Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
File:                     dxToFxWNwwfu1NTG7fUaieVwPs8.mft (raw, json)
Hash identifier:          TOvaRj4hq6filj7I/U4XnYfIUu8XmclEjEeFJNr7auE=
Subject key identifier:   8A:3C:C4:17:EB:ED:82:29:A8:49:84:DA:51:27:B0:D4:5E:A9:93:A7
Authority key identifier: 77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF
Certificate issuer:       /CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
Certificate serial:       01974AE8FB4A8D5755434B94425D4C19ACF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
Manifest number:          0D54
Signing time:             Sat 07 Jun 2025 15:01:12 +0000
Manifest this update:     Sat 07 Jun 2025 15:01:12 +0000
Manifest next update:     Sun 08 Jun 2025 15:01:12 +0000
Files and hashes:         1: dxToFxWNwwfu1NTG7fUaieVwPs8.crl (hash: 4qfksTHsNp5cyN7qPMjtI/vss8eYusSn0zOxKq2MmnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:fb:4a:8d:57:55:43:4b:94:42:5d:4c:19:ac:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
        Validity
            Not Before: Jun  7 15:01:12 2025 GMT
            Not After : Jun  8 15:01:12 2025 GMT
        Subject: CN=8a3cc417ebed8229a84984da5127b0d45ea993a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6c:7d:e7:b7:3b:a1:3c:64:c7:13:b8:0e:51:
                    6b:bf:fd:b6:f4:ce:31:b3:bf:c9:9f:a6:43:13:21:
                    18:60:61:78:b7:ce:1a:72:87:8a:ca:93:79:24:92:
                    ca:47:58:c6:29:f6:73:a7:e9:81:e9:df:48:55:aa:
                    0a:f7:ad:b8:75:5f:f6:68:ec:43:c2:c2:51:8c:14:
                    a2:b2:b9:0e:a6:8e:f1:49:3d:4a:c5:44:b7:c8:c5:
                    02:97:67:47:25:c5:bc:e0:1e:bc:a2:d1:02:c9:73:
                    17:e2:ea:69:ea:18:6b:4e:06:57:73:b6:20:7d:cd:
                    c7:5d:7f:b9:02:44:09:3a:e4:8e:ab:4b:1d:df:70:
                    02:ca:07:01:b0:08:be:00:32:46:cd:fe:25:7c:37:
                    e9:98:a3:c2:96:4e:51:48:b1:4b:05:0d:e5:bd:76:
                    42:4b:59:00:58:11:7a:ef:90:f7:e2:0b:26:a4:fd:
                    7d:79:82:73:fc:c4:d2:f7:48:36:d5:bc:27:7f:33:
                    f9:a6:86:30:d1:a5:ff:41:ff:27:d4:ab:2a:16:33:
                    9e:52:1a:0d:2e:77:ec:76:0e:1f:2d:d5:56:18:d2:
                    8f:ee:c1:d1:49:ef:7f:ed:ee:87:7f:c7:72:bb:61:
                    b9:2b:fb:97:fa:ae:ab:21:57:5b:5f:77:c9:8a:80:
                    c3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3C:C4:17:EB:ED:82:29:A8:49:84:DA:51:27:B0:D4:5E:A9:93:A7
            X509v3 Authority Key Identifier:
