Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
File:                     5tM83lfaCcfZM3ce6hQllAdvmiM.mft (raw, json)
Hash identifier:          1XEKJz82XasqrxSukpoc9QY7p+ov6nQpqZiVpRzCO8M=
Subject key identifier:   4F:0D:BD:23:2F:5C:97:19:9B:E4:12:AD:1C:C9:C2:8A:27:49:6F:C7
Authority key identifier: E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
Certificate issuer:       /CN=e6d33cde57da09c7d933771eea142594076f9a23
Certificate serial:       019749D63A916A18B22ED79FC8D15D580921
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 10:01:05 +0000
Manifest this update:     Sat 07 Jun 2025 10:01:05 +0000
Manifest next update:     Sun 08 Jun 2025 10:01:05 +0000
Files and hashes:         1: 5tM83lfaCcfZM3ce6hQllAdvmiM.crl (hash: E/UNEkLhxP7pqPeWAs8mTFHezLJoGH/58xH077P27p0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d6:3a:91:6a:18:b2:2e:d7:9f:c8:d1:5d:58:09:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6d33cde57da09c7d933771eea142594076f9a23
        Validity
            Not Before: Jun  7 10:01:05 2025 GMT
            Not After : Jun  8 10:01:05 2025 GMT
        Subject: CN=4f0dbd232f5c97199be412ad1cc9c28a27496fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:86:a3:83:a1:a7:d4:af:56:88:58:4a:2d:5e:
                    ad:3b:e6:82:f2:cf:86:b5:c2:dc:87:46:32:76:32:
                    26:28:7c:53:c9:19:a3:e6:f9:26:8d:1f:e6:5d:0b:
                    f3:a0:8d:7f:59:cb:a5:f9:4f:af:34:54:ff:e3:02:
                    fd:f2:05:95:56:d7:3e:1b:b3:94:ec:24:2a:c4:c1:
                    f6:f2:8f:16:eb:78:b3:c7:2c:17:ba:8d:8b:15:59:
                    1d:1e:56:c8:fa:4b:95:30:59:e9:b8:aa:13:c8:4b:
                    66:e4:71:4e:40:fa:85:ca:d5:02:35:be:b8:60:c9:
                    8d:66:24:f0:d4:90:74:ee:43:03:ab:2f:96:74:16:
                    f2:6f:9d:ac:51:ed:b9:33:27:4d:e3:0b:dc:e0:14:
                    20:e7:8d:68:07:4e:63:e6:f8:1f:88:e1:4a:ec:03:
                    fe:84:81:a8:d8:47:81:87:97:50:18:06:58:11:d8:
                    72:42:8f:fe:e1:8e:0e:fd:51:86:3e:21:b1:50:b6:
                    50:a9:f6:8f:3d:4e:08:36:54:72:52:3a:45:4d:5d:
                    16:56:c7:ad:a6:ac:f2:2b:39:82:f9:3f:32:a8:82:
                    71:da:2b:d2:11:8c:b3:54:29:8e:d4:66:46:4b:86:
                    89:52:12:24:22:a1:6d:f9:9f:91:27:39:27:c7:ac:
                    93:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0D:BD:23:2F:5C:97:19:9B:E4:12:AD:1C:C9:C2:8A:27:49:6F:C7
            X509v3 Authority Key Identifier:
                keyid:E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:f0:93:31:09:e4:8e:7b:bf:07:04:2f:fb:21:12:8a:bf:01:
