Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
File:                     0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft (raw, json)
Hash identifier:          9oENbLNn+47VgUM5BwU9kTr3bPzyPqzyk8o1R4cTE2I=
Subject key identifier:   92:34:78:F5:E7:90:25:E0:3E:C4:76:74:BE:F2:EF:00:D3:BF:57:C2
Authority key identifier: D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06
Certificate issuer:       /CN=d2b57f59782f941b5d2eb3d4286d5911b179e006
Certificate serial:       01977F7B1554804CD2EEF81EC45AA243E01E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
Manifest number:          1596
Signing time:             Tue 17 Jun 2025 20:01:02 +0000
Manifest this update:     Tue 17 Jun 2025 20:01:02 +0000
Manifest next update:     Wed 18 Jun 2025 20:01:02 +0000
Files and hashes:         1: 0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl (hash: 9x0Kc51ivCbmCp3HSSiDRoRnOKO506qaZ41Xm0/32mk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7f:7b:15:54:80:4c:d2:ee:f8:1e:c4:5a:a2:43:e0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2b57f59782f941b5d2eb3d4286d5911b179e006
        Validity
            Not Before: Jun 17 20:01:02 2025 GMT
            Not After : Jun 18 20:01:02 2025 GMT
        Subject: CN=923478f5e79025e03ec47674bef2ef00d3bf57c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4d:bf:99:70:1f:03:6e:72:8d:bb:e9:2c:95:
                    78:1b:79:21:8a:b7:fb:c0:31:0f:52:85:e0:2b:cf:
                    04:b2:73:33:f1:39:da:4c:cb:60:16:5c:7f:88:75:
                    5c:b8:51:52:cd:fe:08:f4:2d:e8:5f:b3:89:5b:a8:
                    22:71:1b:38:72:42:c7:52:5c:d0:b0:7f:5d:dc:b9:
                    4a:f4:a5:65:c9:aa:b7:04:93:56:80:bf:43:de:d5:
                    b6:05:75:51:d8:9a:eb:0a:a3:24:cd:90:c3:f4:39:
                    d8:8f:db:cc:31:85:e3:a9:e7:eb:c1:7d:70:0e:e5:
                    8c:db:ed:e8:75:d7:26:05:57:eb:c9:fd:f0:1b:1f:
                    62:5e:2d:2d:58:48:0b:5b:5e:23:9e:41:64:2b:3c:
                    0a:69:10:80:7c:44:bc:e2:e9:21:e5:c4:b4:5a:ae:
                    3e:cb:13:51:15:df:17:b0:93:a5:4c:b4:25:37:48:
                    85:5e:fb:47:b2:bd:37:1a:11:44:ec:3f:cd:d7:b9:
                    0a:cb:ee:ee:e0:54:1c:e8:e9:8e:c3:9c:db:c2:4b:
                    90:3f:18:d6:3e:bd:53:f1:c7:74:d2:2e:7e:46:ed:
                    d3:2c:48:27:91:03:7c:56:78:d2:32:e1:88:e0:12:
                    99:4d:53:f6:11:87:99:66:92:b9:fb:29:63:9e:96:
                    ce:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:34:78:F5:E7:90:25:E0:3E:C4:76:74:BE:F2:EF:00:D3:BF:57:C2
            X509v3 Authority Key Identifier:
