Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft
File:                     _-W67rcNfV5-7SxR09WEe7NhtFU.mft (raw, json)
Hash identifier:          NN/D/QfaddCCZOa9B6K93jqXOFqxkKqvHuG9UYb1Wi8=
Subject key identifier:   1A:9F:BF:1E:A3:A6:12:2C:3D:9D:D6:CD:AA:60:18:7E:A3:46:8D:D6
Authority key identifier: FF:E5:BA:EE:B7:0D:7D:5E:7E:ED:2C:51:D3:D5:84:7B:B3:61:B4:55
Certificate issuer:       /CN=ffe5baeeb70d7d5e7eed2c51d3d5847bb361b455
Certificate serial:       01974967F88C79931AF1841147D760B384D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_-W67rcNfV5-7SxR09WEe7NhtFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft
Manifest number:          FB
Signing time:             Sat 07 Jun 2025 08:00:39 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:39 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:39 +0000
Files and hashes:         1: _-W67rcNfV5-7SxR09WEe7NhtFU.crl (hash: M9wiq6bcdCX1fwhNT78rbvCf/Q79bNjpW/pWxioD8F8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_-W67rcNfV5-7SxR09WEe7NhtFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:f8:8c:79:93:1a:f1:84:11:47:d7:60:b3:84:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffe5baeeb70d7d5e7eed2c51d3d5847bb361b455
        Validity
            Not Before: Jun  7 08:00:39 2025 GMT
            Not After : Jun  8 08:00:39 2025 GMT
        Subject: CN=1a9fbf1ea3a6122c3d9dd6cdaa60187ea3468dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6a:ea:b5:87:6a:85:94:0b:4b:b8:b6:2a:db:
                    41:cb:5a:0e:96:01:bc:c5:41:46:6b:9c:76:be:eb:
                    3d:ea:7e:3b:1b:79:f3:5f:d1:2f:6a:92:8c:90:53:
                    7a:d6:ab:6c:05:b2:a8:74:50:d2:d6:ec:b7:9f:2f:
                    ce:97:72:57:2b:3c:55:78:de:27:48:53:3f:25:9c:
                    67:1d:b3:59:a5:27:ee:c6:84:81:99:d8:8a:d4:e4:
                    f9:c6:3e:1c:34:f4:65:af:f1:e8:1d:a4:74:6b:60:
                    e1:46:ab:6d:b8:23:d4:db:4c:56:ec:50:a0:44:8f:
                    24:f7:3c:c1:1c:6b:bd:df:e0:c3:c8:5a:59:c8:52:
                    d3:87:d6:72:cd:4d:06:fc:45:ca:a5:c9:81:ad:43:
                    a5:e7:94:51:5a:7d:14:d7:d3:16:ac:5e:34:d1:be:
                    a1:db:89:8a:a3:4a:57:44:d3:d7:a9:79:51:3e:f9:
                    8f:06:41:3c:28:db:bb:47:c8:c5:e3:f3:d8:87:dd:
                    2e:f5:d5:e3:59:cf:21:44:ab:ce:bb:b3:dd:9d:bc:
                    e8:17:c1:e1:b3:27:52:04:4b:b0:e0:fe:75:e7:14:
                    8f:b9:68:31:11:d4:b2:2f:86:d0:2c:95:c8:6d:0d:
                    07:e2:58:4c:0a:3b:74:1b:8d:0e:e0:ad:f4:c0:63:
                    67:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9F:BF:1E:A3:A6:12:2C:3D:9D:D6:CD:AA:60:18:7E:A3:46:8D:D6
            X509v3 Authority Key Identifier:
