Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
File:                     3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft (raw, json)
Hash identifier:          9fe5P4T8JIxZBpujeJyW9XB9/jTrAR22z6N2hPqmNsk=
Subject key identifier:   66:62:2A:5A:76:FB:EF:BD:11:E0:BD:87:FB:31:09:BE:91:F4:F3:6A
Authority key identifier: DD:0B:83:6F:D7:00:3F:83:16:04:A0:3F:23:44:7A:7F:2F:49:07:B3
Certificate issuer:       /CN=dd0b836fd7003f831604a03f23447a7f2f4907b3
Certificate serial:       01976D3D3894B3D139CAFC0F709D748A3652
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3QuDb9cAP4MWBKA_I0R6fy9JB7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
Manifest number:          06B5
Signing time:             Sat 14 Jun 2025 07:00:18 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:18 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:18 +0000
Files and hashes:         1: 3QuDb9cAP4MWBKA_I0R6fy9JB7M.crl (hash: e96k2dKnZ34p/XvlJOV3213WAYLwdpBLxEpvA2/b9JQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3QuDb9cAP4MWBKA_I0R6fy9JB7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:38:94:b3:d1:39:ca:fc:0f:70:9d:74:8a:36:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd0b836fd7003f831604a03f23447a7f2f4907b3
        Validity
            Not Before: Jun 14 07:00:18 2025 GMT
            Not After : Jun 15 07:00:18 2025 GMT
        Subject: CN=66622a5a76fbefbd11e0bd87fb3109be91f4f36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:98:5e:16:5a:17:d9:81:4f:26:4b:f8:aa:5f:
                    07:9a:6b:cb:26:04:d3:aa:9e:cf:d0:ab:20:05:3d:
                    a6:b8:b3:4d:65:21:b0:b4:ce:47:0e:f9:b7:e7:18:
                    b5:b6:c0:2c:bc:92:67:fb:10:9b:bb:b6:04:bb:63:
                    04:f9:26:69:56:ef:81:89:71:6d:3a:89:60:48:ae:
                    3e:b4:b7:b8:04:97:7f:2c:73:0e:fa:2a:57:62:86:
                    1a:cc:59:31:91:58:e8:01:a2:6e:a5:6c:a1:d6:d3:
                    81:e5:fd:2a:5c:00:82:af:77:50:5a:60:e5:33:01:
                    2a:d6:ae:3d:18:ea:39:bf:bb:e6:4e:02:a2:5f:38:
                    32:bb:97:52:09:9c:ee:66:32:3b:5e:5f:22:b7:f1:
                    a6:65:9b:65:b4:5a:12:25:b5:70:90:c4:8c:93:05:
                    e6:de:70:40:84:ee:2b:b2:43:6f:47:8e:65:f2:ab:
                    ed:f5:e8:46:69:45:28:1d:dd:74:af:90:ff:60:c6:
                    a4:b2:8e:cf:4e:02:9a:f4:e3:4e:1e:62:bc:a8:0a:
                    e6:ed:fa:3f:9c:33:87:2d:8b:37:a7:eb:fc:e2:0c:
                    e1:31:ca:03:48:99:ff:f4:a0:0d:78:6f:1c:1e:4f:
                    85:da:58:bf:0a:13:cf:23:16:2a:01:ed:f2:bd:f9:
                    58:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:62:2A:5A:76:FB:EF:BD:11:E0:BD:87:FB:31:09:BE:91:F4:F3:6A
            X509v3 Authority Key Identifier:
                keyid:DD:0B:83:6F:D7:00:3F:83:16:04:A0:3F:23:44:7A:7F:2F:49:07:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QuDb9cAP4MWBKA_I0R6fy9JB7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:63:dc:82:2f:ab:5a:18:1d:41:db:79:b1:9c:07:2c:ba:42:
         f3:94:95:70:5f:d0:45:8d:a4:28:41:34:23:10:65:a0:88:db:
         a9:76:61:00:9c:11:38:db:68:3f:cd:5c:e0:0a:dd:20:ea:5c:
         8a:69:c6:a7:69:9b:b7:f7:7b:78:5f:9e:f1:4f:de:54:b3:61:
         b3:60:71:cf:8f:2b:c4:46:12:b6:8c:d2:4a:39:60:f0:94:8a:
         27:26:28:f4:25:35:55:ed:bb:89:46:03:2d:ce:98:f2:14:c6:
         da:ba:37:1d:a4:2c:eb:00:c4:fa:d1:75:9e:c7:72:33:80:8c:
         1a:f5:4e:ba:12:3d:1b:d5:d3:02:8d:55:2d:5d:1e:f1:53:5d:
         7b:3a:4b:d6:65:55:ef:73:d3:fc:f6:cb:ed:a3:74:42:f8:3c:
         af:10:b9:8c:fc:22:1b:6d:19:bc:7a:c5:6c:23:c4:8a:cb:09:
         62:68:6f:98:1a:a5:76:a6:13:0b:8c:ae:33:a0:1b:b5:09:6c:
         d2:30:e6:19:8c:88:4c:cf:98:7e:3a:07:7d:34:0b:2e:6c:c1:
         a4:d2:02:7f:bf:dc:ba:5a:61:6e:b6:37:6b:b9:ff:01:cd:6a:
         8b:9b:1f:a3:d2:14:56:c2:1c:7b:21:43:31:cb:ae:43:b2:5e:
         ed:23:69:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPTiUs9E5yvwPcJ10ijZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMGI4MzZmZDcwMDNmODMxNjA0YTAzZjIzNDQ3YTdmMmY0
OTA3YjMwHhcNMjUwNjE0MDcwMDE4WhcNMjUwNjE1MDcwMDE4WjAzMTEwLwYDVQQD
Eyg2NjYyMmE1YTc2ZmJlZmJkMTFlMGJkODdmYjMxMDliZTkxZjRmMzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8pheFloX2YFPJkv4ql8HmmvLJgTT
qp7P0KsgBT2muLNNZSGwtM5HDvm35xi1tsAsvJJn+xCbu7YEu2ME+SZpVu+BiXFt
OolgSK4+tLe4BJd/LHMO+ipXYoYazFkxkVjoAaJupWyh1tOB5f0qXACCr3dQWmDl
MwEq1q49GOo5v7vmTgKiXzgyu5dSCZzuZjI7Xl8it/GmZZtltFoSJbVwkMSMkwXm
3nBAhO4rskNvR45l8qvt9ehGaUUoHd10r5D/YMakso7PTgKa9ONOHmK8qArm7fo/
nDOHLYs3p+v84gzhMcoDSJn/9KANeG8cHk+F2li/ChPPIxYqAe3yvflYAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZiKlp2+++9EeC9h/sxCb6R9PNqMB8GA1UdIwQY
MBaAFN0Lg2/XAD+DFgSgPyNEen8vSQezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1F1RGI5Y0FQNE1XQktBX0kwUjZmeTlKQjdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS85NjNjMmMtMDk5My00NjIxLThiMjAt
ZGEwMzIzNTNiNzlmLzEvM1F1RGI5Y0FQNE1XQktBX0kwUjZmeTlKQjdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS85NjNjMmMtMDk5My00NjIxLThiMjAtZGEwMzIzNTNiNzlm
LzEvM1F1RGI5Y0FQNE1XQktBX0kwUjZmeTlKQjdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2Pcgi+r
WhgdQdt5sZwHLLpC85SVcF/QRY2kKEE0IxBloIjbqXZhAJwRONtoP81c4ArdIOpc
imnGp2mbt/d7eF+e8U/eVLNhs2Bxz48rxEYStozSSjlg8JSKJyYo9CU1Ve27iUYD
Lc6Y8hTG2ro3HaQs6wDE+tF1nsdyM4CMGvVOuhI9G9XTAo1VLV0e8VNdezpL1mVV
73PT/PbL7aN0Qvg8rxC5jPwiG20ZvHrFbCPEissJYmhvmBqldqYTC4yuM6AbtQls
0jDmGYyITM+YfjoHfTQLLmzBpNICf7/culphbrY3a7n/Ac1qi5sfo9IUVsIceyFD
McuuQ7Je7SNpdw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:55:50 2025 by rpki-client