Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
File:                     B2KQRhen92vQw05C0bl_fIPc8Cg.mft (raw, json)
Hash identifier:          7REQz9QRli9OfuKipKnDT3iARKgNPnJ7O/OHh/PMRBE=
Subject key identifier:   D7:35:4D:63:E6:FD:41:CC:44:BA:E5:CD:CF:A6:44:E6:AE:5D:22:88
Authority key identifier: 07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28
Certificate issuer:       /CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
Certificate serial:       019873E1C538EAB769508E0BF8786544AE28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
Manifest number:          1615
Signing time:             Mon 04 Aug 2025 07:00:32 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:32 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:32 +0000
Files and hashes:         1: B2KQRhen92vQw05C0bl_fIPc8Cg.crl (hash: nyVoWXmE0VA5eGeRSM2HkBcjWzbWFN1Z28gfSlQC8ms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e1:c5:38:ea:b7:69:50:8e:0b:f8:78:65:44:ae:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
        Validity
            Not Before: Aug  4 07:00:32 2025 GMT
            Not After : Aug  5 07:00:32 2025 GMT
        Subject: CN=d7354d63e6fd41cc44bae5cdcfa644e6ae5d2288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a4:db:e7:ad:3f:23:ac:e0:ce:41:42:c6:f0:
                    07:f2:cf:a9:03:9a:46:0a:24:7f:ba:87:c1:09:e5:
                    85:a7:16:5b:32:98:c7:d4:47:55:d1:6d:76:24:6d:
                    61:7f:38:7d:e6:20:89:95:29:b7:50:8c:e0:c8:4c:
                    cc:ea:f6:c2:f5:29:3b:83:a5:31:6f:0c:0d:0d:5f:
                    ce:35:fd:07:ff:40:5f:47:8c:bb:a2:a8:48:d9:10:
                    39:08:70:70:5c:23:37:8b:bb:14:3c:f3:7c:1f:14:
                    6f:5e:94:8f:96:2d:66:f3:4d:42:02:db:0f:0e:f8:
                    f4:a0:63:60:b1:c3:17:e5:23:e2:71:a3:7a:c5:53:
                    7a:be:28:f7:36:fd:db:4f:c4:46:b4:28:2b:54:62:
                    dc:46:f3:2c:ad:c3:56:a0:54:85:42:3c:26:0e:e6:
                    02:84:c1:26:f5:2c:85:e1:da:10:cc:c4:70:e6:40:
                    de:39:3e:42:32:6e:cf:2a:22:6a:0a:f0:55:9d:03:
                    7f:14:8f:ca:1d:e8:29:c2:3a:50:cd:cc:0e:50:29:
                    f4:f0:03:29:82:c8:f7:49:78:06:34:d5:70:0e:c8:
                    c7:c4:f3:3b:e0:fc:eb:6d:ea:31:c5:d0:c7:9c:dd:
                    09:17:d6:9b:60:6e:16:8f:8d:08:51:13:76:d9:ed:
                    e2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:35:4D:63:E6:FD:41:CC:44:BA:E5:CD:CF:A6:44:E6:AE:5D:22:88
            X509v3 Authority Key Identifier:
                keyid:07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:41:33:84:db:23:e6:9e:fc:15:32:1a:d7:e3:ad:7d:f6:15:
         98:61:b2:02:20:e7:b9:87:5d:80:ac:1a:93:bd:ca:76:f6:4b:
         1f:c9:bd:f9:81:be:97:53:93:70:2b:af:f8:63:42:97:2f:0d:
         b3:e4:c1:46:26:cc:1d:ce:7d:34:93:2e:32:38:ec:fb:b4:ba:
         72:13:a1:e9:ee:e5:48:db:e7:3e:35:71:97:93:14:8b:97:87:
         00:ce:d2:8e:ed:6f:5b:5e:1b:ab:87:9d:c5:9f:1f:ad:da:fa:
         53:14:17:9a:cc:b1:a1:71:1d:db:f9:f8:61:6b:91:e7:08:97:
         e4:cc:65:8a:ff:8f:bc:c1:e2:09:23:6a:25:2b:fe:61:db:21:
         41:41:f7:14:96:b4:ae:6c:c5:86:33:aa:4a:47:8f:13:93:80:
         88:cb:6b:4a:73:51:3a:b3:fd:1d:06:58:af:23:e9:20:dc:28:
         1f:21:12:9e:11:4f:ca:89:ce:36:9b:5b:b0:d5:ef:c2:7c:d0:
         c4:e3:54:81:da:56:7e:d6:af:50:6b:b3:31:61:01:b8:86:07:
         5f:9f:dc:d2:54:b5:94:e8:9a:4f:26:7d:a5:39:cc:7f:b4:f2:
         fe:73:e2:86:3c:1a:62:12:fc:72:66:b4:51:9c:c5:8b:9a:6b:
         68:7d:a4:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4cU46rdpUI4L+HhlRK4oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NjI5MDQ2MTdhN2Y3NmJkMGMzNGU0MmQxYjk3ZjdjODNk
Y2YwMjgwHhcNMjUwODA0MDcwMDMyWhcNMjUwODA1MDcwMDMyWjAzMTEwLwYDVQQD
EyhkNzM1NGQ2M2U2ZmQ0MWNjNDRiYWU1Y2RjZmE2NDRlNmFlNWQyMjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aTb560/I6zgzkFCxvAH8s+pA5pG
CiR/uofBCeWFpxZbMpjH1EdV0W12JG1hfzh95iCJlSm3UIzgyEzM6vbC9Sk7g6Ux
bwwNDV/ONf0H/0BfR4y7oqhI2RA5CHBwXCM3i7sUPPN8HxRvXpSPli1m801CAtsP
Dvj0oGNgscMX5SPicaN6xVN6vij3Nv3bT8RGtCgrVGLcRvMsrcNWoFSFQjwmDuYC
hMEm9SyF4doQzMRw5kDeOT5CMm7PKiJqCvBVnQN/FI/KHegpwjpQzcwOUCn08AMp
gsj3SXgGNNVwDsjHxPM74PzrbeoxxdDHnN0JF9abYG4Wj40IURN22e3iqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNc1TWPm/UHMRLrlzc+mROauXSKIMB8GA1UdIwQY
MBaAFAdikEYXp/dr0MNOQtG5f3yD3PAoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjJLUVJoZW45MnZRdzA1QzBibF9mSVBjOENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi80NzQwNzMtYTk5NS00NDI1LTkzNDkt
MDQyNDhlMzc3YWY1LzEvQjJLUVJoZW45MnZRdzA1QzBibF9mSVBjOENnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi80NzQwNzMtYTk5NS00NDI1LTkzNDktMDQyNDhlMzc3YWY1
LzEvQjJLUVJoZW45MnZRdzA1QzBibF9mSVBjOENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0EzhNsj
5p78FTIa1+OtffYVmGGyAiDnuYddgKwak73KdvZLH8m9+YG+l1OTcCuv+GNCly8N
s+TBRibMHc59NJMuMjjs+7S6chOh6e7lSNvnPjVxl5MUi5eHAM7Sju1vW14bq4ed
xZ8frdr6UxQXmsyxoXEd2/n4YWuR5wiX5Mxliv+PvMHiCSNqJSv+YdshQUH3FJa0
rmzFhjOqSkePE5OAiMtrSnNROrP9HQZYryPpINwoHyESnhFPyonONptbsNXvwnzQ
xONUgdpWftavUGuzMWEBuIYHX5/c0lS1lOiaTyZ9pTnMf7Ty/nPihjwaYhL8cma0
UZzFi5praH2ksQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:07:15 2025 by rpki-client