                keyid:FF:E5:BA:EE:B7:0D:7D:5E:7E:ED:2C:51:D3:D5:84:7B:B3:61:B4:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-W67rcNfV5-7SxR09WEe7NhtFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:88:89:49:f9:1b:49:62:77:fe:17:de:f7:d9:82:20:ea:f6:
         95:fc:72:35:77:cc:85:99:eb:28:43:aa:04:95:a7:c8:60:19:
         16:b3:70:42:c7:49:57:3b:f8:de:fe:41:6a:41:e6:ae:e8:8f:
         13:ca:d8:39:9f:6b:a8:30:ac:d1:e7:88:18:67:b9:96:a5:2b:
         5d:70:a0:56:9b:57:73:29:f1:99:25:13:68:31:a3:05:89:eb:
         37:cb:70:6c:96:ee:19:5f:75:d4:27:12:98:71:f0:ff:11:1b:
         f3:34:29:88:45:49:a2:49:fa:41:6c:d0:5d:4c:50:e0:04:9f:
         e9:4c:7d:5e:63:26:5e:1a:ca:30:60:05:c3:a2:98:69:1d:5a:
         b4:44:af:77:ba:0f:7f:a2:ab:ac:45:7e:9c:46:53:44:71:12:
         a2:cc:12:83:d8:44:b7:ad:03:5a:1f:52:e1:c0:a5:35:68:e8:
         c9:54:3b:76:ee:8a:26:29:03:38:62:19:1a:08:ee:68:bf:65:
         6f:f4:3a:9f:70:a3:3c:f9:10:24:2a:5d:d1:49:15:95:2b:35:
         61:54:e8:a6:41:01:b3:2f:85:77:30:16:55:2e:ea:2d:f0:82:
         ba:2a:65:1f:2c:06:b9:f2:7b:7d:b5:18:0b:1b:a1:7f:51:1d:
         c2:0c:98:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJZ/iMeZMa8YQRR9dgs4TTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZTViYWVlYjcwZDdkNWU3ZWVkMmM1MWQzZDU4NDdiYjM2
MWI0NTUwHhcNMjUwNjA3MDgwMDM5WhcNMjUwNjA4MDgwMDM5WjAzMTEwLwYDVQQD
EygxYTlmYmYxZWEzYTYxMjJjM2Q5ZGQ2Y2RhYTYwMTg3ZWEzNDY4ZGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2rqtYdqhZQLS7i2KttBy1oOlgG8
xUFGa5x2vus96n47G3nzX9EvapKMkFN61qtsBbKodFDS1uy3ny/Ol3JXKzxVeN4n
SFM/JZxnHbNZpSfuxoSBmdiK1OT5xj4cNPRlr/HoHaR0a2DhRqttuCPU20xW7FCg
RI8k9zzBHGu93+DDyFpZyFLTh9ZyzU0G/EXKpcmBrUOl55RRWn0U19MWrF400b6h
24mKo0pXRNPXqXlRPvmPBkE8KNu7R8jF4/PYh90u9dXjWc8hRKvOu7PdnbzoF8Hh
sydSBEuw4P515xSPuWgxEdSyL4bQLJXIbQ0H4lhMCjt0G40O4K30wGNnJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqfvx6jphIsPZ3WzapgGH6jRo3WMB8GA1UdIwQY
MBaAFP/luu63DX1efu0sUdPVhHuzYbRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXy1XNjdyY05mVjUtN1N4UjA5V0VlN05odEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kMmIyM2ItNjNlMi00Y2MwLWE4N2Ut
Y2QwYjI2YjRlY2I4LzEvXy1XNjdyY05mVjUtN1N4UjA5V0VlN05odEZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9kMmIyM2ItNjNlMi00Y2MwLWE4N2UtY2QwYjI2YjRlY2I4
LzEvXy1XNjdyY05mVjUtN1N4UjA5V0VlN05odEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIiJSfkb
SWJ3/hfe99mCIOr2lfxyNXfMhZnrKEOqBJWnyGAZFrNwQsdJVzv43v5BakHmruiP
E8rYOZ9rqDCs0eeIGGe5lqUrXXCgVptXcynxmSUTaDGjBYnrN8twbJbuGV911CcS
mHHw/xEb8zQpiEVJokn6QWzQXUxQ4ASf6Ux9XmMmXhrKMGAFw6KYaR1atESvd7oP
f6KrrEV+nEZTRHESoswSg9hEt60DWh9S4cClNWjoyVQ7du6KJikDOGIZGgjuaL9l
b/Q6n3CjPPkQJCpd0UkVlSs1YVTopkEBsy+FdzAWVS7qLfCCuiplHywGufJ7fbUY
Cxuhf1EdwgyYPQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:48:04 2025 by rpki-client