Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
File:                     v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft (raw, json)
Hash identifier:          wEL7HhWqco1O9vIccgAzgMapQ5qk7dtZwZUxwH5SYaU=
Subject key identifier:   77:6B:FB:7D:87:9A:2D:23:17:42:7A:BA:6B:CF:F7:4D:EE:D7:16:FC
Authority key identifier: BF:EE:53:11:55:60:71:46:30:4D:C6:5D:D5:76:FB:EE:9F:0D:6E:4E
Certificate issuer:       /CN=bfee531155607146304dc65dd576fbee9f0d6e4e
Certificate serial:       01976D74BA36FD798814B68C45FD7D2C4856
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
Manifest number:          03B1
Signing time:             Sat 14 Jun 2025 08:00:55 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:55 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:55 +0000
Files and hashes:         1: v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl (hash: x0B0D20Vh7wSd8ItsuSCO7VnWkPE6tkw0d9v++p2SLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:ba:36:fd:79:88:14:b6:8c:45:fd:7d:2c:48:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfee531155607146304dc65dd576fbee9f0d6e4e
        Validity
            Not Before: Jun 14 08:00:55 2025 GMT
            Not After : Jun 15 08:00:55 2025 GMT
        Subject: CN=776bfb7d879a2d2317427aba6bcff74deed716fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:54:ff:6f:0d:5c:f5:0b:52:05:05:16:25:bb:
                    d8:9b:3e:6c:6c:a0:45:01:af:2d:9c:cb:77:94:f1:
                    3d:48:94:2a:66:af:f1:11:a6:7d:ae:0b:32:1e:b9:
                    72:14:fc:9c:81:39:f6:83:0a:ff:18:62:87:88:57:
                    43:01:f1:c3:90:16:12:b3:95:8f:5f:17:e4:0f:18:
                    8e:95:60:f3:a2:b2:1b:9f:7c:0f:75:6e:a2:a8:20:
                    1b:50:b4:73:38:3f:e8:3b:75:8c:90:58:54:b4:03:
                    da:85:d9:d3:e7:f0:94:35:90:a2:88:c1:01:f7:a5:
                    63:e3:11:96:0e:ac:2c:5b:39:83:7f:26:d9:25:cf:
                    e5:dd:b4:85:4d:0b:08:11:33:45:e7:23:c9:26:b4:
                    13:6e:27:1d:98:d2:97:53:7a:9b:36:cf:bb:08:46:
                    b9:59:4f:17:08:1b:61:89:cf:d3:58:3a:32:ab:0e:
                    c0:80:3a:51:dc:4d:9b:35:8f:2b:06:32:4d:b6:b3:
                    f6:a1:3e:f3:21:f8:49:56:02:96:24:fd:4a:bc:46:
                    10:f5:d2:bb:aa:09:59:39:e1:ef:e9:c1:6a:1d:aa:
                    d7:7c:fa:51:71:36:ee:8a:b2:65:08:71:ab:46:80:
                    67:7d:13:b4:79:32:cf:9d:c8:cb:14:d7:90:a2:75:
                    50:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6B:FB:7D:87:9A:2D:23:17:42:7A:BA:6B:CF:F7:4D:EE:D7:16:FC
            X509v3 Authority Key Identifier:
                keyid:BF:EE:53:11:55:60:71:46:30:4D:C6:5D:D5:76:FB:EE:9F:0D:6E:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:99:c6:d1:2e:32:9b:d3:4c:c4:0d:bd:53:cb:44:a7:73:e9:
         31:6c:5d:7c:db:f8:c4:35:c2:9d:c0:e4:1a:eb:a6:7a:d4:ca:
         6f:d4:68:f4:aa:8d:a0:20:83:74:c5:d0:ab:01:f4:44:d4:3d:
         fc:df:34:20:34:c1:f2:c2:2d:1c:50:04:22:39:3d:2c:35:2e:
         9f:e1:cc:de:c2:09:be:e2:3f:c0:3e:bc:2b:a2:80:8b:42:28:
         fc:8a:5a:d7:51:b0:5d:c2:47:ed:89:af:ef:37:0e:ce:2d:d4:
         f5:8b:73:e5:5e:b6:5d:15:a3:f4:e5:1f:7f:bc:d7:d3:e5:cd:
         32:02:59:99:a6:f3:e8:7d:67:2e:53:13:ad:e2:33:dc:5d:87:
         57:dc:bc:67:79:b8:6a:48:45:ee:9f:21:0b:4c:2a:35:ab:77:
         ab:5f:7e:4e:6d:95:aa:8d:dd:c3:fe:a9:9b:bb:57:47:73:c3:
         0d:07:81:17:29:89:39:22:60:5f:49:7a:ea:26:10:e4:c1:c1:
         b1:af:3c:8a:fc:b0:79:23:f5:54:e6:5e:57:4e:53:c2:a0:23:
         0e:f7:fd:5b:f3:c0:53:4a:d7:0a:37:de:fc:5b:7a:c3:4d:88:
         9d:7a:99:8d:72:12:37:62:d0:55:b8:fc:cf:a8:fc:92:45:3f:
         4d:6c:bd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:13:02 2025 by rpki-client