Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
File:                     7_vi0INCz7z3p9dOiOvQMeEgItk.mft (raw, json)
Hash identifier:          03Jxh3c4lom1jQ1k5oTUA0PAvAyyrYPIHezMVzHk/sY=
Subject key identifier:   EE:35:0E:DE:EE:40:00:B9:52:B8:C5:68:9A:16:9F:C0:02:52:64:20
Authority key identifier: EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9
Certificate issuer:       /CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
Certificate serial:       01976FD119D4ED17C8A0A677AF15FB34BD04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
Manifest number:          0385
Signing time:             Sat 14 Jun 2025 19:01:04 +0000
Manifest this update:     Sat 14 Jun 2025 19:01:04 +0000
Manifest next update:     Sun 15 Jun 2025 19:01:04 +0000
Files and hashes:         1: 7_vi0INCz7z3p9dOiOvQMeEgItk.crl (hash: pmw4pVS3vtzMGB9GfpIwHNaKOh4OIZEL7LvAFx6/rn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d1:19:d4:ed:17:c8:a0:a6:77:af:15:fb:34:bd:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
        Validity
            Not Before: Jun 14 19:01:04 2025 GMT
            Not After : Jun 15 19:01:04 2025 GMT
        Subject: CN=ee350edeee4000b952b8c5689a169fc002526420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:35:41:c4:70:cc:16:15:fb:f8:e6:15:c2:79:
                    23:59:88:9f:c6:d8:21:2a:9b:9b:ee:50:a4:8c:3e:
                    b7:0c:59:ce:0a:24:55:ea:82:db:0f:3f:5a:c7:d4:
                    bd:d5:8d:a0:78:a2:a6:de:55:cb:84:29:3c:36:76:
                    f4:f5:cd:c9:06:b6:c5:89:a5:0e:da:e2:10:95:44:
                    19:91:08:f8:2f:4f:b7:09:70:70:8a:3a:e6:7f:0a:
                    3e:6c:9b:b5:0d:59:44:09:be:e2:58:d8:8c:96:97:
                    2d:79:87:5a:06:26:c6:7a:c8:40:0f:01:89:de:13:
                    b5:22:60:22:5e:f2:12:a3:5f:61:8d:9b:e9:ff:f5:
                    12:d0:74:a5:df:65:ae:d2:66:d1:75:9e:cb:51:d3:
                    17:80:da:3a:c9:c5:ec:2f:62:1f:34:a4:bc:8b:61:
                    9e:9e:fc:69:ae:3d:a3:5d:78:19:1a:19:df:d3:85:
                    54:0a:ab:a4:d6:76:3b:4f:f6:b0:39:3c:11:a7:8d:
                    e4:92:79:e7:59:83:87:2b:c3:1f:55:96:4e:a5:b6:
                    7b:d7:6a:10:de:27:3a:1c:b2:66:34:8d:75:bf:e1:
                    14:a8:4d:88:b6:ae:b2:47:d6:19:da:ff:51:9c:84:
                    91:83:95:80:e6:2e:79:9a:d1:6a:8e:33:57:80:f8:
                    1a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:35:0E:DE:EE:40:00:B9:52:B8:C5:68:9A:16:9F:C0:02:52:64:20
            X509v3 Authority Key Identifier:
                keyid:EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:cc:40:4a:58:ed:b1:2c:49:ef:de:d2:0f:53:74:49:32:af:
         32:78:2a:66:29:78:d0:c3:05:ba:c6:e6:55:4f:a7:72:a6:98:
         4b:ec:d2:b3:73:d4:43:11:e4:88:f6:ab:ce:a5:e5:ec:dc:55:
         a0:57:3e:3b:74:a7:b0:a8:76:0b:e1:9d:e6:5f:52:a2:b8:27:
         19:e6:87:1b:ea:e8:ed:08:ef:59:91:03:f7:f9:b8:25:1c:bd:
         a5:3f:df:66:6c:42:92:0c:b4:0f:13:84:fd:b1:97:d7:63:8f:
         c2:46:70:18:b4:5d:b0:5a:59:a1:38:94:fe:bb:ca:96:1d:3e:
         04:f8:2c:bd:f1:66:25:af:3d:a0:bb:19:fb:98:10:73:be:dc:
         8c:0e:b7:ce:64:eb:16:ef:01:4d:b1:ae:db:33:91:d7:06:7d:
         d2:4b:e5:69:b0:90:15:30:b0:55:34:fa:84:4e:44:7e:67:51:
         ff:08:77:8b:4f:6e:48:05:b1:32:c5:39:e1:7e:74:c0:6a:c2:
         6a:f6:9a:18:0e:20:f8:a7:ee:bd:50:f9:ae:44:f6:ec:7e:7f:
         ce:9d:f3:17:09:de:a8:6c:61:3f:8a:50:ad:0e:78:ff:6f:d6:
         fe:6d:f5:bd:3c:6f:c0:32:c2:a1:2a:fa:50:0e:1b:2a:fd:c6:
         20:8b:74:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdv0RnU7RfIoKZ3rxX7NL0EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZmJlMmQwODM0MmNmYmNmN2E3ZDc0ZTg4ZWJkMDMxZTEy
MDIyZDkwHhcNMjUwNjE0MTkwMTA0WhcNMjUwNjE1MTkwMTA0WjAzMTEwLwYDVQQD
EyhlZTM1MGVkZWVlNDAwMGI5NTJiOGM1Njg5YTE2OWZjMDAyNTI2NDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jVBxHDMFhX7+OYVwnkjWYifxtgh
Kpub7lCkjD63DFnOCiRV6oLbDz9ax9S91Y2geKKm3lXLhCk8Nnb09c3JBrbFiaUO
2uIQlUQZkQj4L0+3CXBwijrmfwo+bJu1DVlECb7iWNiMlpcteYdaBibGeshADwGJ
3hO1ImAiXvISo19hjZvp//US0HSl32Wu0mbRdZ7LUdMXgNo6ycXsL2IfNKS8i2Ge
nvxprj2jXXgZGhnf04VUCquk1nY7T/awOTwRp43kknnnWYOHK8MfVZZOpbZ712oQ
3ic6HLJmNI11v+EUqE2Itq6yR9YZ2v9RnISRg5WA5i55mtFqjjNXgPgaLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO41Dt7uQAC5UrjFaJoWn8ACUmQgMB8GA1UdIwQY
MBaAFO/74tCDQs+896fXTojr0DHhICLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN192aTBJTkN6N3ozcDlkT2lPdlFNZUVnSXRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC82YWU4YjMtYTM5MC00YjUxLWI3ZjEt
ZjJmMWNhMjg3MTQxLzEvN192aTBJTkN6N3ozcDlkT2lPdlFNZUVnSXRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC82YWU4YjMtYTM5MC00YjUxLWI3ZjEtZjJmMWNhMjg3MTQx
LzEvN192aTBJTkN6N3ozcDlkT2lPdlFNZUVnSXRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsxASljt
sSxJ797SD1N0STKvMngqZil40MMFusbmVU+ncqaYS+zSs3PUQxHkiParzqXl7NxV
oFc+O3SnsKh2C+Gd5l9SorgnGeaHG+ro7QjvWZED9/m4JRy9pT/fZmxCkgy0DxOE
/bGX12OPwkZwGLRdsFpZoTiU/rvKlh0+BPgsvfFmJa89oLsZ+5gQc77cjA63zmTr
Fu8BTbGu2zOR1wZ90kvlabCQFTCwVTT6hE5EfmdR/wh3i09uSAWxMsU54X50wGrC
avaaGA4g+KfuvVD5rkT27H5/zp3zFwneqGxhP4pQrQ54/2/W/m31vTxvwDLCoSr6
UA4bKv3GIIt0UQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 21:30:37 2025 by rpki-client