Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft
File:                     MvacygDXMkCpbJMio-lzeQ8vYcQ.mft (raw, json)
Hash identifier:          +rf9f35Rt2/KboMeh89Mt0WiIyfxLz8AMf8+u+Tss4w=
Subject key identifier:   EF:29:01:CA:1A:62:F9:6F:74:C9:63:A5:2A:C4:3D:83:3F:51:9C:52
Authority key identifier: 32:F6:9C:CA:00:D7:32:40:A9:6C:93:22:A3:E9:73:79:0F:2F:61:C4
Certificate issuer:       /CN=32f69cca00d73240a96c9322a3e973790f2f61c4
Certificate serial:       01988920B6D958366AF256F461077787BF3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MvacygDXMkCpbJMio-lzeQ8vYcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft
Manifest number:          D6
Signing time:             Fri 08 Aug 2025 10:01:19 +0000
Manifest this update:     Fri 08 Aug 2025 10:01:19 +0000
Manifest next update:     Sat 09 Aug 2025 10:01:19 +0000
Files and hashes:         1: MvacygDXMkCpbJMio-lzeQ8vYcQ.crl (hash: TDseQfc8pAKrGi9d9rxp/ZMcbST24rnYRPExTxYzi/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MvacygDXMkCpbJMio-lzeQ8vYcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 10:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:20:b6:d9:58:36:6a:f2:56:f4:61:07:77:87:bf:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f69cca00d73240a96c9322a3e973790f2f61c4
        Validity
            Not Before: Aug  8 10:01:19 2025 GMT
            Not After : Aug  9 10:01:19 2025 GMT
        Subject: CN=ef2901ca1a62f96f74c963a52ac43d833f519c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5a:54:fa:2d:81:ea:09:a4:85:20:af:f9:14:
                    67:96:88:85:d2:01:b7:65:99:ba:86:5e:23:03:4b:
                    f0:6e:a5:9c:1b:e1:f6:51:42:49:ff:5e:84:a4:b5:
                    04:66:6d:9c:5c:8d:7c:b4:9f:fb:e2:85:78:89:de:
                    2f:df:e3:bc:01:b6:a3:7d:02:44:5f:a6:c7:a7:59:
                    a9:ac:8d:d5:c6:1e:5b:9c:fd:cf:16:92:fe:8a:e5:
                    4d:47:f3:fd:5e:9d:28:21:5e:90:d5:aa:4c:ce:13:
                    74:f9:1a:40:a3:f3:aa:24:f5:1a:d1:bc:22:9f:0d:
                    70:03:61:ec:9b:08:45:18:2f:b5:27:a3:b4:43:32:
                    d2:68:a8:57:b6:fe:cb:a0:40:d9:31:03:b1:60:91:
                    52:b8:cc:cb:c8:14:07:ac:5a:60:ef:df:c9:0e:29:
                    a2:35:01:d2:b2:d5:6a:56:b5:3e:6a:06:a6:a8:06:
                    61:91:da:06:a4:a2:11:1b:2f:fa:25:15:c5:62:4b:
                    b6:6d:64:fe:5f:6d:da:18:63:98:41:73:52:11:ce:
                    ee:41:59:0b:5a:07:d1:d1:d5:97:4c:42:c9:fe:5b:
                    1e:c8:fb:d6:58:53:0b:b1:83:fa:b2:71:c2:1a:42:
                    cd:d7:8d:b5:94:68:15:80:fb:8b:43:8e:90:db:d2:
                    7a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:29:01:CA:1A:62:F9:6F:74:C9:63:A5:2A:C4:3D:83:3F:51:9C:52
            X509v3 Authority Key Identifier:
