Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
File:                     UIJpb7xB2QYWimDOCUlJAiz2Keg.mft (raw, json)
Hash identifier:          ECmuQVMuaMwt04NwpazMIFYb336M/J5qPVi1pXtWULY=
Subject key identifier:   53:7F:14:3B:A2:0E:25:1E:03:5F:78:A9:50:F9:81:5D:A5:D1:B6:69
Authority key identifier: 50:82:69:6F:BC:41:D9:06:16:8A:60:CE:09:49:49:02:2C:F6:29:E8
Certificate issuer:       /CN=5082696fbc41d906168a60ce094949022cf629e8
Certificate serial:       01974BFB1B946C846E60553D787735F3A5A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UIJpb7xB2QYWimDOCUlJAiz2Keg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
Manifest number:          0305
Signing time:             Sat 07 Jun 2025 20:00:37 +0000
Manifest this update:     Sat 07 Jun 2025 20:00:37 +0000
Manifest next update:     Sun 08 Jun 2025 20:00:37 +0000
Files and hashes:         1: UIJpb7xB2QYWimDOCUlJAiz2Keg.crl (hash: 62O7P7MeY8q2U7n6sUhe3Vs8EmXUZ01GTvT3tOuOXrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UIJpb7xB2QYWimDOCUlJAiz2Keg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:fb:1b:94:6c:84:6e:60:55:3d:78:77:35:f3:a5:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5082696fbc41d906168a60ce094949022cf629e8
        Validity
            Not Before: Jun  7 20:00:37 2025 GMT
            Not After : Jun  8 20:00:37 2025 GMT
        Subject: CN=537f143ba20e251e035f78a950f9815da5d1b669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:47:af:ec:67:b6:40:56:c7:ef:3b:8e:47:30:
                    54:ff:7c:0c:45:ab:f5:e3:bc:84:b5:1f:44:ca:01:
                    19:55:fa:60:52:2f:6d:3d:2f:a9:59:cb:9d:3c:d0:
                    3e:f7:9a:77:02:2b:6f:56:84:a3:11:7a:77:a2:59:
                    4c:7d:fd:bb:e1:90:ab:94:1b:89:e2:92:f0:cb:81:
                    da:65:2c:47:f7:c7:47:2d:22:50:f6:9a:95:aa:84:
                    42:d1:a0:36:10:01:e4:1c:04:f3:60:3d:12:b1:8a:
                    38:9c:6c:76:62:d1:2f:64:7d:9b:d6:90:b5:7b:a2:
                    53:a4:78:8f:36:00:94:00:1a:15:0d:0a:e9:ef:a8:
                    d0:dc:47:3c:e0:84:41:3e:63:25:9d:70:3d:61:31:
                    82:30:f6:96:7c:1a:a9:ad:97:ff:5b:f1:c6:a9:4e:
                    9e:88:c5:0a:97:ba:f2:e9:d7:4f:fa:29:6c:9c:cc:
                    d9:2f:e2:33:e9:de:1f:93:d6:5f:a6:24:0d:e3:5c:
                    6e:b4:5d:fd:71:8a:f0:71:2f:5c:20:2d:1d:0f:c9:
                    f4:8e:9e:3c:f2:8e:58:7b:81:ef:93:5f:5e:57:d5:
                    0b:48:8a:79:f2:3e:e1:6f:44:33:59:e5:29:43:43:
                    c1:f5:8b:41:95:f0:e7:06:cb:d9:59:01:59:8a:8d:
                    34:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7F:14:3B:A2:0E:25:1E:03:5F:78:A9:50:F9:81:5D:A5:D1:B6:69
            X509v3 Authority Key Identifier:
                keyid:50:82:69:6F:BC:41:D9:06:16:8A:60:CE:09:49:49:02:2C:F6:29:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UIJpb7xB2QYWimDOCUlJAiz2Keg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:f0:3a:c3:ae:90:9f:68:16:3e:7a:76:e6:97:57:9f:96:7b:
         13:15:4f:26:e7:37:a7:c7:d1:58:a7:d4:ac:70:47:16:d3:c1:
         9d:f9:eb:35:3f:09:55:7a:86:f7:7f:20:74:db:ab:28:05:0d:
         67:94:26:b1:0e:6d:4b:30:6b:6b:84:44:0d:e5:9e:3e:32:83:
         2e:94:f2:c0:89:15:81:eb:65:94:7e:81:c9:18:a7:82:af:ae:
         f9:7a:68:b3:cc:32:a7:c8:5c:b2:3b:52:1c:b9:26:f9:ba:bc:
         cd:67:29:0c:b9:ae:6a:21:7d:70:c6:20:b3:88:b3:b7:bd:d5:
         ea:fc:66:e2:ba:68:d0:3a:e3:b3:4f:fb:3c:81:b9:57:10:84:
         39:2d:d6:c1:93:8d:09:09:05:a3:f1:cb:de:fc:8c:fd:31:b5:
         fc:af:d0:80:91:06:8b:e7:d2:0d:11:a2:af:52:6c:0c:30:eb:
         15:18:89:56:09:01:d5:37:59:53:b9:35:86:7c:e0:0b:d3:fa:
         c0:ba:2b:bb:b5:0e:18:b0:90:06:b6:12:4b:c6:8c:51:76:d2:
         34:62:2e:cb:e7:db:1a:ce:71:dc:dc:47:34:93:1d:bc:28:80:
         21:53:50:8b:41:48:ae:0e:46:86:5c:93:f3:16:73:71:6d:60:
         8b:37:a3:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdL+xuUbIRuYFU9eHc186WhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwODI2OTZmYmM0MWQ5MDYxNjhhNjBjZTA5NDk0OTAyMmNm
NjI5ZTgwHhcNMjUwNjA3MjAwMDM3WhcNMjUwNjA4MjAwMDM3WjAzMTEwLwYDVQQD
Eyg1MzdmMTQzYmEyMGUyNTFlMDM1Zjc4YTk1MGY5ODE1ZGE1ZDFiNjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0ev7Ge2QFbH7zuORzBU/3wMRav1
47yEtR9EygEZVfpgUi9tPS+pWcudPNA+95p3AitvVoSjEXp3ollMff274ZCrlBuJ
4pLwy4HaZSxH98dHLSJQ9pqVqoRC0aA2EAHkHATzYD0SsYo4nGx2YtEvZH2b1pC1
e6JTpHiPNgCUABoVDQrp76jQ3Ec84IRBPmMlnXA9YTGCMPaWfBqprZf/W/HGqU6e
iMUKl7ry6ddP+ilsnMzZL+Iz6d4fk9ZfpiQN41xutF39cYrwcS9cIC0dD8n0jp48
8o5Ye4Hvk19eV9ULSIp58j7hb0QzWeUpQ0PB9YtBlfDnBsvZWQFZio00fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFN/FDuiDiUeA194qVD5gV2l0bZpMB8GA1UdIwQY
MBaAFFCCaW+8QdkGFopgzglJSQIs9inoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUlKcGI3eEIyUVlXaW1ET0NVbEpBaXoyS2VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hOWYwYmItODZmNi00Y2EzLWE1M2Yt
MmU5NzIxZDg2YzNkLzEvVUlKcGI3eEIyUVlXaW1ET0NVbEpBaXoyS2VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hOWYwYmItODZmNi00Y2EzLWE1M2YtMmU5NzIxZDg2YzNk
LzEvVUlKcGI3eEIyUVlXaW1ET0NVbEpBaXoyS2VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPA6w66Q
n2gWPnp25pdXn5Z7ExVPJuc3p8fRWKfUrHBHFtPBnfnrNT8JVXqG938gdNurKAUN
Z5QmsQ5tSzBra4REDeWePjKDLpTywIkVgetllH6ByRingq+u+Xpos8wyp8hcsjtS
HLkm+bq8zWcpDLmuaiF9cMYgs4izt73V6vxm4rpo0Drjs0/7PIG5VxCEOS3WwZON
CQkFo/HL3vyM/TG1/K/QgJEGi+fSDRGir1JsDDDrFRiJVgkB1TdZU7k1hnzgC9P6
wLoru7UOGLCQBrYSS8aMUXbSNGIuy+fbGs5x3NxHNJMdvCiAIVNQi0FIrg5GhlyT
8xZzcW1gizejoQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:03:37 2025 by rpki-client