Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
File:                     8qsLWFucOWKI0g6c9mWuHeOfeDM.mft (raw, json)
Hash identifier:          wh+8mFG7Qur+ylvH6lKk1ttn1jV4T1LM5XkpfUKR68Q=
Subject key identifier:   26:23:D1:56:92:43:E4:79:89:C3:58:78:7A:3A:28:A4:39:18:72:8A
Authority key identifier: F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
Certificate issuer:       /CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Certificate serial:       0197493137FD955893C9C2D2FE58104B95C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 07:00:51 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:51 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:51 +0000
Files and hashes:         1: 8qsLWFucOWKI0g6c9mWuHeOfeDM.crl (hash: Si0kxb9+0QJgYGWpWFRT4aCM6FPwntCh9J4biOHP+ZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:37:fd:95:58:93:c9:c2:d2:fe:58:10:4b:95:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
        Validity
            Not Before: Jun  7 07:00:51 2025 GMT
            Not After : Jun  8 07:00:51 2025 GMT
        Subject: CN=2623d1569243e47989c358787a3a28a43918728a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fb:f8:36:d3:34:b3:19:5a:75:59:c4:bf:45:
                    32:e3:d3:8f:04:ee:01:90:c4:70:9e:dc:37:1d:ee:
                    86:b6:8f:72:24:52:31:83:56:e8:a9:a8:9d:7e:f4:
                    d4:de:89:76:5d:97:33:ca:b9:3a:35:c8:04:59:d2:
                    6c:1c:5a:d8:3e:4c:83:36:d2:bb:61:b9:14:e5:de:
                    76:c0:a8:14:00:22:cb:54:df:30:51:c2:e8:83:67:
                    1e:5c:32:1c:25:9d:a3:59:e9:df:c6:fe:79:fb:9c:
                    95:d0:8f:2f:22:61:4e:fb:a4:75:55:91:2d:b4:ef:
                    17:87:5a:81:aa:1f:75:ec:5b:15:ef:21:72:8e:14:
                    69:e2:42:0d:88:b4:a5:5e:4f:a0:02:dd:42:29:42:
                    91:29:6e:45:05:f0:81:0f:9a:21:b0:c1:65:04:e5:
                    97:85:31:ba:90:32:95:0d:18:0c:95:b0:56:1d:90:
                    8b:86:e4:f9:bb:70:b3:ab:45:3f:39:a8:47:9b:ec:
                    b1:34:3e:83:92:5f:92:00:9e:5a:5f:cf:ec:cd:48:
                    bc:d2:ed:9f:58:16:f2:dc:8a:ce:87:de:9e:6f:40:
                    56:dc:0d:96:7d:cc:16:4f:bd:d9:6d:23:1b:dd:52:
                    3d:37:8c:7f:6a:e6:23:3c:09:d8:ac:ac:d9:f4:56:
                    ab:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:23:D1:56:92:43:E4:79:89:C3:58:78:7A:3A:28:A4:39:18:72:8A
            X509v3 Authority Key Identifier:
                keyid:F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:6e:65:de:ae:54:c4:c2:08:4f:a7:c6:f5:5a:7b:42:29:91:
         a9:42:1a:72:99:8e:16:71:d9:bd:4b:52:c7:3c:a7:10:5a:c7:
         e8:82:22:c8:10:79:7a:a2:80:9b:a1:97:49:f9:92:d9:31:19:
         dc:0c:13:28:4c:6e:9f:2a:3a:0d:9a:ec:3f:18:58:59:f3:de:
         30:e6:99:27:60:72:4e:b1:b5:1b:20:6c:9b:31:fe:6f:cb:67:
         0a:3e:b6:ba:12:f5:ee:fa:03:70:0c:4c:e5:90:13:a2:79:e7:
         ae:52:6e:87:7a:ec:45:5a:0f:49:bb:6a:8f:5b:b0:00:dd:d8:
         f3:0e:b5:29:08:b5:17:e6:d3:9b:c6:fe:ac:b0:8a:18:9c:85:
         a3:fc:80:9b:6d:9b:7f:f6:07:e3:8c:c7:5f:f3:30:c7:19:42:
         09:19:86:78:f6:29:67:9d:91:eb:9d:d5:fa:d3:c2:00:61:8b:
         76:5f:2b:63:e7:13:6f:96:b9:99:a8:a6:fd:90:9c:87:fc:c0:
         b0:ed:13:44:a2:85:83:ba:58:a8:55:a3:f0:b6:2e:14:6f:6f:
         f9:fe:43:3e:a4:1b:4b:82:da:bd:e2:ac:82:a0:21:3f:db:d0:
         02:01:39:a9:82:cb:78:48:75:de:3a:71:a0:f8:be:04:df:76:
         79:bd:f5:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMTf9lViTycLS/lgQS5XIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYWIwYjU4NWI5YzM5NjI4OGQyMGU5Y2Y2NjVhZTFkZTM5
Zjc4MzMwHhcNMjUwNjA3MDcwMDUxWhcNMjUwNjA4MDcwMDUxWjAzMTEwLwYDVQQD
EygyNjIzZDE1NjkyNDNlNDc5ODljMzU4Nzg3YTNhMjhhNDM5MTg3MjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufv4NtM0sxladVnEv0Uy49OPBO4B
kMRwntw3He6Gto9yJFIxg1boqaidfvTU3ol2XZczyrk6NcgEWdJsHFrYPkyDNtK7
YbkU5d52wKgUACLLVN8wUcLog2ceXDIcJZ2jWenfxv55+5yV0I8vImFO+6R1VZEt
tO8Xh1qBqh917FsV7yFyjhRp4kINiLSlXk+gAt1CKUKRKW5FBfCBD5ohsMFlBOWX
hTG6kDKVDRgMlbBWHZCLhuT5u3Czq0U/OahHm+yxND6Dkl+SAJ5aX8/szUi80u2f
WBby3IrOh96eb0BW3A2WfcwWT73ZbSMb3VI9N4x/auYjPAnYrKzZ9FardQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYj0VaSQ+R5icNYeHo6KKQ5GHKKMB8GA1UdIwQY
MBaAFPKrC1hbnDliiNIOnPZlrh3jn3gzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9iYmZhMTktZGViYy00Yzc3LThkNjMt
OTA4YjI1MGNiYTc5LzEvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9iYmZhMTktZGViYy00Yzc3LThkNjMtOTA4YjI1MGNiYTc5
LzEvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD25l3q5U
xMIIT6fG9Vp7QimRqUIacpmOFnHZvUtSxzynEFrH6IIiyBB5eqKAm6GXSfmS2TEZ
3AwTKExunyo6DZrsPxhYWfPeMOaZJ2ByTrG1GyBsmzH+b8tnCj62uhL17voDcAxM
5ZATonnnrlJuh3rsRVoPSbtqj1uwAN3Y8w61KQi1F+bTm8b+rLCKGJyFo/yAm22b
f/YH44zHX/MwxxlCCRmGePYpZ52R653V+tPCAGGLdl8rY+cTb5a5maim/ZCch/zA
sO0TRKKFg7pYqFWj8LYuFG9v+f5DPqQbS4LaveKsgqAhP9vQAgE5qYLLeEh13jpx
oPi+BN92eb31QQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:51:02 2025 by rpki-client