                keyid:77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e9:66:dc:04:97:72:be:b5:94:b4:69:ae:56:6f:dd:5d:57:
         27:b7:f3:a2:f6:71:05:3f:db:41:8b:2a:0d:41:2e:cd:33:a5:
         2c:61:00:5d:ea:f6:01:a6:25:b2:18:10:dd:92:da:69:dd:a6:
         91:58:4a:44:b5:01:d5:5f:4e:fb:7a:88:78:0b:23:54:ee:a7:
         d3:83:67:d7:a2:83:e2:86:a9:4c:65:10:f4:25:d0:0b:52:a0:
         88:1c:a9:65:22:7f:5d:8d:78:f0:ab:20:d8:13:10:a9:ff:89:
         2b:6a:29:fa:6e:28:a7:8a:9b:90:a3:81:f1:57:f4:94:ba:b8:
         7a:bc:6d:13:43:c5:f5:43:3f:3c:8a:61:31:a2:75:8b:22:db:
         41:97:c3:d9:e5:53:d4:c9:7a:7a:23:f3:d6:b3:9d:b5:d8:54:
         c2:3a:78:20:b2:0a:d7:a5:0b:2f:77:e4:b7:cd:4c:ef:e1:52:
         af:7f:d3:bf:38:fb:39:1b:97:62:a0:2a:f0:4e:8b:39:a6:f6:
         e7:2a:bf:ec:bd:3a:df:e6:f0:54:9b:d8:44:c9:46:d1:56:5d:
         fd:4e:9c:eb:aa:aa:c6:8a:e7:a2:5d:ee:3f:79:f3:51:10:a6:
         1d:74:53:f6:3e:b0:4f:fe:67:6e:8e:27:90:77:d2:3c:31:f4:
         64:ca:6d:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6PtKjVdVQ0uUQl1MGazwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MTRlODE3MTU4ZGMzMDdlZWQ0ZDRjNmVkZjUxYTg5ZTU3
MDNlY2YwHhcNMjUwNjA3MTUwMTEyWhcNMjUwNjA4MTUwMTEyWjAzMTEwLwYDVQQD
Eyg4YTNjYzQxN2ViZWQ4MjI5YTg0OTg0ZGE1MTI3YjBkNDVlYTk5M2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmx957c7oTxkxxO4DlFrv/229M4x
s7/Jn6ZDEyEYYGF4t84acoeKypN5JJLKR1jGKfZzp+mB6d9IVaoK9624dV/2aOxD
wsJRjBSisrkOpo7xST1KxUS3yMUCl2dHJcW84B68otECyXMX4upp6hhrTgZXc7Yg
fc3HXX+5AkQJOuSOq0sd33ACygcBsAi+ADJGzf4lfDfpmKPClk5RSLFLBQ3lvXZC
S1kAWBF675D34gsmpP19eYJz/MTS90g21bwnfzP5poYw0aX/Qf8n1KsqFjOeUhoN
Lnfsdg4fLdVWGNKP7sHRSe9/7e6Hf8dyu2G5K/uX+q6rIVdbX3fJioDDhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIo8xBfr7YIpqEmE2lEnsNReqZOnMB8GA1UdIwQY
MBaAFHcU6BcVjcMH7tTUxu31GonlcD7PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHhUb0Z4V053d2Z1MU5URzdmVWFpZVZ3UHM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8xZTZkNTktMjdjZi00MTlmLWFkMWQt
NjIxMDY0MWU1MmQ2LzEvZHhUb0Z4V053d2Z1MU5URzdmVWFpZVZ3UHM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8xZTZkNTktMjdjZi00MTlmLWFkMWQtNjIxMDY0MWU1MmQ2
LzEvZHhUb0Z4V053d2Z1MU5URzdmVWFpZVZ3UHM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOlm3ASX
cr61lLRprlZv3V1XJ7fzovZxBT/bQYsqDUEuzTOlLGEAXer2AaYlshgQ3ZLaad2m
kVhKRLUB1V9O+3qIeAsjVO6n04Nn16KD4oapTGUQ9CXQC1KgiBypZSJ/XY148Ksg
2BMQqf+JK2op+m4op4qbkKOB8Vf0lLq4erxtE0PF9UM/PIphMaJ1iyLbQZfD2eVT
1Ml6eiPz1rOdtdhUwjp4ILIK16ULL3fkt81M7+FSr3/Tvzj7ORuXYqAq8E6LOab2
5yq/7L063+bwVJvYRMlG0VZd/U6c66qqxornol3uP3nzURCmHXRT9j6wT/5nbo4n
kHfSPDH0ZMptmw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:35:00 2025 by rpki-client