Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
File:                     KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft (raw, json)
Hash identifier:          Zf1WmhZNZrDOYFdc0buYREjlkHwPH0Y87PABgfn+yqo=
Subject key identifier:   60:C8:1D:D0:42:34:6E:6E:BF:39:6B:AD:2F:43:DD:81:BF:BB:8C:B5
Authority key identifier: 29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE
Certificate issuer:       /CN=29081d68bddea8bebf26e61821978594f223bcbe
Certificate serial:       01987450075B2FDA4A2D747DD0401FA21F03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
Manifest number:          0817
Signing time:             Mon 04 Aug 2025 09:00:58 +0000
Manifest this update:     Mon 04 Aug 2025 09:00:58 +0000
Manifest next update:     Tue 05 Aug 2025 09:00:58 +0000
Files and hashes:         1: KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl (hash: GNmzYIiuYGsV1A8Ds04H3Mi5VTXTeePfkGmy6xzTcCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:07:5b:2f:da:4a:2d:74:7d:d0:40:1f:a2:1f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29081d68bddea8bebf26e61821978594f223bcbe
        Validity
            Not Before: Aug  4 09:00:58 2025 GMT
            Not After : Aug  5 09:00:58 2025 GMT
        Subject: CN=60c81dd042346e6ebf396bad2f43dd81bfbb8cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:00:74:b6:2a:d2:6d:ed:5e:82:55:2c:e7:54:
                    12:45:19:d1:a2:fa:61:aa:ed:88:67:a2:b3:e4:42:
                    51:9a:98:3e:3b:24:45:ae:6e:d3:be:d1:59:a3:c4:
                    b5:11:8e:c0:13:dc:e1:bd:a7:66:dd:61:3a:a4:63:
                    be:de:e9:88:66:c1:c6:eb:69:96:25:1d:ec:e6:ab:
                    45:de:22:a0:dc:40:b0:9f:cc:cb:54:6e:a9:ee:e4:
                    cf:5f:b6:87:5c:50:6f:a7:68:49:21:16:19:f2:2c:
                    ca:18:05:64:f8:85:15:5b:c1:ed:65:34:e3:c6:9f:
                    9e:d7:bd:41:68:c6:98:10:3d:ca:e1:33:4d:2a:87:
                    80:60:93:09:18:08:87:6c:13:00:97:c3:ed:c1:b8:
                    71:b5:c0:08:d2:bb:1c:be:a1:85:6f:8b:67:5f:01:
                    93:94:65:e7:75:08:1a:be:d6:c2:cb:1b:f6:53:ac:
                    11:c3:d6:a7:47:f6:67:ce:87:57:8a:a0:03:eb:4e:
                    dd:0b:a6:61:17:db:40:43:82:29:74:01:7b:aa:84:
                    be:db:54:65:c2:43:be:08:6e:10:61:5b:2f:c9:c9:
                    a9:4a:af:fc:e1:9f:b8:ed:90:c2:6c:ff:37:86:01:
                    7d:c5:d9:75:17:65:78:a8:d0:b4:eb:6c:53:c7:38:
                    d6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C8:1D:D0:42:34:6E:6E:BF:39:6B:AD:2F:43:DD:81:BF:BB:8C:B5
            X509v3 Authority Key Identifier:
