Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
File:                     mYf1lRU_EX4prIkHh2ZWpLin7GI.mft (raw, json)
Hash identifier:          GXqd4nMGQY5qnvNah2h1/MrBt7DSaK142NfKLBUtWiU=
Subject key identifier:   F5:99:C6:29:3B:A8:44:64:DC:9A:1D:A7:38:58:AA:65:62:87:CF:AF
Authority key identifier: 99:87:F5:95:15:3F:11:7E:29:AC:89:07:87:66:56:A4:B8:A7:EC:62
Certificate issuer:       /CN=9987f595153f117e29ac8907876656a4b8a7ec62
Certificate serial:       01987ED3EF20313EA88B78CE6C4689F37A77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
Manifest number:          1104
Signing time:             Wed 06 Aug 2025 10:01:15 +0000
Manifest this update:     Wed 06 Aug 2025 10:01:15 +0000
Manifest next update:     Thu 07 Aug 2025 10:01:15 +0000
Files and hashes:         1: mYf1lRU_EX4prIkHh2ZWpLin7GI.crl (hash: AwKoKSBL/7gl2xBMouWCIwlyX457BdoYqhNwmb5UiXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:d3:ef:20:31:3e:a8:8b:78:ce:6c:46:89:f3:7a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9987f595153f117e29ac8907876656a4b8a7ec62
        Validity
            Not Before: Aug  6 10:01:15 2025 GMT
            Not After : Aug  7 10:01:15 2025 GMT
        Subject: CN=f599c6293ba84464dc9a1da73858aa656287cfaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b7:95:38:97:8f:7f:8a:fa:04:e6:f7:4a:2b:
                    b9:55:86:5d:b2:4f:eb:ae:30:52:1b:b9:28:7c:cc:
                    e9:f9:2c:7b:a8:69:3c:a4:51:18:fb:77:4f:5c:1e:
                    d2:12:87:61:88:3b:2d:f9:19:03:bd:25:a9:ec:e4:
                    53:5b:fa:d4:a6:1a:6b:f0:33:3a:49:06:8d:13:ee:
                    b8:fa:ce:28:2a:53:c1:7f:20:ac:05:23:8d:28:de:
                    45:0b:84:53:40:b6:8d:f0:c6:a6:b4:5e:1b:17:cf:
                    56:86:66:76:94:83:50:aa:25:47:af:c0:da:51:76:
                    f1:c0:16:fa:ae:8a:c9:c3:8c:58:90:52:9c:1e:42:
                    20:f1:e4:77:9c:1c:9c:26:6d:51:46:89:13:67:43:
                    77:96:3f:70:da:b1:e6:70:04:b5:aa:67:e6:ff:51:
                    32:7d:a8:01:ce:60:4b:5c:7f:d0:f6:24:65:d9:e2:
                    bb:47:32:03:bb:e2:46:b3:c4:04:07:3c:6b:ba:f4:
                    c5:b0:c1:d3:ca:eb:86:52:14:e9:d2:3f:63:42:c8:
                    c8:7a:56:5f:cc:d3:d3:49:4e:b3:62:e2:8a:84:1f:
                    ec:bc:53:86:c5:43:68:be:27:39:2f:5f:4b:b6:bc:
                    44:04:34:a6:64:34:92:03:ce:a6:53:00:85:14:98:
                    b0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:99:C6:29:3B:A8:44:64:DC:9A:1D:A7:38:58:AA:65:62:87:CF:AF
            X509v3 Authority Key Identifier:
                keyid:99:87:F5:95:15:3F:11:7E:29:AC:89:07:87:66:56:A4:B8:A7:EC:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:87:2c:a3:f1:6b:65:b5:3e:f3:9e:92:b9:85:05:c6:a9:94:
         42:a6:77:cc:dd:77:2c:d9:51:b9:90:9f:0c:38:c2:54:51:7b:
         f5:3d:ae:5b:32:76:65:2f:70:56:df:b3:86:b9:b3:46:ef:4b:
         30:84:4f:65:f5:b1:db:6e:12:89:17:7f:9b:5e:0b:1d:84:4d:
         8f:51:33:1d:db:58:87:50:69:47:c7:21:50:38:9b:f5:ef:87:
         15:68:01:dd:76:ef:36:b9:34:31:67:7c:35:0e:84:93:75:5a:
         5b:15:59:94:8f:22:8f:69:35:d7:e0:2d:35:ab:64:7e:89:3f:
         73:70:c5:f3:f3:78:9d:9d:34:ab:2d:62:9a:e5:40:bd:e2:e4:
         f3:04:6c:90:11:fe:88:18:ad:b1:94:55:f3:87:3a:2a:0b:e4:
         9f:4b:a9:38:ca:f2:6c:10:13:d1:d0:37:18:b6:49:f2:84:5b:
         a2:a8:81:cf:e9:24:82:30:fd:19:c1:1e:3c:80:df:97:1f:33:
         a0:f9:c1:89:a7:ec:3b:73:9b:06:ac:05:50:35:17:cd:de:0c:
         a1:9f:af:c0:de:8a:69:9f:7c:57:52:95:31:02:b8:e6:a6:fb:
         ff:ae:78:68:a2:b4:3c:a0:3a:b7:04:8f:6f:2d:93:92:47:88:
         62:c5:61:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+0+8gMT6oi3jObEaJ83p3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ODdmNTk1MTUzZjExN2UyOWFjODkwNzg3NjY1NmE0Yjhh
N2VjNjIwHhcNMjUwODA2MTAwMTE1WhcNMjUwODA3MTAwMTE1WjAzMTEwLwYDVQQD
EyhmNTk5YzYyOTNiYTg0NDY0ZGM5YTFkYTczODU4YWE2NTYyODdjZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbeVOJePf4r6BOb3Siu5VYZdsk/r
rjBSG7kofMzp+Sx7qGk8pFEY+3dPXB7SEodhiDst+RkDvSWp7ORTW/rUphpr8DM6
SQaNE+64+s4oKlPBfyCsBSONKN5FC4RTQLaN8MamtF4bF89WhmZ2lINQqiVHr8Da
UXbxwBb6rorJw4xYkFKcHkIg8eR3nBycJm1RRokTZ0N3lj9w2rHmcAS1qmfm/1Ey
fagBzmBLXH/Q9iRl2eK7RzIDu+JGs8QEBzxruvTFsMHTyuuGUhTp0j9jQsjIelZf
zNPTSU6zYuKKhB/svFOGxUNovic5L19LtrxEBDSmZDSSA86mUwCFFJiwSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWZxik7qERk3JodpzhYqmVih8+vMB8GA1UdIwQY
MBaAFJmH9ZUVPxF+KayJB4dmVqS4p+xiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVlmMWxSVV9FWDRwcklrSGgyWldwTGluN0dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zNTc0OTItMDdhYi00MTM4LTg0MjYt
YjE2NzRhMzcxNTNiLzEvbVlmMWxSVV9FWDRwcklrSGgyWldwTGluN0dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8zNTc0OTItMDdhYi00MTM4LTg0MjYtYjE2NzRhMzcxNTNi
LzEvbVlmMWxSVV9FWDRwcklrSGgyWldwTGluN0dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYcso/Fr
ZbU+856SuYUFxqmUQqZ3zN13LNlRuZCfDDjCVFF79T2uWzJ2ZS9wVt+zhrmzRu9L
MIRPZfWx224SiRd/m14LHYRNj1EzHdtYh1BpR8chUDib9e+HFWgB3XbvNrk0MWd8
NQ6Ek3VaWxVZlI8ij2k11+AtNatkfok/c3DF8/N4nZ00qy1imuVAveLk8wRskBH+
iBitsZRV84c6Kgvkn0upOMrybBAT0dA3GLZJ8oRboqiBz+kkgjD9GcEePIDflx8z
oPnBiafsO3ObBqwFUDUXzd4MoZ+vwN6KaZ98V1KVMQK45qb7/654aKK0PKA6twSP
by2TkkeIYsVh+A==
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:02:55 2025 by rpki-client