Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
File:                     OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft (raw, json)
Hash identifier:          nG1i1IfWgbGOIm/yAzQSJsh89X1fvb0oW4OFMRIhVWA=
Subject key identifier:   C6:09:21:71:31:14:35:D5:17:1F:B8:E8:68:C3:08:28:DB:63:42:14
Authority key identifier: 39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
Certificate issuer:       /CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Certificate serial:       01974A7AE7D70B357BF28CB3ECA83A55482D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
Manifest number:          1546
Signing time:             Sat 07 Jun 2025 13:00:57 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:57 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:57 +0000
Files and hashes:         1: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl (hash: PsuylG6rHkdlYd64AKAWP2CWf8xpxlRvrUD69WelUTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:e7:d7:0b:35:7b:f2:8c:b3:ec:a8:3a:55:48:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
        Validity
            Not Before: Jun  7 13:00:57 2025 GMT
            Not After : Jun  8 13:00:57 2025 GMT
        Subject: CN=c6092171311435d5171fb8e868c30828db634214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:01:95:e8:42:e2:5a:fe:43:f4:96:50:9c:f0:
                    f8:4f:8c:50:6e:bd:58:a8:f2:40:c7:43:8a:61:a1:
                    4b:54:45:4d:0a:bb:e4:7c:b7:0e:a3:22:63:c7:75:
                    8f:ed:cc:e4:63:a2:70:57:44:42:a6:92:75:83:31:
                    a6:34:d4:cb:1e:ee:b6:3e:16:32:4c:1a:aa:45:fd:
                    76:21:b1:56:26:44:5a:54:aa:62:40:6c:29:68:99:
                    22:83:99:b1:c6:90:5c:90:93:65:1f:d6:dc:11:06:
                    57:fc:cb:82:a2:ea:9b:53:7e:00:d2:c5:b0:f8:59:
                    7b:10:a6:6b:b7:5f:35:99:85:cf:cc:09:3d:36:d4:
                    0a:d8:0d:7d:f5:99:c7:81:8f:15:9a:06:12:fc:4f:
                    98:19:fb:3f:2a:4e:f0:28:17:75:6b:3a:c6:ec:51:
                    5c:24:7e:e3:c3:dc:4b:e0:c3:4d:52:9c:33:e7:96:
                    0f:b0:5a:e4:4b:3d:2f:e3:47:6c:31:b4:94:53:87:
                    ef:9b:61:0b:b7:b0:d2:d8:d8:78:a8:cc:68:8c:4d:
                    9c:fd:13:56:7c:8d:db:8b:27:3f:56:36:32:06:f1:
                    9f:4e:48:d3:f1:56:2c:48:c0:5c:a6:2b:ca:e2:8f:
                    cd:4e:f5:05:ed:ec:9d:96:64:50:a7:33:13:9f:74:
                    d4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:09:21:71:31:14:35:D5:17:1F:B8:E8:68:C3:08:28:DB:63:42:14
            X509v3 Authority Key Identifier:
                keyid:39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:60:92:30:82:90:2b:b8:e3:47:dd:42:02:c9:49:ba:da:b0:
         cd:3a:ee:9c:aa:58:66:45:6f:0a:e5:68:14:76:cf:3a:eb:61:
         49:f1:a1:49:c5:67:2e:fe:eb:0e:de:08:0b:e4:59:71:17:90:
         4b:86:0d:b7:fd:da:10:b1:2b:aa:75:77:f6:9b:7a:0d:93:7d:
         e6:6f:2c:62:18:2f:7d:ef:02:b9:86:bf:ad:70:4a:52:fc:e8:
         c5:ae:0f:77:23:f8:50:88:89:92:a0:76:f1:54:3c:be:31:41:
         ef:de:8a:87:4e:0a:c0:26:1d:4b:d0:f1:0b:64:0a:65:42:d9:
         22:0f:45:c3:43:96:70:40:66:11:47:22:94:f7:d6:c9:1d:88:
         45:b7:1e:34:ae:33:f1:4b:6d:37:d7:eb:21:6f:b6:fe:4d:a9:
         95:12:72:5f:ec:72:74:11:67:40:df:9a:19:5a:49:68:d6:fa:
         b3:fe:ae:b2:ca:0b:11:a1:2a:10:57:62:2c:4a:56:e0:3c:ff:
         cd:08:21:de:2d:58:37:ef:de:f4:7e:e8:e3:51:7c:66:8b:7b:
         7a:e4:6f:e7:b6:d1:d8:e1:7b:45:30:f3:4a:e5:ed:49:ce:35:
         95:65:62:02:e9:6f:1e:5c:da:79:79:3d:8e:d4:95:c1:07:df:
         f9:b8:bb:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKeufXCzV78oyz7Kg6VUgtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NjhlZTBiMWY0MGNiYjEzYTg4ZmRlNGMwYjExNjgzMDRk
ZjJkNmIwHhcNMjUwNjA3MTMwMDU3WhcNMjUwNjA4MTMwMDU3WjAzMTEwLwYDVQQD
EyhjNjA5MjE3MTMxMTQzNWQ1MTcxZmI4ZTg2OGMzMDgyOGRiNjM0MjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wGV6ELiWv5D9JZQnPD4T4xQbr1Y
qPJAx0OKYaFLVEVNCrvkfLcOoyJjx3WP7czkY6JwV0RCppJ1gzGmNNTLHu62PhYy
TBqqRf12IbFWJkRaVKpiQGwpaJkig5mxxpBckJNlH9bcEQZX/MuCouqbU34A0sWw
+Fl7EKZrt181mYXPzAk9NtQK2A199ZnHgY8VmgYS/E+YGfs/Kk7wKBd1azrG7FFc
JH7jw9xL4MNNUpwz55YPsFrkSz0v40dsMbSUU4fvm2ELt7DS2Nh4qMxojE2c/RNW
fI3biyc/VjYyBvGfTkjT8VYsSMBcpivK4o/NTvUF7eydlmRQpzMTn3TUfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYJIXExFDXVFx+46GjDCCjbY0IUMB8GA1UdIwQY
MBaAFDlo7gsfQMuxOoj95MCxFoME3y1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1dqdUN4OUF5N0U2aVAza3dMRVdnd1RmTFdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85ZjY5ZDQtNjVlZi00ZDVlLTljMmYt
Nzk5OGY0YmRmMjFjLzEvT1dqdUN4OUF5N0U2aVAza3dMRVdnd1RmTFdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS85ZjY5ZDQtNjVlZi00ZDVlLTljMmYtNzk5OGY0YmRmMjFj
LzEvT1dqdUN4OUF5N0U2aVAza3dMRVdnd1RmTFdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2CSMIKQ
K7jjR91CAslJutqwzTrunKpYZkVvCuVoFHbPOuthSfGhScVnLv7rDt4IC+RZcReQ
S4YNt/3aELErqnV39pt6DZN95m8sYhgvfe8CuYa/rXBKUvzoxa4PdyP4UIiJkqB2
8VQ8vjFB796Kh04KwCYdS9DxC2QKZULZIg9Fw0OWcEBmEUcilPfWyR2IRbceNK4z
8UttN9frIW+2/k2plRJyX+xydBFnQN+aGVpJaNb6s/6ussoLEaEqEFdiLEpW4Dz/
zQgh3i1YN+/e9H7o41F8Zot7euRv57bR2OF7RTDzSuXtSc41lWViAulvHlzaeXk9
jtSVwQff+bi7SA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:21:08 2025 by rpki-client