         47:78:18:2f:27:75:c3:e1:8c:e5:37:f4:48:90:bf:ee:61:fc:
         7b:aa:b3:65:a3:41:2f:e0:a0:18:d5:95:5f:fb:35:da:1c:70:
         42:2b:62:11:41:bb:cf:35:66:72:3f:d0:79:16:b4:8d:38:4c:
         52:a0:6a:d5:8d:bf:79:cd:f6:ac:fa:3d:dd:20:81:fe:d6:c3:
         03:90:25:7b:f5:96:43:fa:37:b1:c6:bf:ca:a7:f4:df:1f:e3:
         61:a5:6d:d2:ed:82:98:fe:05:e0:73:9f:ea:76:b4:4d:2b:f1:
         ae:28:c2:13:6d:3d:d7:7c:ac:cf:9b:d2:f9:c6:8f:c4:1a:67:
         95:72:74:7d:d3:35:0d:21:df:1b:91:b7:8e:5a:fa:49:e0:3c:
         fd:10:1a:34:8e:0c:eb:29:0d:37:08:dd:e3:3b:74:1c:b2:f7:
         2f:8c:ae:70:8b:7f:cb:6b:37:77:27:5c:ea:00:68:4c:20:54:
         e7:ea:a2:5e:0d:aa:91:f0:64:95:84:10:c4:b9:f2:5e:04:27:
         e7:fd:69:96:be:97:8f:f1:9c:6e:7c:df:ac:a4:16:23:de:0d:
         73:de:c7:8b:69:0e:b0:a8:18:b1:76:1c:1c:4f:97:de:8a:70:
         00:df:6c:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1jqRahiyLtefyNFdWAkhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZDMzY2RlNTdkYTA5YzdkOTMzNzcxZWVhMTQyNTk0MDc2
ZjlhMjMwHhcNMjUwNjA3MTAwMTA1WhcNMjUwNjA4MTAwMTA1WjAzMTEwLwYDVQQD
Eyg0ZjBkYmQyMzJmNWM5NzE5OWJlNDEyYWQxY2M5YzI4YTI3NDk2ZmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4ajg6Gn1K9WiFhKLV6tO+aC8s+G
tcLch0YydjImKHxTyRmj5vkmjR/mXQvzoI1/Wcul+U+vNFT/4wL98gWVVtc+G7OU
7CQqxMH28o8W63izxywXuo2LFVkdHlbI+kuVMFnpuKoTyEtm5HFOQPqFytUCNb64
YMmNZiTw1JB07kMDqy+WdBbyb52sUe25MydN4wvc4BQg541oB05j5vgfiOFK7AP+
hIGo2EeBh5dQGAZYEdhyQo/+4Y4O/VGGPiGxULZQqfaPPU4INlRyUjpFTV0WVset
pqzyKzmC+T8yqIJx2ivSEYyzVCmO1GZGS4aJUhIkIqFt+Z+RJzknx6yTbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8NvSMvXJcZm+QSrRzJwoonSW/HMB8GA1UdIwQY
MBaAFObTPN5X2gnH2TN3HuoUJZQHb5ojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXRNODNsZmFDY2ZaTTNjZTZoUWxsQWR2bWlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80ZjlkNGMtMTk0Ni00YWY5LThjMjIt
NDE5NzUzZDNmODhkLzEvNXRNODNsZmFDY2ZaTTNjZTZoUWxsQWR2bWlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80ZjlkNGMtMTk0Ni00YWY5LThjMjItNDE5NzUzZDNmODhk
LzEvNXRNODNsZmFDY2ZaTTNjZTZoUWxsQWR2bWlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfCTMQnk
jnu/BwQv+yESir8BR3gYLyd1w+GM5Tf0SJC/7mH8e6qzZaNBL+CgGNWVX/s12hxw
QitiEUG7zzVmcj/QeRa0jThMUqBq1Y2/ec32rPo93SCB/tbDA5Ale/WWQ/o3sca/
yqf03x/jYaVt0u2CmP4F4HOf6na0TSvxrijCE20913ysz5vS+caPxBpnlXJ0fdM1
DSHfG5G3jlr6SeA8/RAaNI4M6ykNNwjd4zt0HLL3L4yucIt/y2s3dydc6gBoTCBU
5+qiXg2qkfBklYQQxLnyXgQn5/1plr6Xj/GcbnzfrKQWI94Nc97Hi2kOsKgYsXYc
HE+X3opwAN9sPA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:47:15 2025 by rpki-client