Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.mft
File:                     Mlpdv7OJlbWnn8HQ7jFEySeSTqU.mft (raw, json)
Hash identifier:          0HkL4LEvcnwetGROAD0VhhgUfmZnOfcpXJBzLd2sNi8=
Subject key identifier:   FD:E0:61:F6:1D:80:03:F7:C8:2C:BE:A4:26:6B:58:A9:ED:28:55:D1
Authority key identifier: 32:5A:5D:BF:B3:89:95:B5:A7:9F:C1:D0:EE:31:44:C9:27:92:4E:A5
Certificate issuer:       /CN=325a5dbfb38995b5a79fc1d0ee3144c927924ea5
Certificate serial:       01987C09D8FDED0C1A9D98A6051F91F5FB2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.mft
Manifest number:          1617
Signing time:             Tue 05 Aug 2025 21:01:16 +0000
Manifest this update:     Tue 05 Aug 2025 21:01:16 +0000
Manifest next update:     Wed 06 Aug 2025 21:01:16 +0000
Files and hashes:         1: Mlpdv7OJlbWnn8HQ7jFEySeSTqU.crl (hash: hrjAtscagUFBw5uzQWEZZsIOwkmBblqq0+J8IXhk+aA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 21:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:09:d8:fd:ed:0c:1a:9d:98:a6:05:1f:91:f5:fb:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=325a5dbfb38995b5a79fc1d0ee3144c927924ea5
        Validity
            Not Before: Aug  5 21:01:16 2025 GMT
            Not After : Aug  6 21:01:16 2025 GMT
        Subject: CN=fde061f61d8003f7c82cbea4266b58a9ed2855d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:89:c0:ee:d2:56:2a:5f:0d:27:2d:a9:90:6e:
                    d8:d9:6e:af:da:9e:00:25:28:d7:0e:95:2e:1d:5e:
                    6b:50:f7:1d:e5:6e:db:19:cf:ca:17:32:98:3e:1a:
                    e4:1f:1e:9d:a7:c3:19:b2:cb:a6:6a:fb:ba:b4:cb:
                    2a:c6:15:63:ae:93:61:e4:a8:95:55:5c:2f:1a:9f:
                    ea:d3:36:26:bb:a4:f8:44:ba:a7:16:a4:10:ad:0a:
                    69:1f:6e:36:59:a4:2e:41:8e:1c:32:f4:b1:30:0c:
                    be:68:f8:06:c6:e3:7b:82:9f:bf:4e:8d:86:13:44:
                    97:26:41:49:eb:fd:25:68:1f:30:97:52:bf:d4:c5:
                    90:2f:f8:2d:b6:bb:a8:10:ab:4d:75:c7:dc:80:6d:
                    91:d8:a4:99:68:a6:32:bf:b0:52:f6:ed:33:75:a6:
                    ca:4c:0b:87:57:ae:3d:f0:06:60:0c:29:03:5d:e8:
                    52:97:ed:1b:23:f1:5c:b4:0c:65:ec:e1:a5:8e:c8:
                    b3:f8:ca:ad:75:f7:18:e2:82:c8:79:23:18:e6:98:
                    c6:b5:f6:e1:76:65:68:8b:af:db:dd:25:3b:c8:64:
                    d6:99:93:81:f3:f9:96:4f:4b:a5:90:cd:f8:5b:d3:
                    22:32:66:cb:51:e6:c3:17:c6:e5:c2:15:21:82:e5:
                    64:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E0:61:F6:1D:80:03:F7:C8:2C:BE:A4:26:6B:58:A9:ED:28:55:D1
            X509v3 Authority Key Identifier:
