Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
File:                     Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft (raw, json)
Hash identifier:          bII58TlMCsM1s9ktBqkhmQydy83/wtZ6bItsxAa9BwU=
Subject key identifier:   81:2C:B6:BC:91:34:2B:6B:D3:E8:26:68:2B:9A:E5:E2:6E:23:E5:09
Authority key identifier: 32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62
Certificate issuer:       /CN=322d6d4be163123242185dd451f14777974f7c62
Certificate serial:       01976F2CED74CBDE23F8841D3DDEF6C9A9DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
Manifest number:          05CE
Signing time:             Sat 14 Jun 2025 16:01:44 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:44 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:44 +0000
Files and hashes:         1: Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl (hash: pWHzUN9ZtMkpJSQFM3zou7ZtTNPEU4UXt7O7yh7uuTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:ed:74:cb:de:23:f8:84:1d:3d:de:f6:c9:a9:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322d6d4be163123242185dd451f14777974f7c62
        Validity
            Not Before: Jun 14 16:01:44 2025 GMT
            Not After : Jun 15 16:01:44 2025 GMT
        Subject: CN=812cb6bc91342b6bd3e826682b9ae5e26e23e509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c7:c4:07:14:e2:9f:29:de:36:18:95:36:4b:
                    d6:da:1f:c4:36:10:f9:b6:41:86:b1:eb:5c:70:9e:
                    20:0a:8a:68:e6:7f:a4:5a:d7:64:dd:2f:38:1f:a1:
                    08:0a:7c:3b:fb:04:b8:05:48:aa:e4:5d:fb:90:9c:
                    23:8e:ea:dd:7c:09:2c:6f:f3:6f:3f:e0:af:b8:cb:
                    1a:06:e9:d8:9e:72:99:06:bd:e4:f7:f2:16:b9:be:
                    d3:77:b0:60:a4:5f:76:e4:3b:07:40:95:87:11:95:
                    13:6a:81:10:ab:37:b5:67:ed:8d:4e:74:1a:e4:a3:
                    9e:5c:8d:52:dc:8f:06:a0:32:45:30:f4:01:0d:16:
                    8c:71:e2:d1:96:4f:92:ba:6f:59:f7:32:f9:5b:7c:
                    25:4b:5b:70:b0:b5:f2:b5:6b:69:ac:f8:8b:d1:a2:
                    b1:c5:0f:90:d3:07:d6:c3:3c:a5:b0:6d:f3:9c:53:
                    30:df:a0:19:f8:f9:ac:ce:ca:73:dd:c4:2b:ea:98:
                    f7:29:2c:f0:9f:b1:19:77:c1:ba:f8:fe:15:52:80:
                    05:e7:8e:21:f4:88:3f:1d:f2:dc:5e:72:22:e9:70:
                    d3:92:78:43:71:79:44:52:8f:b0:0a:17:02:9a:35:
                    1e:20:73:a4:39:ad:47:77:ab:1b:09:02:b1:d0:fa:
                    f7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2C:B6:BC:91:34:2B:6B:D3:E8:26:68:2B:9A:E5:E2:6E:23:E5:09
            X509v3 Authority Key Identifier:
                keyid:32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:11:a6:3d:a0:81:71:45:06:4b:d4:6f:31:70:4d:18:ae:4f:
         0d:fe:0a:68:cb:ba:d6:13:d9:a7:fc:9e:78:86:e6:a4:54:54:
         90:64:6d:8a:ae:3e:e8:df:a1:53:df:d3:16:68:b4:13:b5:81:
         63:6f:8b:e8:3a:f0:58:f6:8f:c9:6a:c3:51:69:9f:2d:20:00:
         7a:46:69:67:4e:6d:10:61:8e:ad:ec:e7:e5:cc:0e:a3:b9:55:
         5d:2a:53:90:28:17:fa:64:66:09:22:d7:47:30:9e:e4:0e:b9:
         f1:2f:da:c3:be:26:44:cc:6e:65:da:07:88:e3:73:9d:00:04:
         1c:75:c1:94:d2:ff:3a:9c:d9:7a:7a:41:69:0f:b6:87:70:cb:
         08:60:f8:2c:77:a9:75:10:29:20:a9:2c:c8:e5:af:52:aa:09:
         ff:25:4b:11:da:cc:d9:da:86:bd:54:9a:6d:20:c8:43:87:a1:
         44:ac:33:27:f3:44:0d:69:7c:0f:75:bf:99:91:6f:98:60:5c:
         ef:f9:1f:2b:a2:1d:71:24:49:8b:71:88:bb:64:c2:5a:68:14:
         02:29:4f:09:49:b6:a8:ac:bf:4d:63:67:fb:33:0e:6d:be:56:
         5f:49:d7:3f:86:b5:a3:a4:7f:0d:8e:70:fd:70:a7:f0:6e:aa:
         ed:13:aa:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLO10y94j+IQdPd72yaneMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMmQ2ZDRiZTE2MzEyMzI0MjE4NWRkNDUxZjE0Nzc3OTc0
ZjdjNjIwHhcNMjUwNjE0MTYwMTQ0WhcNMjUwNjE1MTYwMTQ0WjAzMTEwLwYDVQQD
Eyg4MTJjYjZiYzkxMzQyYjZiZDNlODI2NjgyYjlhZTVlMjZlMjNlNTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMfEBxTinyneNhiVNkvW2h/ENhD5
tkGGsetccJ4gCopo5n+kWtdk3S84H6EICnw7+wS4BUiq5F37kJwjjurdfAksb/Nv
P+CvuMsaBunYnnKZBr3k9/IWub7Td7BgpF925DsHQJWHEZUTaoEQqze1Z+2NTnQa
5KOeXI1S3I8GoDJFMPQBDRaMceLRlk+Sum9Z9zL5W3wlS1twsLXytWtprPiL0aKx
xQ+Q0wfWwzylsG3znFMw36AZ+Pmszspz3cQr6pj3KSzwn7EZd8G6+P4VUoAF544h
9Ig/HfLcXnIi6XDTknhDcXlEUo+wChcCmjUeIHOkOa1Hd6sbCQKx0Pr3XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEstryRNCtr0+gmaCua5eJuI+UJMB8GA1UdIwQY
MBaAFDItbUvhYxIyQhhd1FHxR3eXT3xiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWkxdFMtRmpFakpDR0YzVVVmRkhkNWRQZkdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8xYzc1OGMtZTc1Yi00MjI0LWFmYzct
MDYwYmRiYTQzMGM1LzEvTWkxdFMtRmpFakpDR0YzVVVmRkhkNWRQZkdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8xYzc1OGMtZTc1Yi00MjI0LWFmYzctMDYwYmRiYTQzMGM1
LzEvTWkxdFMtRmpFakpDR0YzVVVmRkhkNWRQZkdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhGmPaCB
cUUGS9RvMXBNGK5PDf4KaMu61hPZp/yeeIbmpFRUkGRtiq4+6N+hU9/TFmi0E7WB
Y2+L6DrwWPaPyWrDUWmfLSAAekZpZ05tEGGOrezn5cwOo7lVXSpTkCgX+mRmCSLX
RzCe5A658S/aw74mRMxuZdoHiONznQAEHHXBlNL/OpzZenpBaQ+2h3DLCGD4LHep
dRApIKksyOWvUqoJ/yVLEdrM2dqGvVSabSDIQ4ehRKwzJ/NEDWl8D3W/mZFvmGBc
7/kfK6IdcSRJi3GIu2TCWmgUAilPCUm2qKy/TWNn+zMObb5WX0nXP4a1o6R/DY5w
/XCn8G6q7ROqqA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:52:32 2025 by rpki-client