Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
File:                     wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft (raw, json)
Hash identifier:          F+uod6zVLo+aSNBn2iduGVEa7Fm24haz8iNWtHY8JPo=
Subject key identifier:   A3:35:6B:87:BF:58:9F:E6:68:B3:14:34:4B:32:69:61:A1:AA:17:83
Authority key identifier: C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E
Certificate issuer:       /CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
Certificate serial:       01976D3E73C7580708BCBBDADE20DEF8D8C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
Manifest number:          137F
Signing time:             Sat 14 Jun 2025 07:01:38 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:38 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:38 +0000
Files and hashes:         1: wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl (hash: 1oKSNTfayLgQLAuWWiMk/PX/fJyn9owKfW1IzQlqJEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:73:c7:58:07:08:bc:bb:da:de:20:de:f8:d8:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
        Validity
            Not Before: Jun 14 07:01:38 2025 GMT
            Not After : Jun 15 07:01:38 2025 GMT
        Subject: CN=a3356b87bf589fe668b314344b326961a1aa1783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d2:6a:1f:ca:3b:bb:6c:eb:f8:3d:bb:aa:8c:
                    2f:69:a8:0c:2b:2d:af:c2:c9:86:d7:ec:1e:f5:d9:
                    d1:9a:c0:84:42:82:ff:d0:49:d6:59:e0:ef:3f:5a:
                    34:00:0e:2a:2f:1f:5b:0d:36:76:6f:a2:57:95:98:
                    90:3e:b7:4e:85:98:82:a2:8a:39:85:7a:03:0b:9f:
                    c6:d3:1c:09:34:36:e1:8b:f8:ea:d2:0f:4f:84:df:
                    9b:f7:42:19:41:b7:27:a1:8a:03:18:a5:98:8c:24:
                    b4:d0:e9:d4:e9:57:b4:81:0e:e8:cc:df:c5:b5:87:
                    72:1a:63:e9:35:3f:dc:3b:2f:b9:57:44:0e:d4:fc:
                    e0:8d:f8:24:f2:7b:f4:92:26:3f:b0:a2:07:9c:9e:
                    a0:75:a5:58:96:75:53:3a:6f:a0:3e:7a:64:3b:17:
                    2b:30:1d:e6:0e:9a:cc:60:93:ec:d5:54:84:54:6a:
                    78:b0:08:75:95:38:b3:a2:f1:32:13:9f:16:51:2b:
                    88:c0:22:1c:87:d8:f1:fc:d3:17:82:71:51:59:b3:
                    87:d5:49:e5:25:1f:f1:9d:4a:b4:bc:bd:18:81:b8:
                    e0:e3:91:d7:31:e4:62:a2:3b:1d:2b:c6:e6:90:7a:
                    9f:2d:3b:cf:ed:ac:52:32:32:7c:13:08:ae:bc:ce:
                    73:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:35:6B:87:BF:58:9F:E6:68:B3:14:34:4B:32:69:61:A1:AA:17:83
            X509v3 Authority Key Identifier:
                keyid:C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:c6:72:a3:bd:8f:b6:0f:55:27:15:7b:3f:72:63:9f:30:48:
         25:e4:b4:3f:5b:7b:39:15:92:f4:74:7c:70:63:6d:c5:ec:07:
         d4:7b:04:52:0d:e2:d8:46:aa:4f:cb:4f:f0:f8:cf:19:3f:a7:
         92:c0:47:9f:bb:9c:4d:8a:04:ec:7b:a7:03:03:03:3a:89:ef:
         a6:4d:51:7b:65:28:29:89:14:7f:7a:31:06:54:40:b8:4d:1f:
         f4:2a:e2:db:d7:59:b0:12:02:9a:77:f5:01:ea:98:f5:12:a8:
         2e:2c:df:d2:2e:5e:08:52:8d:86:1e:d6:93:27:16:b0:08:ff:
         3c:bb:6c:ca:ed:a0:ef:a5:6e:2c:a2:92:f9:92:28:f6:1e:d9:
         39:b0:6d:de:de:49:94:8b:2a:ea:d9:23:e5:dc:ec:6a:79:62:
         62:36:c9:cd:e6:17:ee:35:35:4e:45:7a:9a:08:4a:16:ba:11:
         0c:bd:a1:f2:03:98:d9:a2:e7:1f:2f:46:f8:cb:01:91:4f:1a:
         54:59:95:c0:4e:e0:e5:2f:ca:d5:e5:ae:c6:cf:03:0f:96:03:
         e0:f3:6f:10:02:0d:64:99:ad:78:29:88:b5:20:a4:97:b9:53:
         8c:fd:d8:da:aa:13:0c:cd:25:81:c4:bb:01:17:74:ed:21:1e:
         dd:50:07:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPnPHWAcIvLva3iDe+NjCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMzdmNjM4YzBiZTQ2MDBiNDY2ZGU4ZTMzMGQ0Y2Y2YTdm
ZjNiM2UwHhcNMjUwNjE0MDcwMTM4WhcNMjUwNjE1MDcwMTM4WjAzMTEwLwYDVQQD
EyhhMzM1NmI4N2JmNTg5ZmU2NjhiMzE0MzQ0YjMyNjk2MWExYWExNzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dJqH8o7u2zr+D27qowvaagMKy2v
wsmG1+we9dnRmsCEQoL/0EnWWeDvP1o0AA4qLx9bDTZ2b6JXlZiQPrdOhZiCooo5
hXoDC5/G0xwJNDbhi/jq0g9PhN+b90IZQbcnoYoDGKWYjCS00OnU6Ve0gQ7ozN/F
tYdyGmPpNT/cOy+5V0QO1Pzgjfgk8nv0kiY/sKIHnJ6gdaVYlnVTOm+gPnpkOxcr
MB3mDprMYJPs1VSEVGp4sAh1lTizovEyE58WUSuIwCIch9jx/NMXgnFRWbOH1Unl
JR/xnUq0vL0Ygbjg45HXMeRiojsdK8bmkHqfLTvP7axSMjJ8EwiuvM5zIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKM1a4e/WJ/maLMUNEsyaWGhqheDMB8GA1UdIwQY
MBaAFME39jjAvkYAtGbejjMNTPan/zs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1RmMk9NQy1SZ0MwWnQ2T013MU05cWZfT3o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80OTFhODktNTg1MC00MGI2LTg1ZjQt
MTU0NmJiNmQzNmJiLzEvd1RmMk9NQy1SZ0MwWnQ2T013MU05cWZfT3o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny80OTFhODktNTg1MC00MGI2LTg1ZjQtMTU0NmJiNmQzNmJi
LzEvd1RmMk9NQy1SZ0MwWnQ2T013MU05cWZfT3o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8Zyo72P
tg9VJxV7P3JjnzBIJeS0P1t7ORWS9HR8cGNtxewH1HsEUg3i2EaqT8tP8PjPGT+n
ksBHn7ucTYoE7HunAwMDOonvpk1Re2UoKYkUf3oxBlRAuE0f9Cri29dZsBICmnf1
AeqY9RKoLizf0i5eCFKNhh7WkycWsAj/PLtsyu2g76VuLKKS+ZIo9h7ZObBt3t5J
lIsq6tkj5dzsanliYjbJzeYX7jU1TkV6mghKFroRDL2h8gOY2aLnHy9G+MsBkU8a
VFmVwE7g5S/K1eWuxs8DD5YD4PNvEAINZJmteCmItSCkl7lTjP3Y2qoTDM0lgcS7
ARd07SEe3VAHNA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:16:43 2025 by rpki-client