Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft
File:                     siLLxLlfE3uN2qDj8k8FuTPMepo.mft (raw, json)
Hash identifier:          IarTzd9/pYq4VXIKt2w9KtsrnUQNlVr5gchg3fQDsh0=
Subject key identifier:   5B:D4:B8:B3:C6:7F:92:86:92:5E:0C:C6:A7:4E:A4:1C:0F:F7:EF:3A
Authority key identifier: B2:22:CB:C4:B9:5F:13:7B:8D:DA:A0:E3:F2:4F:05:B9:33:CC:7A:9A
Certificate issuer:       /CN=b222cbc4b95f137b8ddaa0e3f24f05b933cc7a9a
Certificate serial:       019873E24C19628F344DF459417AF013ED3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/siLLxLlfE3uN2qDj8k8FuTPMepo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft
Manifest number:          1614
Signing time:             Mon 04 Aug 2025 07:01:07 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:07 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:07 +0000
Files and hashes:         1: siLLxLlfE3uN2qDj8k8FuTPMepo.crl (hash: V+X3dPLbWTSY/MyV9QYCkr1CrpdOyHx77+id+d7g8ik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/siLLxLlfE3uN2qDj8k8FuTPMepo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:4c:19:62:8f:34:4d:f4:59:41:7a:f0:13:ed:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b222cbc4b95f137b8ddaa0e3f24f05b933cc7a9a
        Validity
            Not Before: Aug  4 07:01:07 2025 GMT
            Not After : Aug  5 07:01:07 2025 GMT
        Subject: CN=5bd4b8b3c67f9286925e0cc6a74ea41c0ff7ef3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d3:f9:b2:68:c2:86:38:fd:e2:1c:bd:6e:eb:
                    5e:9c:b5:25:95:58:be:6f:32:31:90:e4:4f:f9:8c:
                    2a:a1:1c:0a:a3:38:f4:91:b1:4a:ce:13:4e:cc:a0:
                    3c:54:1d:60:4c:a5:b5:97:be:1b:90:52:67:93:35:
                    23:40:6c:e4:33:1a:1e:3c:a2:2e:cc:db:cf:a8:a9:
                    9c:95:f5:39:25:80:ac:0b:71:f3:bd:bb:b6:a5:8e:
                    bb:8f:d7:43:f9:7d:c6:81:c0:fd:f7:e5:84:cf:91:
                    a4:d5:15:cc:5d:25:b1:8a:c2:52:34:79:52:79:bb:
                    ba:fa:ee:67:d0:47:c0:9e:15:8f:5a:44:2e:bd:1c:
                    b6:aa:a4:fe:f9:cf:75:9d:e2:4b:95:d6:61:f9:72:
                    43:25:41:52:e6:24:02:20:be:01:2b:4d:b8:0a:bb:
                    8d:c2:f2:76:1c:68:04:d0:50:4d:42:49:05:04:c4:
                    ec:a1:9f:15:18:93:f3:ce:ea:f2:d8:d8:82:92:90:
                    99:a4:b0:61:74:c0:eb:00:26:b2:8d:27:6b:df:4f:
                    d6:f3:7a:2b:63:f2:b1:27:37:f4:f4:e6:26:40:d0:
                    9c:f3:fe:30:95:c5:48:2b:71:5c:32:39:94:c3:1b:
                    5d:2c:a4:55:6c:e5:38:d8:fe:fc:53:40:24:2b:6d:
                    9e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D4:B8:B3:C6:7F:92:86:92:5E:0C:C6:A7:4E:A4:1C:0F:F7:EF:3A
            X509v3 Authority Key Identifier:
                keyid:B2:22:CB:C4:B9:5F:13:7B:8D:DA:A0:E3:F2:4F:05:B9:33:CC:7A:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siLLxLlfE3uN2qDj8k8FuTPMepo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:4b:6a:ec:fe:ae:41:76:04:67:02:75:88:90:e2:99:87:27:
         77:1f:9c:fa:9a:be:d6:f0:5e:43:8e:35:55:d6:b5:c6:a6:62:
         27:e5:bf:fc:8c:bd:28:f3:10:b7:6f:20:9a:d4:7b:2f:a7:4a:
         ae:85:bd:62:67:49:a3:2e:67:e5:9b:9d:39:c5:8f:3e:92:56:
         ca:b7:2f:c7:de:26:e7:e8:46:28:bd:6f:c5:b2:35:6b:80:50:
         66:6b:3b:65:0e:d2:5f:bd:9d:3b:26:eb:4e:21:d1:38:08:ec:
         c5:e6:c1:fc:1f:fe:7a:aa:26:5b:9c:28:f5:e6:cb:cc:75:86:
         e7:fd:92:84:9f:e8:7f:11:a5:e3:1c:12:61:06:54:ff:23:16:
         54:01:f9:09:db:64:51:f9:bd:6d:b9:88:5d:7c:c2:a1:7f:7c:
         2f:5a:f5:1a:90:ec:63:aa:33:99:fc:62:dd:1d:66:31:a0:e0:
         2b:52:66:f7:4e:e4:10:84:4a:d6:c2:24:92:7a:2d:b7:1f:60:
         4f:77:a4:45:f4:da:9f:ed:36:6a:b0:40:97:52:bd:b0:71:b3:
         d1:ef:fb:ec:27:86:64:54:93:27:28:0a:7b:87:77:68:94:52:
         4e:5d:6b:a2:7b:d4:11:2b:3c:45:7a:43:a9:25:95:02:80:7e:
         c2:e8:0b:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4kwZYo80TfRZQXrwE+06MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMjJjYmM0Yjk1ZjEzN2I4ZGRhYTBlM2YyNGYwNWI5MzNj
YzdhOWEwHhcNMjUwODA0MDcwMTA3WhcNMjUwODA1MDcwMTA3WjAzMTEwLwYDVQQD
Eyg1YmQ0YjhiM2M2N2Y5Mjg2OTI1ZTBjYzZhNzRlYTQxYzBmZjdlZjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytP5smjChjj94hy9butenLUllVi+
bzIxkORP+YwqoRwKozj0kbFKzhNOzKA8VB1gTKW1l74bkFJnkzUjQGzkMxoePKIu
zNvPqKmclfU5JYCsC3Hzvbu2pY67j9dD+X3GgcD99+WEz5Gk1RXMXSWxisJSNHlS
ebu6+u5n0EfAnhWPWkQuvRy2qqT++c91neJLldZh+XJDJUFS5iQCIL4BK024CruN
wvJ2HGgE0FBNQkkFBMTsoZ8VGJPzzury2NiCkpCZpLBhdMDrACayjSdr30/W83or
Y/KxJzf09OYmQNCc8/4wlcVIK3FcMjmUwxtdLKRVbOU42P78U0AkK22eXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvUuLPGf5KGkl4MxqdOpBwP9+86MB8GA1UdIwQY
MBaAFLIiy8S5XxN7jdqg4/JPBbkzzHqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2lMTHhMbGZFM3VOMnFEajhrOEZ1VFBNZXBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84MjY5YzQtOWMwMi00Y2MyLTlhOTUt
Y2YwZTc4NmExZmZkLzEvc2lMTHhMbGZFM3VOMnFEajhrOEZ1VFBNZXBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS84MjY5YzQtOWMwMi00Y2MyLTlhOTUtY2YwZTc4NmExZmZk
LzEvc2lMTHhMbGZFM3VOMnFEajhrOEZ1VFBNZXBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUtq7P6u
QXYEZwJ1iJDimYcndx+c+pq+1vBeQ441Vda1xqZiJ+W//Iy9KPMQt28gmtR7L6dK
roW9YmdJoy5n5ZudOcWPPpJWyrcvx94m5+hGKL1vxbI1a4BQZms7ZQ7SX72dOybr
TiHROAjsxebB/B/+eqomW5wo9ebLzHWG5/2ShJ/ofxGl4xwSYQZU/yMWVAH5Cdtk
Ufm9bbmIXXzCoX98L1r1GpDsY6ozmfxi3R1mMaDgK1Jm907kEIRK1sIkknottx9g
T3ekRfTan+02arBAl1K9sHGz0e/77CeGZFSTJygKe4d3aJRSTl1ronvUESs8RXpD
qSWVAoB+wugLiA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:48 2025 by rpki-client