                keyid:32:F6:9C:CA:00:D7:32:40:A9:6C:93:22:A3:E9:73:79:0F:2F:61:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvacygDXMkCpbJMio-lzeQ8vYcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ba:27:3f:34:55:b6:0c:de:23:99:2b:f9:55:da:a6:d4:e8:
         81:c2:c0:d3:73:e2:73:62:2c:a1:3e:20:14:f0:9e:b3:09:4c:
         10:88:c7:7d:25:4f:bc:64:f6:a7:a6:80:1a:3f:0f:29:c2:fc:
         49:83:44:70:71:92:4a:61:59:6e:51:6e:67:a6:af:67:58:d2:
         6d:ba:b7:cf:28:f2:5d:db:fd:87:cf:7a:31:00:99:fa:37:1e:
         f9:e8:6f:64:27:e2:09:6d:75:99:97:5d:84:2e:89:ce:5c:94:
         47:d6:ec:ce:fb:5d:5a:86:f6:e0:13:ef:9e:99:30:87:9f:f2:
         25:7e:01:7d:ad:78:b4:5c:d0:bf:6f:b3:e3:1c:2d:ec:19:8b:
         78:66:7b:d7:cc:3f:62:3a:c2:64:c7:fc:4c:db:0f:57:be:b7:
         15:d1:13:08:27:53:59:89:ee:aa:a5:9c:dc:e3:65:e9:e2:af:
         1a:60:15:18:c6:6b:ff:b9:7f:ff:88:38:d5:0a:66:18:6b:bc:
         54:f4:4a:e5:e4:a7:3f:57:86:28:68:e5:73:11:ea:77:6f:d5:
         b1:90:f6:d3:a7:09:a0:0c:37:93:ed:e2:23:fc:3e:2e:72:2a:
         4a:2a:e2:8b:49:16:d8:f9:b3:6d:3a:86:75:f0:23:7a:73:3d:
         1b:0e:96:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJILbZWDZq8lb0YQd3h78+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZjY5Y2NhMDBkNzMyNDBhOTZjOTMyMmEzZTk3Mzc5MGYy
ZjYxYzQwHhcNMjUwODA4MTAwMTE5WhcNMjUwODA5MTAwMTE5WjAzMTEwLwYDVQQD
EyhlZjI5MDFjYTFhNjJmOTZmNzRjOTYzYTUyYWM0M2Q4MzNmNTE5YzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VpU+i2B6gmkhSCv+RRnloiF0gG3
ZZm6hl4jA0vwbqWcG+H2UUJJ/16EpLUEZm2cXI18tJ/74oV4id4v3+O8AbajfQJE
X6bHp1mprI3Vxh5bnP3PFpL+iuVNR/P9Xp0oIV6Q1apMzhN0+RpAo/OqJPUa0bwi
nw1wA2HsmwhFGC+1J6O0QzLSaKhXtv7LoEDZMQOxYJFSuMzLyBQHrFpg79/JDimi
NQHSstVqVrU+agamqAZhkdoGpKIRGy/6JRXFYku2bWT+X23aGGOYQXNSEc7uQVkL
WgfR0dWXTELJ/lseyPvWWFMLsYP6snHCGkLN1421lGgVgPuLQ46Q29J68wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8pAcoaYvlvdMljpSrEPYM/UZxSMB8GA1UdIwQY
MBaAFDL2nMoA1zJAqWyTIqPpc3kPL2HEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXZhY3lnRFhNa0NwYkpNaW8tbHplUTh2WWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iMTk5YmQtMDNmZS00NzM0LWI3OTkt
OTg3OWQ2ODcyOGM5LzEvTXZhY3lnRFhNa0NwYkpNaW8tbHplUTh2WWNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9iMTk5YmQtMDNmZS00NzM0LWI3OTktOTg3OWQ2ODcyOGM5
LzEvTXZhY3lnRFhNa0NwYkpNaW8tbHplUTh2WWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbonPzRV
tgzeI5kr+VXaptTogcLA03Pic2IsoT4gFPCeswlMEIjHfSVPvGT2p6aAGj8PKcL8
SYNEcHGSSmFZblFuZ6avZ1jSbbq3zyjyXdv9h896MQCZ+jce+ehvZCfiCW11mZdd
hC6JzlyUR9bszvtdWob24BPvnpkwh5/yJX4Bfa14tFzQv2+z4xwt7BmLeGZ718w/
YjrCZMf8TNsPV763FdETCCdTWYnuqqWc3ONl6eKvGmAVGMZr/7l//4g41QpmGGu8
VPRK5eSnP1eGKGjlcxHqd2/VsZD206cJoAw3k+3iI/w+LnIqSirii0kW2PmzbTqG
dfAjenM9Gw6WLA==
-----END CERTIFICATE-----
Generated at Fri Aug 8 13:06:15 2025 by rpki-client