Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
File:                     u03_X665REU6fISwl-V8ccBPEfw.mft (raw, json)
Hash identifier:          X5TQVxxZg/Ef6rS1YB1DEnfEdYwsBWYnqapJkBV7oVQ=
Subject key identifier:   E8:86:DB:FD:59:C3:FE:A7:51:F5:EE:AC:4E:22:9B:3E:EF:9A:BB:4F
Authority key identifier: BB:4D:FF:5F:AE:B9:44:45:3A:7C:84:B0:97:E5:7C:71:C0:4F:11:FC
Certificate issuer:       /CN=bb4dff5faeb944453a7c84b097e57c71c04f11fc
Certificate serial:       019778D425EC22774209C80047CB9F2FAEFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u03_X665REU6fISwl-V8ccBPEfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
Manifest number:          08D3
Signing time:             Mon 16 Jun 2025 13:00:58 +0000
Manifest this update:     Mon 16 Jun 2025 13:00:58 +0000
Manifest next update:     Tue 17 Jun 2025 13:00:58 +0000
Files and hashes:         1: u03_X665REU6fISwl-V8ccBPEfw.crl (hash: r+kxhdoUQmaw6u1b3HSzeq+WQZcYArIBqfgjiQQ07uo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u03_X665REU6fISwl-V8ccBPEfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:d4:25:ec:22:77:42:09:c8:00:47:cb:9f:2f:ae:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb4dff5faeb944453a7c84b097e57c71c04f11fc
        Validity
            Not Before: Jun 16 13:00:58 2025 GMT
            Not After : Jun 17 13:00:58 2025 GMT
        Subject: CN=e886dbfd59c3fea751f5eeac4e229b3eef9abb4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:77:bc:d0:d4:b2:b7:71:76:70:0b:1f:b2:8f:
                    0c:5e:e7:64:9f:9e:3e:de:c0:c2:61:b9:e9:e4:40:
                    7e:f9:d8:5e:00:ec:49:e8:5a:2a:20:3c:44:93:d2:
                    85:ac:0d:50:f3:91:bb:cc:1c:92:e1:5e:8d:2b:5c:
                    6e:a7:2f:f2:73:ea:43:7a:43:e0:4b:75:48:18:cb:
                    d3:54:6a:42:8e:bd:65:16:6b:54:d5:ea:c1:ab:04:
                    03:16:41:a6:55:f3:69:fe:d2:52:0b:16:bb:2e:5f:
                    d7:83:a3:a9:e3:ef:61:c2:0b:2e:c9:15:a4:f9:bb:
                    ce:9c:89:5e:0b:ea:86:17:b1:8d:14:04:ba:92:65:
                    a2:66:e4:b9:c6:1a:b6:44:0c:20:49:70:47:47:67:
                    16:b3:d1:ef:45:a8:96:c1:4e:e5:7c:28:69:1d:a9:
                    21:40:7f:4d:8e:af:2d:19:69:b0:8b:17:31:b1:79:
                    85:e7:ab:8f:ad:1e:79:a6:db:ee:52:f0:6d:a5:43:
                    0b:c4:ca:e1:d7:95:38:49:89:0c:5f:36:1a:3d:3a:
                    c2:1f:4a:0a:ce:46:ad:77:6c:7f:d6:21:ea:27:51:
                    4b:69:7c:9f:72:1f:74:cf:fb:d7:4a:7b:92:c0:89:
                    51:a7:37:91:a1:e6:e3:2b:69:60:41:3c:09:c3:46:
                    70:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:86:DB:FD:59:C3:FE:A7:51:F5:EE:AC:4E:22:9B:3E:EF:9A:BB:4F
            X509v3 Authority Key Identifier:
                keyid:BB:4D:FF:5F:AE:B9:44:45:3A:7C:84:B0:97:E5:7C:71:C0:4F:11:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u03_X665REU6fISwl-V8ccBPEfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:24:36:1f:49:16:ee:cf:22:0e:9a:13:9d:1b:c8:f4:b6:ec:
         01:1d:be:08:56:c6:44:ba:3c:ea:e4:62:2e:2c:f0:7c:4c:af:
         cf:78:67:1f:b6:56:d5:11:19:fd:b8:0a:63:d7:a2:a3:db:d8:
         e3:b9:24:86:ee:1a:7d:96:71:17:70:b6:75:76:c8:6b:78:94:
         1a:40:8c:46:32:30:e5:88:b0:72:4f:74:f7:70:dc:45:4b:5e:
         00:4d:30:6f:43:d8:56:5b:04:03:b3:17:10:c1:88:03:88:25:
         9f:f8:89:a4:17:11:fa:06:a4:d7:7b:f4:fe:4d:15:5e:2e:25:
         c7:2c:47:3d:39:3b:72:a0:8e:ca:03:87:5b:11:96:0a:ee:5d:
         58:92:22:c0:03:d9:be:21:9d:cc:4d:d2:4a:fe:d7:1f:a3:03:
         40:39:a0:30:0d:69:ef:7a:9b:1e:4f:a8:8d:30:18:68:b7:be:
         68:cf:a8:79:78:e7:af:89:91:da:92:36:c1:42:99:92:2f:c3:
         42:e9:b9:7d:cf:21:23:f5:af:15:c7:bc:f9:da:13:12:21:db:
         cb:d5:fe:3d:36:c7:0f:0a:5d:40:e8:09:24:90:a6:c0:f7:dd:
         10:b8:42:ae:22:31:71:d0:c1:28:28:3f:2c:b8:13:ef:04:cf:
         73:80:90:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd41CXsIndCCcgAR8ufL678MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNGRmZjVmYWViOTQ0NDUzYTdjODRiMDk3ZTU3YzcxYzA0
ZjExZmMwHhcNMjUwNjE2MTMwMDU4WhcNMjUwNjE3MTMwMDU4WjAzMTEwLwYDVQQD
EyhlODg2ZGJmZDU5YzNmZWE3NTFmNWVlYWM0ZTIyOWIzZWVmOWFiYjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXe80NSyt3F2cAsfso8MXudkn54+
3sDCYbnp5EB++dheAOxJ6FoqIDxEk9KFrA1Q85G7zByS4V6NK1xupy/yc+pDekPg
S3VIGMvTVGpCjr1lFmtU1erBqwQDFkGmVfNp/tJSCxa7Ll/Xg6Op4+9hwgsuyRWk
+bvOnIleC+qGF7GNFAS6kmWiZuS5xhq2RAwgSXBHR2cWs9HvRaiWwU7lfChpHakh
QH9Njq8tGWmwixcxsXmF56uPrR55ptvuUvBtpUMLxMrh15U4SYkMXzYaPTrCH0oK
zkatd2x/1iHqJ1FLaXyfch90z/vXSnuSwIlRpzeRoebjK2lgQTwJw0ZwlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiG2/1Zw/6nUfXurE4imz7vmrtPMB8GA1UdIwQY
MBaAFLtN/1+uuURFOnyEsJflfHHATxH8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTAzX1g2NjVSRVU2ZklTd2wtVjhjY0JQRWZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9kMTM1MjYtYzFhYy00NWU0LWJlYmMt
NjZmNDE2N2Y4M2IyLzEvdTAzX1g2NjVSRVU2ZklTd2wtVjhjY0JQRWZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9kMTM1MjYtYzFhYy00NWU0LWJlYmMtNjZmNDE2N2Y4M2Iy
LzEvdTAzX1g2NjVSRVU2ZklTd2wtVjhjY0JQRWZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCQ2H0kW
7s8iDpoTnRvI9LbsAR2+CFbGRLo86uRiLizwfEyvz3hnH7ZW1REZ/bgKY9eio9vY
47kkhu4afZZxF3C2dXbIa3iUGkCMRjIw5Yiwck9093DcRUteAE0wb0PYVlsEA7MX
EMGIA4gln/iJpBcR+gak13v0/k0VXi4lxyxHPTk7cqCOygOHWxGWCu5dWJIiwAPZ
viGdzE3SSv7XH6MDQDmgMA1p73qbHk+ojTAYaLe+aM+oeXjnr4mR2pI2wUKZki/D
Qum5fc8hI/WvFce8+doTEiHby9X+PTbHDwpdQOgJJJCmwPfdELhCriIxcdDBKCg/
LLgT7wTPc4CQiQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 20:07:04 2025 by rpki-client