                keyid:29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:7a:b9:ce:28:67:74:a6:37:85:a0:e8:80:bd:2f:7b:eb:0e:
         2e:50:a2:46:bb:73:b3:4d:12:c7:0c:6e:dc:4e:a4:b1:23:53:
         6a:62:00:30:7c:2c:7f:35:32:ec:b6:f9:a3:ac:2f:18:60:c9:
         a6:bc:dd:81:a0:44:6a:88:86:0e:57:49:fb:51:d1:2c:bb:c3:
         d4:eb:ec:95:0f:72:c7:a2:3d:57:c4:fb:be:73:99:9b:f9:7d:
         ae:3e:90:56:ab:57:81:1a:a1:46:32:2c:38:a3:14:76:52:98:
         00:07:17:e1:d1:fe:1b:47:64:46:9a:d6:34:76:0f:c8:7c:71:
         9d:34:94:24:2c:6a:52:85:20:d8:06:b1:03:52:d6:17:28:b1:
         04:bc:51:ad:a2:ec:d8:12:f6:ce:92:f7:f3:74:52:dd:0a:e3:
         d4:58:ba:b6:d3:e8:9a:e4:07:f2:02:8b:36:f4:a9:8c:f9:94:
         c0:58:55:8c:46:04:8b:d9:b4:c8:32:d7:7d:43:2d:df:31:42:
         2f:fb:e0:37:d2:4b:d3:09:05:22:15:e5:8c:fa:09:6d:0c:53:
         64:ed:84:22:e9:97:47:78:e8:e0:95:58:24:f6:1f:2e:bc:d5:
         ea:da:a9:32:41:90:78:9d:ef:f6:b6:8f:17:c8:7b:92:6a:5e:
         11:47:f7:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UAdbL9pKLXR90EAfoh8DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MDgxZDY4YmRkZWE4YmViZjI2ZTYxODIxOTc4NTk0ZjIy
M2JjYmUwHhcNMjUwODA0MDkwMDU4WhcNMjUwODA1MDkwMDU4WjAzMTEwLwYDVQQD
Eyg2MGM4MWRkMDQyMzQ2ZTZlYmYzOTZiYWQyZjQzZGQ4MWJmYmI4Y2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AB0tirSbe1eglUs51QSRRnRovph
qu2IZ6Kz5EJRmpg+OyRFrm7TvtFZo8S1EY7AE9zhvadm3WE6pGO+3umIZsHG62mW
JR3s5qtF3iKg3ECwn8zLVG6p7uTPX7aHXFBvp2hJIRYZ8izKGAVk+IUVW8HtZTTj
xp+e171BaMaYED3K4TNNKoeAYJMJGAiHbBMAl8PtwbhxtcAI0rscvqGFb4tnXwGT
lGXndQgavtbCyxv2U6wRw9anR/ZnzodXiqAD607dC6ZhF9tAQ4IpdAF7qoS+21Rl
wkO+CG4QYVsvycmpSq/84Z+47ZDCbP83hgF9xdl1F2V4qNC062xTxzjWMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDIHdBCNG5uvzlrrS9D3YG/u4y1MB8GA1UdIwQY
MBaAFCkIHWi93qi+vybmGCGXhZTyI7y+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1FnZGFMM2VxTDZfSnVZWUlaZUZsUElqdkw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iNjhmNmYtOTYwZC00ZTMzLTg3M2Yt
NzM2N2MwZjIwYmM5LzEvS1FnZGFMM2VxTDZfSnVZWUlaZUZsUElqdkw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9iNjhmNmYtOTYwZC00ZTMzLTg3M2YtNzM2N2MwZjIwYmM5
LzEvS1FnZGFMM2VxTDZfSnVZWUlaZUZsUElqdkw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3q5zihn
dKY3haDogL0ve+sOLlCiRrtzs00Sxwxu3E6ksSNTamIAMHwsfzUy7Lb5o6wvGGDJ
przdgaBEaoiGDldJ+1HRLLvD1OvslQ9yx6I9V8T7vnOZm/l9rj6QVqtXgRqhRjIs
OKMUdlKYAAcX4dH+G0dkRprWNHYPyHxxnTSUJCxqUoUg2AaxA1LWFyixBLxRraLs
2BL2zpL383RS3Qrj1Fi6ttPomuQH8gKLNvSpjPmUwFhVjEYEi9m0yDLXfUMt3zFC
L/vgN9JL0wkFIhXljPoJbQxTZO2EIumXR3jo4JVYJPYfLrzV6tqpMkGQeJ3v9raP
F8h7kmpeEUf3KQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:27 2025 by rpki-client