Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
File:                     aZ11B_muHIs_3kVDOu6Pz5haIfo.mft (raw, json)
Hash identifier:          3qfst/z64vKzVtPuUsJkBI4dttewtWtFP46JzdRq3Cg=
Subject key identifier:   90:16:DB:21:9E:4B:A5:10:42:A4:38:79:FC:A0:3A:53:21:1C:37:6F
Authority key identifier: 69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA
Certificate issuer:       /CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
Certificate serial:       01975045992A70F421D1178B9BB05E07E8D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
Manifest number:          0E15
Signing time:             Sun 08 Jun 2025 16:00:27 +0000
Manifest this update:     Sun 08 Jun 2025 16:00:27 +0000
Manifest next update:     Mon 09 Jun 2025 16:00:27 +0000
Files and hashes:         1: aZ11B_muHIs_3kVDOu6Pz5haIfo.crl (hash: btzfT/dJ8sukBR5Vh3++i5At+aCLWgu3bzsO8tU5KX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:45:99:2a:70:f4:21:d1:17:8b:9b:b0:5e:07:e8:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
        Validity
            Not Before: Jun  8 16:00:27 2025 GMT
            Not After : Jun  9 16:00:27 2025 GMT
        Subject: CN=9016db219e4ba51042a43879fca03a53211c376f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8d:6a:15:5a:a8:3c:a2:3f:7e:82:8c:e4:13:
                    2f:26:5f:2c:45:57:9b:c7:25:b1:67:eb:39:d0:44:
                    b7:b3:2b:7d:f8:f3:bd:2f:18:9f:73:ad:d7:d3:7c:
                    65:1e:00:df:42:93:0c:a0:a9:43:c0:9e:2c:21:39:
                    f5:75:f1:0d:6e:9b:b7:49:51:d3:2a:50:a9:7e:63:
                    6e:68:81:59:27:1e:f8:62:89:8b:9a:aa:44:7d:42:
                    7b:cd:73:c9:8e:17:6f:f8:d1:3f:66:c1:99:7e:cb:
                    90:1e:a0:5b:d4:50:ed:37:1c:31:34:8d:a5:08:18:
                    95:d8:4c:c0:cd:63:8f:b4:bf:9b:e5:59:0f:03:6b:
                    62:f1:77:00:6c:7e:b8:9b:6a:0a:c8:c8:9b:f0:f4:
                    a6:54:34:f3:a6:2a:18:ef:5a:f8:25:37:23:04:1c:
                    d7:cc:cd:f8:e0:1a:90:97:00:31:fd:36:17:69:41:
                    99:07:7c:2f:1a:da:8e:26:94:eb:4d:5e:67:a5:88:
                    34:6c:2e:f0:6d:75:fd:1d:0a:d3:c8:11:0c:53:3b:
                    bf:dd:c0:09:e3:d4:d1:ff:0d:05:25:1f:ef:1a:76:
                    a5:e2:d9:69:ae:11:71:6a:ab:89:f8:65:91:09:0c:
                    51:6f:e0:4b:ee:31:5d:f2:b7:27:f3:5d:7c:4c:71:
                    4e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:16:DB:21:9E:4B:A5:10:42:A4:38:79:FC:A0:3A:53:21:1C:37:6F
            X509v3 Authority Key Identifier:
                keyid:69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:57:4d:af:dc:f9:29:12:47:2b:22:06:24:fa:79:fd:c6:07:
         0d:34:69:38:b3:d9:54:eb:bb:ad:14:dc:de:33:93:23:ce:95:
         89:80:ac:1e:b4:eb:16:8e:b0:7d:33:30:9d:2a:fe:c4:40:d6:
         ef:ce:c1:81:3f:32:bb:e4:6e:e5:55:79:ff:bf:d3:d9:5e:90:
         f4:95:8a:79:20:9e:7b:27:6a:a4:dd:07:e5:c0:14:61:a5:0a:
         63:33:63:30:7e:6c:30:83:74:d7:6c:19:cb:f7:58:34:ef:7f:
         c5:0d:6a:cf:9b:08:01:1e:16:25:78:5a:17:0f:3e:43:d3:55:
         8a:25:c0:ee:e5:c8:c6:71:17:95:44:ac:34:e1:d7:09:e3:1c:
         28:ce:4c:14:49:99:10:b3:5b:6a:16:a6:ba:6f:98:f2:b2:f1:
         93:14:69:5d:62:26:0f:81:d5:72:8c:bb:0b:c3:8f:59:e1:3d:
         11:ac:91:7d:c5:23:0d:95:37:f4:31:18:42:05:cb:7d:07:b7:
         ab:b5:45:5a:24:19:40:6f:d6:dd:bd:6f:2f:af:cc:38:19:ec:
         d6:17:b2:e7:0e:b8:f3:3f:fd:b6:07:de:b9:7d:7a:bd:0f:88:
         ba:57:5f:65:ab:65:73:7b:6b:02:df:d1:56:3f:c3:7b:8d:04:
         4b:8a:c6:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQRZkqcPQh0ReLm7BeB+jRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OWQ3NTA3ZjlhZTFjOGIzZmRlNDU0MzNhZWU4ZmNmOTg1
YTIxZmEwHhcNMjUwNjA4MTYwMDI3WhcNMjUwNjA5MTYwMDI3WjAzMTEwLwYDVQQD
Eyg5MDE2ZGIyMTllNGJhNTEwNDJhNDM4NzlmY2EwM2E1MzIxMWMzNzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu41qFVqoPKI/foKM5BMvJl8sRVeb
xyWxZ+s50ES3syt9+PO9Lxifc63X03xlHgDfQpMMoKlDwJ4sITn1dfENbpu3SVHT
KlCpfmNuaIFZJx74YomLmqpEfUJ7zXPJjhdv+NE/ZsGZfsuQHqBb1FDtNxwxNI2l
CBiV2EzAzWOPtL+b5VkPA2ti8XcAbH64m2oKyMib8PSmVDTzpioY71r4JTcjBBzX
zM344BqQlwAx/TYXaUGZB3wvGtqOJpTrTV5npYg0bC7wbXX9HQrTyBEMUzu/3cAJ
49TR/w0FJR/vGnal4tlprhFxaquJ+GWRCQxRb+BL7jFd8rcn8118THFOwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAW2yGeS6UQQqQ4efygOlMhHDdvMB8GA1UdIwQY
MBaAFGmddQf5rhyLP95FQzruj8+YWiH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81NWM3MWItM2QwNi00MzZmLTgxMjIt
MjI0MTY1ZWMxODBhLzEvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC81NWM3MWItM2QwNi00MzZmLTgxMjItMjI0MTY1ZWMxODBh
LzEvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1dNr9z5
KRJHKyIGJPp5/cYHDTRpOLPZVOu7rRTc3jOTI86ViYCsHrTrFo6wfTMwnSr+xEDW
787BgT8yu+Ru5VV5/7/T2V6Q9JWKeSCeeydqpN0H5cAUYaUKYzNjMH5sMIN012wZ
y/dYNO9/xQ1qz5sIAR4WJXhaFw8+Q9NViiXA7uXIxnEXlUSsNOHXCeMcKM5MFEmZ
ELNbahamum+Y8rLxkxRpXWImD4HVcoy7C8OPWeE9EayRfcUjDZU39DEYQgXLfQe3
q7VFWiQZQG/W3b1vL6/MOBns1hey5w648z/9tgfeuX16vQ+IuldfZatlc3trAt/R
Vj/De40ES4rGVA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 03:25:25 2025 by rpki-client