY1vuu1bkvZGWU=
Subject key identifier:   DA:CC:2E:F9:CD:1E:53:51:13:C6:9B:7F:C8:9D:C1:A7:EC:B1:86:6C
Authority key identifier: CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81
Certificate issuer:       /CN=cf84226ace7d1aab2a418326f78428acadfcc781
Certificate serial:       01976DAB5206C536C31056A79536B6F887B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
Manifest number:          0539
Signing time:             Sat 14 Jun 2025 09:00:33 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:33 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:33 +0000
Files and hashes:         1: z4Qias59GqsqQYMm94QorK38x4E.crl (hash: QbKiTt1qSHavOcAS3r4Y03PC3I82Y/K8uSTwfx92gAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 09:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:52:06:c5:36:c3:10:56:a7:95:36:b6:f8:87:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf84226ace7d1aab2a418326f78428acadfcc781
        Validity
            Not Before: Jun 14 09:00:33 2025 GMT
            Not After : Jun 15 09:00:33 2025 GMT
        Subject: CN=dacc2ef9cd1e535113c69b7fc89dc1a7ecb1866c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1d:fa:b1:6a:bc:46:19:6f:59:96:9d:81:14:
                    02:cd:43:53:f0:9e:ab:ca:e1:c0:d8:94:08:17:00:
                    6d:e7:65:e1:61:1f:04:79:72:f5:ac:39:d2:11:a6:
                    e9:a9:38:4b:45:04:17:94:9f:1d:61:e1:93:9e:08:
                    89:50:fd:6c:86:82:78:6a:77:a8:8c:d7:70:e8:2e:
                    ce:e7:3b:aa:de:1b:7b:eb:80:30:c3:dd:6c:7b:48:
                    f6:53:95:20:f2:dd:6c:c9:b0:30:26:e7:80:83:51:
                    a9:87:28:1d:00:06:8e:d8:0b:15:38:80:3c:9b:96:
                    b8:b5:b9:a6:92:64:7c:96:63:3b:7e:c7:80:85:8b:
                    a8:85:c0:b7:be:b9:ee:2a:c2:a4:9b:22:64:42:aa:
                    53:54:5b:b9:37:a3:ef:e0:04:12:5c:e6:01:c0:86:
                    1b:98:17:21:1c:af:1b:31:4a:27:1a:32:17:ea:03:
                    b2:70:18:b5:8c:c4:cd:fa:46:01:6b:5f:fd:20:5e:
                    53:de:04:4e:88:45:cc:d2:7b:fc:e0:95:7e:51:16:
                    89:81:1c:79:d9:15:73:2e:99:43:02:8b:06:b0:02:
                    ab:b0:cb:42:76:af:a6:0b:a6:31:84:8e:43:fa:c9:
                    0b:bd:57:e1:7c:4e:bf:e1:b7:8c:11:dd:67:cc:6b:
                    45:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CC:2E:F9:CD:1E:53:51:13:C6:9B:7F:C8:9D:C1:A7:EC:B1:86:6C
            X509v3 Authority Key Identifier:
                keyid:CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ed:35:ff:28:ab:ad:be:4d:37:97:7e:2b:0e:a9:99:bc:4f:
         37:02:57:03:09:53:19:4a:f8:2f:06:56:78:0c:da:c0:b3:46:
         7e:96:84:3f:75:27:45:40:74:31:f5:df:28:d9:99:d0:54:8f:
         0d:1e:d6:f8:7a:58:8f:21:19:67:87:52:92:1f:ff:12:fc:73:
         44:35:bf:0b:0d:77:97:e5:af:d4:12:01:e0:0f:97:af:ad:50:
         39:06:77:d8:41:9e:6b:d5:71:5c:90:dd:59:a1:12:07:92:09:
         04:2e:da:1a:2b:64:7b:5d:85:67:92:29:a9:06:ec:ed:c6:d9:
         9b:c5:28:60:6f:8a:d3:3b:79:5b:63:87:5c:c7:ff:25:9e:5d:
         4c:50:36:29:3c:99:d8:dd:65:7c:79:3a:23:b6:d8:7f:3f:22:
         09:52:13:51:fe:34:81:a1:db:b6:07:25:1c:b8:a7:22:08:03:
         89:a6:6f:30:a1:79:4b:06:28:b2:d0:09:a2:d7:97:ef:a4:05:
         91:01:e3:5b:88:4c:fa:5f:fa:7b:6b:a6:18:96:f2:e7:23:cb:
         6e:67:1f:e0:b8:9c:11:f4:1d:37:db:39:43:75:8b:11:e5:32:
         bc:12:0a:1e:58:77:48:53:79:34:f9:38:0b:75:29:a1:b9:ac:
         e0:9d:4a:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtq1IGxTbDEFanlTa2+Ie5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmODQyMjZhY2U3ZDFhYWIyYTQxODMyNmY3ODQyOGFjYWRm
Y2M3ODEwHhcNMjUwNjE0MDkwMDMzWhcNMjUwNjE1MDkwMDMzWjAzMTEwLwYDVQQD
EyhkYWNjMmVmOWNkMWU1MzUxMTNjNjliN2ZjODlkYzFhN2VjYjE4NjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4B36sWq8RhlvWZadgRQCzUNT8J6r
yuHA2JQIFwBt52XhYR8EeXL1rDnSEabpqThLRQQXlJ8dYeGTngiJUP1shoJ4aneo
jNdw6C7O5zuq3ht764Aww91se0j2U5Ug8t1sybAwJueAg1GphygdAAaO2AsVOIA8
m5a4tbmmkmR8lmM7fseAhYuohcC3vrnuKsKkmyJkQqpTVFu5N6Pv4AQSXOYBwIYb
mBchHK8bMUonGjIX6gOycBi1jMTN+kYBa1/9IF5T3gROiEXM0nv84JV+URaJgRx5
2RVzLplDAosGsAKrsMtCdq+mC6YxhI5D+skLvVfhfE6/4beMEd1nzGtFkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrMLvnNHlNRE8abf8idwafssYZsMB8GA1UdIwQY
MBaAFM+EImrOfRqrKkGDJveEKKyt/MeBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejRRaWFzNTlHcXNxUVlNbTk0UW9ySzM4eDRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80NWZiMDMtMGVmYi00ZWJhLTgzZGYt
ZjMwZGM3NjVmNWZmLzEvejRRaWFzNTlHcXNxUVlNbTk0UW9ySzM4eDRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC80NWZiMDMtMGVmYi00ZWJhLTgzZGYtZjMwZGM3NjVmNWZm
LzEvejRRaWFzNTlHcXNxUVlNbTk0UW9ySzM4eDRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMu01/yir
rb5NN5d+Kw6pmbxPNwJXAwlTGUr4LwZWeAzawLNGfpaEP3UnRUB0MfXfKNmZ0FSP
DR7W+HpYjyEZZ4dSkh//EvxzRDW/Cw13l+Wv1BIB4A+Xr61QOQZ32EGea9VxXJDd
WaESB5IJBC7aGitke12FZ5IpqQbs7cbZm8UoYG+K0zt5W2OHXMf/JZ5dTFA2KTyZ
2N1lfHk6I7bYfz8iCVITUf40gaHbtgclHLinIggDiaZvMKF5SwYostAJoteX76QF
kQHjW4hM+l/6e2umGJby5yPLbmcf4LicEfQdN9s5Q3WLEeUyvBIKHlh3SFN5NPk4
C3Upobms4J1KBQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 14:28:54 2025 by rpki-client