                keyid:D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d7:61:8c:72:ce:ef:16:0e:ab:b6:22:19:3c:1c:8e:1a:d2:
         bc:0e:25:ba:95:60:67:74:43:e1:b8:7e:cf:b3:8d:1a:de:fa:
         ac:17:65:6d:1c:63:db:eb:55:c7:77:22:06:03:63:6e:34:74:
         2b:38:e4:ac:f0:73:25:f6:a9:56:bb:4a:99:6a:ad:eb:59:fc:
         9c:8b:bb:9a:1f:88:34:9b:c2:ee:84:a4:48:f8:db:3a:7d:e6:
         69:9c:c5:61:2e:bb:1a:2a:49:10:07:44:97:69:09:1e:07:55:
         76:0f:33:ed:0b:50:62:c7:77:1f:2e:4f:99:cf:b3:d8:c8:c4:
         69:76:97:4b:64:22:f2:d3:0d:14:fd:ec:54:ef:e8:3a:7e:3c:
         14:56:95:a2:61:1c:aa:0e:70:d8:83:c6:cf:df:53:a6:01:e1:
         c0:fc:34:e6:29:24:97:a6:5c:be:66:3a:22:40:41:5d:17:86:
         a7:86:78:f8:98:eb:20:11:6a:4f:3d:48:68:b9:2a:de:a3:b4:
         49:f5:0a:20:67:f1:d5:93:f6:0f:34:56:b9:f3:fb:d2:84:4b:
         aa:cb:ce:35:b6:c5:0b:e9:e3:d5:e1:b4:28:4d:2d:7e:8b:20:
         93:22:8a:1e:ae:68:c7:c1:ff:8a:6b:0a:1a:c1:d3:19:96:a0:
         b0:0f:94:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd/exVUgEzS7vgexFqiQ+AeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYjU3ZjU5NzgyZjk0MWI1ZDJlYjNkNDI4NmQ1OTExYjE3
OWUwMDYwHhcNMjUwNjE3MjAwMTAyWhcNMjUwNjE4MjAwMTAyWjAzMTEwLwYDVQQD
Eyg5MjM0NzhmNWU3OTAyNWUwM2VjNDc2NzRiZWYyZWYwMGQzYmY1N2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE2/mXAfA25yjbvpLJV4G3khirf7
wDEPUoXgK88EsnMz8TnaTMtgFlx/iHVcuFFSzf4I9C3oX7OJW6gicRs4ckLHUlzQ
sH9d3LlK9KVlyaq3BJNWgL9D3tW2BXVR2JrrCqMkzZDD9DnYj9vMMYXjqefrwX1w
DuWM2+3oddcmBVfryf3wGx9iXi0tWEgLW14jnkFkKzwKaRCAfES84ukh5cS0Wq4+
yxNRFd8XsJOlTLQlN0iFXvtHsr03GhFE7D/N17kKy+7u4FQc6OmOw5zbwkuQPxjW
Pr1T8cd00i5+Ru3TLEgnkQN8VnjSMuGI4BKZTVP2EYeZZpK5+yljnpbOAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJI0ePXnkCXgPsR2dL7y7wDTv1fCMB8GA1UdIwQY
MBaAFNK1f1l4L5QbXS6z1ChtWRGxeeAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHJWX1dYZ3ZsQnRkTHJQVUtHMVpFYkY1NEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NTVlMzUtODdjYy00NDhlLWI3Yjct
MDdjYjIyYmY0MjRkLzEvMHJWX1dYZ3ZsQnRkTHJQVUtHMVpFYkY1NEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84NTVlMzUtODdjYy00NDhlLWI3YjctMDdjYjIyYmY0MjRk
LzEvMHJWX1dYZ3ZsQnRkTHJQVUtHMVpFYkY1NEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtdhjHLO
7xYOq7YiGTwcjhrSvA4lupVgZ3RD4bh+z7ONGt76rBdlbRxj2+tVx3ciBgNjbjR0
KzjkrPBzJfapVrtKmWqt61n8nIu7mh+INJvC7oSkSPjbOn3maZzFYS67GipJEAdE
l2kJHgdVdg8z7QtQYsd3Hy5Pmc+z2MjEaXaXS2Qi8tMNFP3sVO/oOn48FFaVomEc
qg5w2IPGz99TpgHhwPw05ikkl6ZcvmY6IkBBXReGp4Z4+JjrIBFqTz1IaLkq3qO0
SfUKIGfx1ZP2DzRWufP70oRLqsvONbbFC+nj1eG0KE0tfosgkyKKHq5ox8H/imsK
GsHTGZagsA+UDA==
-----END CERTIFICATE-----
Generated at Wed Jun 18 02:59:29 2025 by rpki-client