Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
File:                     MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft (raw, json)
Hash identifier:          EVWrCVYL5cA+1QCDHVUjLFRBeXIAEAe2q8/If1OypzM=
Subject key identifier:   5B:73:3B:B0:7E:2E:88:F8:EB:03:D8:43:3B:88:BC:AF:16:B9:99:DA
Authority key identifier: 30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
Certificate issuer:       /CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
Certificate serial:       01976C98885AAF23158A28020AF3F7D17786
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
Manifest number:          0985
Signing time:             Sat 14 Jun 2025 04:00:24 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:24 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:24 +0000
Files and hashes:         1: MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl (hash: lXFRcfSSZU8ZICOdBVneI9O4FWRVBazYxw5cg0du+O8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:88:5a:af:23:15:8a:28:02:0a:f3:f7:d1:77:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
        Validity
            Not Before: Jun 14 04:00:24 2025 GMT
            Not After : Jun 15 04:00:24 2025 GMT
        Subject: CN=5b733bb07e2e88f8eb03d8433b88bcaf16b999da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9f:e6:2b:3b:04:80:52:37:c2:78:db:38:d9:
                    c0:35:ca:dd:83:64:39:9c:60:b9:89:e5:6d:64:74:
                    0c:0f:f4:c4:da:3e:a7:ab:7a:ba:b0:87:82:cf:7f:
                    c7:1f:81:95:9d:b3:4b:43:85:33:4f:12:dd:4e:1c:
                    e3:ab:a0:83:f8:a1:2f:eb:88:47:30:bd:c2:64:32:
                    64:76:06:47:e1:61:c2:4e:24:42:6c:aa:b8:40:d7:
                    9f:5f:9e:83:40:9f:ab:50:5b:fc:98:a4:7c:39:c3:
                    58:31:ec:47:02:3b:2e:85:c4:c3:26:79:a7:2f:ec:
                    03:28:03:e4:15:80:f4:fd:94:06:cd:09:71:c5:e5:
                    42:40:b3:3c:bd:1e:90:58:6a:26:5a:8f:e8:af:ec:
                    b9:ef:7b:f3:69:3a:54:a3:40:f8:e0:ba:ee:ab:d8:
                    0c:11:7f:7f:0c:f1:1c:77:ab:81:08:37:27:56:72:
                    09:42:fb:6f:98:07:7b:c4:96:92:71:e4:77:f1:01:
                    5b:24:9f:96:2a:41:70:4a:95:b3:e1:a3:a5:c7:b4:
                    ad:5b:62:89:d6:4f:fb:77:14:ca:df:6e:90:a1:ed:
                    7f:00:95:aa:80:5a:00:bd:84:f4:37:bc:6d:11:3d:
                    ff:7d:65:b0:68:19:43:66:b2:74:a0:b7:78:3b:4d:
                    9a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:73:3B:B0:7E:2E:88:F8:EB:03:D8:43:3B:88:BC:AF:16:B9:99:DA
            X509v3 Authority Key Identifier:
                keyid:30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:9c:31:f9:80:f6:7c:18:24:5d:0b:a1:bd:9a:7a:05:95:bf:
         01:14:0e:c7:52:37:12:29:9d:4d:03:a3:c9:81:b1:fc:13:75:
         1f:6b:6b:90:22:46:4b:ea:7f:10:1c:15:6b:6f:99:25:2f:4c:
         c6:54:8f:7c:c5:8a:92:29:61:51:ab:f2:f6:50:78:03:18:d9:
         94:e9:a9:5f:69:c6:e1:5e:ac:bd:f7:b3:04:4c:5f:e6:ae:48:
         94:9d:02:b8:ff:f6:76:02:4d:ad:52:ae:9b:ae:63:ca:8c:25:
         36:f7:50:63:73:91:8b:3f:e2:9d:fe:05:3b:a0:6d:49:47:5a:
         1b:92:94:05:be:bb:83:f5:7a:36:2b:0f:26:3a:3d:fb:fa:76:
         64:8d:81:9f:15:81:0a:55:40:02:78:22:98:6f:66:a1:f1:e5:
         0f:7c:7d:85:90:c8:c2:6b:e6:00:11:32:ef:34:8e:12:2e:33:
         cd:1c:20:b9:f5:65:3f:d6:f6:cc:0e:6f:f4:a8:e4:55:8c:38:
         c7:d5:c5:23:ec:31:03:cc:9d:79:6e:26:96:32:45:6e:97:4b:
         e9:ab:75:1f:a3:3e:39:4e:aa:21:47:12:30:ca:b3:9b:41:90:
         41:64:e6:30:af:3c:f9:2c:2e:ee:ef:85:4a:b2:16:4d:16:48:
         e1:c2:2f:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmIharyMViigCCvP30XeGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMWUzZmNhNmYxMzYyOGU2ZWI4M2NmZmU1ZWQ4YTAxZWRk
NTllOGIwHhcNMjUwNjE0MDQwMDI0WhcNMjUwNjE1MDQwMDI0WjAzMTEwLwYDVQQD
Eyg1YjczM2JiMDdlMmU4OGY4ZWIwM2Q4NDMzYjg4YmNhZjE2Yjk5OWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05/mKzsEgFI3wnjbONnANcrdg2Q5
nGC5ieVtZHQMD/TE2j6nq3q6sIeCz3/HH4GVnbNLQ4UzTxLdThzjq6CD+KEv64hH
ML3CZDJkdgZH4WHCTiRCbKq4QNefX56DQJ+rUFv8mKR8OcNYMexHAjsuhcTDJnmn
L+wDKAPkFYD0/ZQGzQlxxeVCQLM8vR6QWGomWo/or+y573vzaTpUo0D44Lruq9gM
EX9/DPEcd6uBCDcnVnIJQvtvmAd7xJaSceR38QFbJJ+WKkFwSpWz4aOlx7StW2KJ
1k/7dxTK326Qoe1/AJWqgFoAvYT0N7xtET3/fWWwaBlDZrJ0oLd4O02a4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtzO7B+Loj46wPYQzuIvK8WuZnaMB8GA1UdIwQY
MBaAFDAeP8pvE2KObrg8/+XtigHt1Z6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUI0X3ltOFRZbzV1dUR6XzVlMktBZTNWbm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC85MmNlNGMtZjFjNS00YzhmLTk5ZGYt
ZDBkN2YyYjJhNWUwLzEvTUI0X3ltOFRZbzV1dUR6XzVlMktBZTNWbm9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC85MmNlNGMtZjFjNS00YzhmLTk5ZGYtZDBkN2YyYjJhNWUw
LzEvTUI0X3ltOFRZbzV1dUR6XzVlMktBZTNWbm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZwx+YD2
fBgkXQuhvZp6BZW/ARQOx1I3EimdTQOjyYGx/BN1H2trkCJGS+p/EBwVa2+ZJS9M
xlSPfMWKkilhUavy9lB4AxjZlOmpX2nG4V6svfezBExf5q5IlJ0CuP/2dgJNrVKu
m65jyowlNvdQY3ORiz/inf4FO6BtSUdaG5KUBb67g/V6NisPJjo9+/p2ZI2BnxWB
ClVAAngimG9mofHlD3x9hZDIwmvmABEy7zSOEi4zzRwgufVlP9b2zA5v9KjkVYw4
x9XFI+wxA8ydeW4mljJFbpdL6at1H6M+OU6qIUcSMMqzm0GQQWTmMK88+Swu7u+F
SrIWTRZI4cIvjQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:15 2025 by rpki-client