                keyid:32:5A:5D:BF:B3:89:95:B5:A7:9F:C1:D0:EE:31:44:C9:27:92:4E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:20:f7:0c:01:5f:29:67:06:1b:fb:65:da:73:17:23:c7:3f:
         2c:67:bb:7f:4d:e7:1c:70:cc:d6:e8:04:7a:28:1d:3b:92:09:
         b2:a0:87:17:ee:4d:ae:f1:3e:d9:aa:da:eb:14:61:c8:ff:61:
         7b:31:3c:0c:3c:36:98:eb:e5:92:cc:ec:0b:bc:b4:f7:f3:e9:
         c5:08:8e:3a:95:61:11:b8:50:df:4a:bd:74:00:f8:f3:77:4d:
         fe:9c:18:5e:c6:c0:11:54:80:21:35:c6:80:c2:7a:6d:3b:ee:
         2a:5a:a1:09:e9:20:00:06:90:91:70:9e:28:bf:04:e2:fe:d5:
         dd:52:fc:69:dc:48:6b:70:f7:3b:b3:6d:77:62:82:5b:42:83:
         67:b1:96:58:0e:2d:51:b7:34:37:46:48:8a:64:f9:56:1a:29:
         9f:f5:4d:f6:cb:8b:0a:4a:1b:46:08:0d:ad:53:80:1a:f7:96:
         94:c0:42:19:59:86:88:ed:d0:71:91:2a:39:96:70:ce:46:69:
         d7:72:fe:fa:1a:b9:d3:86:ee:ad:6a:f2:8d:b5:ed:b9:83:06:
         b4:27:20:c2:43:fe:7f:96:81:d0:bf:af:0f:89:f1:07:2b:28:
         f2:a6:32:54:b3:09:17:b5:b5:fb:50:f4:a3:a6:51:13:15:60:
         cc:e5:88:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8Cdj97QwanZimBR+R9fsrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNWE1ZGJmYjM4OTk1YjVhNzlmYzFkMGVlMzE0NGM5Mjc5
MjRlYTUwHhcNMjUwODA1MjEwMTE2WhcNMjUwODA2MjEwMTE2WjAzMTEwLwYDVQQD
EyhmZGUwNjFmNjFkODAwM2Y3YzgyY2JlYTQyNjZiNThhOWVkMjg1NWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqInA7tJWKl8NJy2pkG7Y2W6v2p4A
JSjXDpUuHV5rUPcd5W7bGc/KFzKYPhrkHx6dp8MZssumavu6tMsqxhVjrpNh5KiV
VVwvGp/q0zYmu6T4RLqnFqQQrQppH242WaQuQY4cMvSxMAy+aPgGxuN7gp+/To2G
E0SXJkFJ6/0laB8wl1K/1MWQL/gttruoEKtNdcfcgG2R2KSZaKYyv7BS9u0zdabK
TAuHV6498AZgDCkDXehSl+0bI/FctAxl7OGljsiz+MqtdfcY4oLIeSMY5pjGtfbh
dmVoi6/b3SU7yGTWmZOB8/mWT0ulkM34W9MiMmbLUebDF8blwhUhguVk4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3gYfYdgAP3yCy+pCZrWKntKFXRMB8GA1UdIwQY
MBaAFDJaXb+ziZW1p5/B0O4xRMknkk6lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWxwZHY3T0psYldubjhIUTdqRkV5U2VTVHFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yMjQ1NGMtNDhiZC00ZGFiLTk1YTAt
NTZhYzk2NTk2ZDBiLzEvTWxwZHY3T0psYldubjhIUTdqRkV5U2VTVHFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yMjQ1NGMtNDhiZC00ZGFiLTk1YTAtNTZhYzk2NTk2ZDBi
LzEvTWxwZHY3T0psYldubjhIUTdqRkV5U2VTVHFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARiD3DAFf
KWcGG/tl2nMXI8c/LGe7f03nHHDM1ugEeigdO5IJsqCHF+5NrvE+2ara6xRhyP9h
ezE8DDw2mOvlkszsC7y09/PpxQiOOpVhEbhQ30q9dAD483dN/pwYXsbAEVSAITXG
gMJ6bTvuKlqhCekgAAaQkXCeKL8E4v7V3VL8adxIa3D3O7Ntd2KCW0KDZ7GWWA4t
Ubc0N0ZIimT5Vhopn/VN9suLCkobRggNrVOAGveWlMBCGVmGiO3QcZEqOZZwzkZp
13L++hq504burWryjbXtuYMGtCcgwkP+f5aB0L+vD4nxByso8qYyVLMJF7W1+1D0
o6ZRExVgzOWICg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:59:47 2025 by rpki-client