Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
File:                     MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft (raw, json)
Hash identifier:          +r8b+2XqfCl+cStutwhWiVJlBlHYXQPWl6iRBD89qvE=
Subject key identifier:   EF:2F:4F:AD:C5:AB:45:83:B0:77:32:EA:4E:8D:B8:A8:91:8D:AC:1A
Authority key identifier: 31:DB:0F:88:3C:F9:44:91:45:1E:90:8C:6E:68:2A:CE:36:B1:36:02
Certificate issuer:       /CN=31db0f883cf94491451e908c6e682ace36b13602
Certificate serial:       01976C2ABFEB8B9684CC23241361665E62E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
Manifest number:          079E
Signing time:             Sat 14 Jun 2025 02:00:30 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:30 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:30 +0000
Files and hashes:         1: MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl (hash: LDkGxWLrM7zqIaWG0SoRd8sxih378fzI1Z3qTCaCRZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:bf:eb:8b:96:84:cc:23:24:13:61:66:5e:62:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31db0f883cf94491451e908c6e682ace36b13602
        Validity
            Not Before: Jun 14 02:00:30 2025 GMT
            Not After : Jun 15 02:00:30 2025 GMT
        Subject: CN=ef2f4fadc5ab4583b07732ea4e8db8a8918dac1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:43:89:31:29:ef:d5:10:03:83:0f:29:58:4b:
                    a2:11:a7:f8:32:80:6f:19:94:f5:c5:36:27:ec:81:
                    4d:8b:34:8c:2f:6b:08:1c:81:3f:06:7d:02:42:58:
                    7b:4e:01:c0:42:2d:e2:e7:35:4b:2b:eb:0e:f9:8c:
                    24:f4:b1:b6:9d:e6:dc:7a:49:b6:41:88:46:99:24:
                    3a:7c:04:eb:07:6e:f9:16:c3:a9:8d:a7:d5:f7:90:
                    b3:c2:50:b4:12:09:da:c1:06:44:0a:28:0a:69:10:
                    18:77:05:63:f6:9a:fd:17:16:50:ef:3b:34:a5:db:
                    a8:e6:09:e8:12:2d:26:08:8b:a2:9c:e8:7c:98:3f:
                    00:4b:07:68:af:8f:84:66:b2:85:fd:98:d0:70:cd:
                    ec:4c:71:2e:37:e7:6a:bd:16:0e:22:56:c2:0f:71:
                    fa:c0:a3:ac:19:d2:58:f4:a7:21:07:88:49:18:fa:
                    fb:79:df:c3:34:0e:03:7c:ac:33:27:44:ae:3e:44:
                    8b:f7:9a:ad:5f:34:ba:15:be:a0:a0:08:b1:7b:5a:
                    46:04:6d:c4:b0:c5:8a:c9:b9:e4:b6:87:f2:b4:56:
                    43:8d:ff:8b:98:0d:d3:36:a8:c5:9f:49:67:67:5a:
                    1f:c5:a9:9e:3e:ef:29:bf:b7:f2:2e:06:bc:73:7f:
                    bd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2F:4F:AD:C5:AB:45:83:B0:77:32:EA:4E:8D:B8:A8:91:8D:AC:1A
            X509v3 Authority Key Identifier:
