Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
File:                     REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft (raw, json)
Hash identifier:          avMRvpDpD+qb2dKrKeEtUjes4IrFpFUtahFnW3QZlZ8=
Subject key identifier:   16:50:A5:F4:27:4A:52:37:DE:BA:B4:72:5F:BB:6F:94:FF:E9:A0:6E
Authority key identifier: 44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74
Certificate issuer:       /CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
Certificate serial:       01988B106F33C644C42329129A25C4661509
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
Manifest number:          1620
Signing time:             Fri 08 Aug 2025 19:02:46 +0000
Manifest this update:     Fri 08 Aug 2025 19:02:46 +0000
Manifest next update:     Sat 09 Aug 2025 19:02:46 +0000
Files and hashes:         1: REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl (hash: Gqg803alwY1jZnkBGyr72XuhHRJdcbWZaTcMoVUKfpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:10:6f:33:c6:44:c4:23:29:12:9a:25:c4:66:15:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
        Validity
            Not Before: Aug  8 19:02:46 2025 GMT
            Not After : Aug  9 19:02:46 2025 GMT
        Subject: CN=1650a5f4274a5237debab4725fbb6f94ffe9a06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:11:b5:3e:cf:49:05:bb:f5:43:e2:65:d9:ae:
                    bf:e0:a3:b5:9c:7b:45:bf:c9:d0:44:78:bd:45:89:
                    aa:12:57:6b:92:e8:77:a6:69:f1:25:33:0d:da:79:
                    b8:83:b8:dc:f4:3f:21:fb:b3:6c:91:fc:5b:af:1f:
                    1a:6f:86:42:4a:93:23:b8:bc:7f:6f:fe:e3:40:d8:
                    5d:ea:47:7e:e3:d2:e7:e3:5f:30:47:ba:2f:ee:d7:
                    b6:39:79:f1:8a:c1:70:80:45:50:53:f2:70:54:08:
                    53:7d:ba:03:0e:6c:41:f5:60:17:da:45:69:99:fd:
                    90:7d:69:8c:4e:cf:f3:9c:54:3f:51:aa:56:c6:58:
                    c7:6e:52:25:7a:a7:ce:ee:41:15:2f:3a:da:9e:d0:
                    13:ba:c9:2d:28:23:ed:c9:11:0b:bf:c3:6c:25:7a:
                    56:6c:a0:55:e0:ad:b4:ff:13:ac:0a:85:3b:99:9a:
                    fd:4d:57:9f:76:f6:a0:2a:5b:ef:84:b1:ce:d1:64:
                    c0:d2:7a:7c:ff:ad:90:a3:1d:6f:4c:b3:ce:de:09:
                    c4:e3:c5:b5:d9:53:ab:92:72:74:bd:cf:d2:47:e0:
                    cc:d3:14:de:5b:78:13:3b:95:ec:0b:a8:0c:ec:c0:
                    13:b5:1c:df:60:af:e7:7e:70:d4:0c:dc:a7:a5:1e:
                    82:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:50:A5:F4:27:4A:52:37:DE:BA:B4:72:5F:BB:6F:94:FF:E9:A0:6E
            X509v3 Authority Key Identifier:
                keyid:44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:94:b4:81:5a:5c:1f:bb:e9:8c:23:e1:db:f5:3c:c1:55:58:
         5e:00:50:0f:2d:9c:26:45:d1:40:d5:92:c7:28:5c:2d:0b:96:
         15:94:23:fd:be:cb:95:48:61:14:de:59:cb:a3:0e:ea:77:14:
         e6:36:8c:c4:62:b1:15:f5:85:b7:8c:96:b0:ae:ad:b9:68:e1:
         f8:53:69:de:3b:94:4c:37:1e:55:d2:92:60:c9:f9:8e:8e:e3:
         a9:8c:59:1f:f6:89:e3:25:14:53:30:98:b7:3d:7d:76:8c:01:
         93:68:75:15:62:fb:9f:12:0b:a3:9b:bd:19:e9:94:f4:8e:1a:
         f1:ab:13:80:77:f2:51:f3:e4:2e:e3:bd:c5:e8:df:5b:33:5d:
         e3:92:49:a7:f4:d9:15:6a:18:40:61:68:82:73:a9:7e:04:dd:
         f1:03:1b:02:a2:63:86:6c:f0:03:cf:ea:db:12:65:22:84:4a:
         4e:b7:df:9b:6e:aa:8b:22:f8:18:f8:43:f6:bb:92:eb:58:32:
         fc:79:b6:2e:00:e1:3f:ad:9e:ed:2f:1c:eb:21:4f:7c:0c:05:
         f4:f2:77:18:00:e2:0f:82:40:80:9b:4b:55:9e:4c:98:87:e7:
         14:bd:dc:97:a2:25:5f:39:3c:21:46:79:e0:b8:db:e4:70:8c:
         65:5c:3c:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLEG8zxkTEIykSmiXEZhUJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NGIzYWI5OWY4NjQ0YWNkNWU2OWE5YTVmMzg1NDZjZGNj
NmU5NzQwHhcNMjUwODA4MTkwMjQ2WhcNMjUwODA5MTkwMjQ2WjAzMTEwLwYDVQQD
EygxNjUwYTVmNDI3NGE1MjM3ZGViYWI0NzI1ZmJiNmY5NGZmZTlhMDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBG1Ps9JBbv1Q+Jl2a6/4KO1nHtF
v8nQRHi9RYmqEldrkuh3pmnxJTMN2nm4g7jc9D8h+7Nskfxbrx8ab4ZCSpMjuLx/
b/7jQNhd6kd+49Ln418wR7ov7te2OXnxisFwgEVQU/JwVAhTfboDDmxB9WAX2kVp
mf2QfWmMTs/znFQ/UapWxljHblIleqfO7kEVLzrantATusktKCPtyRELv8NsJXpW
bKBV4K20/xOsCoU7mZr9TVefdvagKlvvhLHO0WTA0np8/62Qox1vTLPO3gnE48W1
2VOrknJ0vc/SR+DM0xTeW3gTO5XsC6gM7MATtRzfYK/nfnDUDNynpR6CywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZQpfQnSlI33rq0cl+7b5T/6aBuMB8GA1UdIwQY
MBaAFERLOrmfhkSs1eaaml84VGzcxul0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkVzNnVaLUdSS3pWNXBxYVh6aFViTnpHNlhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yODg0OWUtM2MyMy00YjdhLWI2ZmMt
ZDkxNGJiNzllZWRjLzEvUkVzNnVaLUdSS3pWNXBxYVh6aFViTnpHNlhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8yODg0OWUtM2MyMy00YjdhLWI2ZmMtZDkxNGJiNzllZWRj
LzEvUkVzNnVaLUdSS3pWNXBxYVh6aFViTnpHNlhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5S0gVpc
H7vpjCPh2/U8wVVYXgBQDy2cJkXRQNWSxyhcLQuWFZQj/b7LlUhhFN5Zy6MO6ncU
5jaMxGKxFfWFt4yWsK6tuWjh+FNp3juUTDceVdKSYMn5jo7jqYxZH/aJ4yUUUzCY
tz19dowBk2h1FWL7nxILo5u9GemU9I4a8asTgHfyUfPkLuO9xejfWzNd45JJp/TZ
FWoYQGFognOpfgTd8QMbAqJjhmzwA8/q2xJlIoRKTrffm26qiyL4GPhD9ruS61gy
/Hm2LgDhP62e7S8c6yFPfAwF9PJ3GADiD4JAgJtLVZ5MmIfnFL3cl6IlXzk8IUZ5
4Ljb5HCMZVw8xQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:41 2025 by rpki-client