Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
File:                     rUskfyJRG39TOwAtmfvsK1WbbC8.mft (raw, json)
Hash identifier:          5aVARA+1vzoQ28V9+xQ/fz+ADsvQOnt29isq0bxF6Kk=
Subject key identifier:   E1:64:D3:E9:AD:F9:71:C4:96:6A:25:22:B4:DD:F2:1C:8A:98:B1:94
Authority key identifier: AD:4B:24:7F:22:51:1B:7F:53:3B:00:2D:99:FB:EC:2B:55:9B:6C:2F
Certificate issuer:       /CN=ad4b247f22511b7f533b002d99fbec2b559b6c2f
Certificate serial:       0197481E196D7063C215B213364B84535A55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
Manifest number:          0405
Signing time:             Sat 07 Jun 2025 02:00:21 +0000
Manifest this update:     Sat 07 Jun 2025 02:00:21 +0000
Manifest next update:     Sun 08 Jun 2025 02:00:21 +0000
Files and hashes:         1: rUskfyJRG39TOwAtmfvsK1WbbC8.crl (hash: y1he2BrKOXfycbkP0eRW4GUSCq/bDikYyMBr3fpaKpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 02:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:1e:19:6d:70:63:c2:15:b2:13:36:4b:84:53:5a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad4b247f22511b7f533b002d99fbec2b559b6c2f
        Validity
            Not Before: Jun  7 02:00:21 2025 GMT
            Not After : Jun  8 02:00:21 2025 GMT
        Subject: CN=e164d3e9adf971c4966a2522b4ddf21c8a98b194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:05:7b:32:e8:14:7f:63:6f:e9:0d:39:2d:5e:
                    ec:fd:79:84:92:17:6a:a7:86:1e:0f:09:c4:fc:19:
                    c3:1c:d3:99:dc:76:5c:55:23:45:97:37:d4:44:dd:
                    74:67:08:61:71:63:ef:ec:67:20:c6:0b:f6:1f:50:
                    23:f5:1b:99:bc:a8:8c:85:8e:ff:27:13:7e:ef:3a:
                    c2:fb:62:e9:b2:54:71:ed:9e:d6:7b:71:52:a8:9f:
                    7f:0e:c5:f7:65:b4:0a:55:ed:14:c6:c8:74:f5:38:
                    07:0f:09:53:8d:48:ce:19:0c:47:6e:a2:82:2d:1d:
                    5b:14:ce:ef:36:53:94:09:74:ce:e3:42:a1:a6:e5:
                    d0:1d:cd:a1:da:e5:87:3f:e0:bd:6b:dc:11:2d:cd:
                    7b:04:39:c6:6f:3c:02:b7:2b:8c:f9:8c:ec:ba:c8:
                    d0:68:1b:4e:9f:82:4c:ab:6c:74:57:ea:26:8b:d9:
                    86:97:e2:e1:f3:5b:6a:b0:f7:f6:65:f1:84:1c:b7:
                    d8:a3:27:ab:ef:ee:43:f4:8a:5a:d5:c7:e0:a2:61:
                    37:37:57:dd:d3:19:db:dd:33:a5:12:2b:d8:b0:40:
                    21:72:31:1e:05:1e:89:fd:45:ee:4e:f4:aa:2f:30:
                    62:07:6b:3d:f3:6f:7e:6a:1e:f5:c2:78:d7:d6:7e:
                    7e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:64:D3:E9:AD:F9:71:C4:96:6A:25:22:B4:DD:F2:1C:8A:98:B1:94
            X509v3 Authority Key Identifier:
                keyid:AD:4B:24:7F:22:51:1B:7F:53:3B:00:2D:99:FB:EC:2B:55:9B:6C:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:78:09:b2:f2:a0:ef:10:13:df:cd:1e:27:55:33:0f:81:17:
         a5:f3:1a:0c:29:b6:3b:ec:a3:34:0b:2a:a9:1c:a1:28:a6:10:
         c5:6d:7a:70:92:8e:89:f7:d1:90:af:9e:71:bf:7d:64:51:88:
         80:82:99:8f:88:69:23:f0:46:a2:6a:d6:c0:8a:da:5a:9c:1b:
         2e:8e:ba:90:d2:3f:ec:5e:d5:9c:c5:77:c8:80:f0:76:81:4b:
         dd:11:6f:7d:61:ef:1d:f4:13:b7:6b:d5:85:99:b3:4e:8e:3f:
         56:54:7e:7a:97:20:e9:b8:0b:c7:70:17:9b:dc:ce:02:bb:0c:
         17:2d:e7:a0:3c:dd:a4:fe:6f:11:ca:8f:c7:ac:a9:65:b2:87:
         53:ce:5b:30:c5:d9:fe:36:4c:36:5f:a5:a6:97:4d:1e:15:ac:
         56:c5:4c:b2:c9:96:33:71:1b:42:83:34:9d:0b:46:c9:2b:e6:
         38:11:d7:af:5a:00:16:75:83:1f:c8:85:3e:b3:ae:cf:59:66:
         a0:d3:ae:c9:68:36:0e:f5:82:cb:af:8b:1a:08:83:ba:66:ef:
         44:56:9c:1f:c7:06:a3:85:7d:16:f8:2f:10:a9:ca:66:71:97:
         a1:98:46:81:07:77:80:aa:a2:dc:89:89:24:fa:6a:44:8a:ec:
         49:0d:45:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIHhltcGPCFbITNkuEU1pVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNGIyNDdmMjI1MTFiN2Y1MzNiMDAyZDk5ZmJlYzJiNTU5
YjZjMmYwHhcNMjUwNjA3MDIwMDIxWhcNMjUwNjA4MDIwMDIxWjAzMTEwLwYDVQQD
EyhlMTY0ZDNlOWFkZjk3MWM0OTY2YTI1MjJiNGRkZjIxYzhhOThiMTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAV7MugUf2Nv6Q05LV7s/XmEkhdq
p4YeDwnE/BnDHNOZ3HZcVSNFlzfURN10ZwhhcWPv7Gcgxgv2H1Aj9RuZvKiMhY7/
JxN+7zrC+2LpslRx7Z7We3FSqJ9/DsX3ZbQKVe0Uxsh09TgHDwlTjUjOGQxHbqKC
LR1bFM7vNlOUCXTO40KhpuXQHc2h2uWHP+C9a9wRLc17BDnGbzwCtyuM+YzsusjQ
aBtOn4JMq2x0V+omi9mGl+Lh81tqsPf2ZfGEHLfYoyer7+5D9Ipa1cfgomE3N1fd
0xnb3TOlEivYsEAhcjEeBR6J/UXuTvSqLzBiB2s9829+ah71wnjX1n5+vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFk0+mt+XHElmolIrTd8hyKmLGUMB8GA1UdIwQY
MBaAFK1LJH8iURt/UzsALZn77CtVm2wvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclVza2Z5SlJHMzlUT3dBdG1mdnNLMVdiYkM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8yOTI4OTktZGRiNi00MWQ0LTk2OTgt
ZDUxOGQxNjMxMDViLzEvclVza2Z5SlJHMzlUT3dBdG1mdnNLMVdiYkM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8yOTI4OTktZGRiNi00MWQ0LTk2OTgtZDUxOGQxNjMxMDVi
LzEvclVza2Z5SlJHMzlUT3dBdG1mdnNLMVdiYkM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXgJsvKg
7xAT380eJ1UzD4EXpfMaDCm2O+yjNAsqqRyhKKYQxW16cJKOiffRkK+ecb99ZFGI
gIKZj4hpI/BGomrWwIraWpwbLo66kNI/7F7VnMV3yIDwdoFL3RFvfWHvHfQTt2vV
hZmzTo4/VlR+epcg6bgLx3AXm9zOArsMFy3noDzdpP5vEcqPx6ypZbKHU85bMMXZ
/jZMNl+lppdNHhWsVsVMssmWM3EbQoM0nQtGySvmOBHXr1oAFnWDH8iFPrOuz1lm
oNOuyWg2DvWCy6+LGgiDumbvRFacH8cGo4V9FvgvEKnKZnGXoZhGgQd3gKqi3ImJ
JPpqRIrsSQ1FRg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:03:24 2025 by rpki-client