                keyid:31:DB:0F:88:3C:F9:44:91:45:1E:90:8C:6E:68:2A:CE:36:B1:36:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ae:c9:7e:c6:ac:bd:c3:6d:b3:e7:be:58:d9:c5:77:ed:5c:
         a2:8b:49:c3:fa:b2:27:a7:57:0a:59:67:21:bf:fc:2c:2a:07:
         12:91:a1:e9:fe:75:d3:9a:7b:f0:c4:d0:94:df:aa:82:68:db:
         39:11:81:d4:0a:75:92:77:98:38:02:ce:04:0f:90:b4:15:b7:
         b0:29:d9:f0:1a:33:28:52:33:39:c7:98:27:d8:06:3d:ba:c4:
         87:e9:b6:67:c8:18:1b:31:54:c9:f8:76:71:03:b7:78:45:7d:
         24:95:68:15:d2:7b:dc:7c:27:85:83:03:41:31:b9:16:62:45:
         f1:10:9c:f9:ac:05:38:16:27:0d:04:92:3d:89:8d:d2:6b:e5:
         d8:13:8e:6a:dc:fd:30:44:f9:d5:6f:09:cf:24:c6:f1:1c:96:
         95:cc:eb:59:58:5a:fc:0e:6e:b6:7d:2d:9d:63:b3:da:99:c1:
         d9:68:a8:f0:63:74:77:d6:92:9b:65:38:3f:a7:99:88:68:ee:
         86:4e:78:63:1a:a1:59:3c:e6:2f:7a:d6:e2:a1:59:74:0a:1d:
         31:aa:e1:97:07:84:02:a3:42:01:e9:8e:14:22:8a:01:ac:54:
         eb:7d:4d:17:c0:12:8a:57:b1:12:2f:4b:af:c9:da:f4:15:f9:
         90:d6:5b:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsKr/ri5aEzCMkE2FmXmLiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZGIwZjg4M2NmOTQ0OTE0NTFlOTA4YzZlNjgyYWNlMzZi
MTM2MDIwHhcNMjUwNjE0MDIwMDMwWhcNMjUwNjE1MDIwMDMwWjAzMTEwLwYDVQQD
EyhlZjJmNGZhZGM1YWI0NTgzYjA3NzMyZWE0ZThkYjhhODkxOGRhYzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEOJMSnv1RADgw8pWEuiEaf4MoBv
GZT1xTYn7IFNizSML2sIHIE/Bn0CQlh7TgHAQi3i5zVLK+sO+Ywk9LG2nebcekm2
QYhGmSQ6fATrB275FsOpjafV95CzwlC0EgnawQZECigKaRAYdwVj9pr9FxZQ7zs0
pduo5gnoEi0mCIuinOh8mD8ASwdor4+EZrKF/ZjQcM3sTHEuN+dqvRYOIlbCD3H6
wKOsGdJY9KchB4hJGPr7ed/DNA4DfKwzJ0SuPkSL95qtXzS6Fb6goAixe1pGBG3E
sMWKybnktofytFZDjf+LmA3TNqjFn0lnZ1ofxamePu8pv7fyLga8c3+9uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8vT63Fq0WDsHcy6k6NuKiRjawaMB8GA1UdIwQY
MBaAFDHbD4g8+USRRR6QjG5oKs42sTYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRzUGlEejVSSkZGSHBDTWJtZ3F6amF4TmdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9hNzBlNWYtMDQ4MC00MTVjLTg1MTIt
OTIxYTJlN2E1NjA4LzEvTWRzUGlEejVSSkZGSHBDTWJtZ3F6amF4TmdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9hNzBlNWYtMDQ4MC00MTVjLTg1MTItOTIxYTJlN2E1NjA4
LzEvTWRzUGlEejVSSkZGSHBDTWJtZ3F6amF4TmdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl67Jfsas
vcNts+e+WNnFd+1cootJw/qyJ6dXCllnIb/8LCoHEpGh6f5105p78MTQlN+qgmjb
ORGB1Ap1kneYOALOBA+QtBW3sCnZ8BozKFIzOceYJ9gGPbrEh+m2Z8gYGzFUyfh2
cQO3eEV9JJVoFdJ73HwnhYMDQTG5FmJF8RCc+awFOBYnDQSSPYmN0mvl2BOOatz9
MET51W8JzyTG8RyWlczrWVha/A5utn0tnWOz2pnB2Wio8GN0d9aSm2U4P6eZiGju
hk54YxqhWTzmL3rW4qFZdAodMarhlweEAqNCAemOFCKKAaxU631NF8ASilexEi9L
r8na9BX5kNZbQQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:47:55 2025 by rpki-client