Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
File:                     fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft (raw, json)
Hash identifier:          bwoTxzRL7sMNNIu2haDtimv0alLImM/Gi+xKG7qOH8g=
Subject key identifier:   AE:61:AC:60:08:85:04:15:2C:6A:2E:73:29:77:CD:BC:48:40:59:70
Authority key identifier: 7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4
Certificate issuer:       /CN=7f0757c331981e042b7471373527d0f64a1356b4
Certificate serial:       0197696077B56A0424F8D0C8DE7C6FE7E5C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
Manifest number:          1130
Signing time:             Fri 13 Jun 2025 13:00:19 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:19 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:19 +0000
Files and hashes:         1: fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl (hash: XXtKYFUGtn463HDIfCP/mmxHtWVR37GEa63QyeLT440=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:60:77:b5:6a:04:24:f8:d0:c8:de:7c:6f:e7:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f0757c331981e042b7471373527d0f64a1356b4
        Validity
            Not Before: Jun 13 13:00:19 2025 GMT
            Not After : Jun 14 13:00:19 2025 GMT
        Subject: CN=ae61ac60088504152c6a2e732977cdbc48405970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e5:ca:46:40:56:0d:f1:2a:13:be:0a:d4:7b:
                    ba:a4:4b:fd:e3:73:7b:d8:a7:dd:b0:d6:15:de:8c:
                    a8:2d:18:b1:4d:58:93:39:da:cd:59:5e:2f:21:43:
                    a0:66:38:cd:99:4f:56:1f:fc:4e:91:e6:14:40:47:
                    b8:3e:78:96:e5:fd:d8:08:e0:4c:25:b7:f5:77:59:
                    14:29:d1:07:00:5a:37:93:2d:ea:70:fd:b4:ff:2a:
                    e6:29:b5:40:0f:69:37:dc:e3:38:bd:85:89:c8:88:
                    e3:61:aa:a2:6e:78:93:93:82:10:82:1c:92:b6:f4:
                    45:27:8d:29:90:b7:b4:2f:f1:35:fd:f0:3d:da:1a:
                    a1:ec:dc:c9:98:27:b2:6f:dc:12:f1:d5:79:4c:7c:
                    cd:21:77:79:dd:87:e4:87:07:9e:8a:0e:3d:e2:d5:
                    b9:fc:39:c8:ee:fe:b4:a6:f4:cf:7b:fa:9b:36:72:
                    0f:0e:38:cc:01:61:1b:ee:03:c6:85:71:ac:10:6d:
                    2c:35:74:fe:81:9e:1c:a5:25:a8:68:6b:9f:71:8a:
                    36:0e:6c:29:01:1e:b7:0e:5a:91:d2:33:8f:2b:9e:
                    64:14:28:a0:44:41:bf:fe:f5:a0:49:20:12:c0:86:
                    23:fc:27:91:06:c2:23:01:e6:46:2d:13:c8:12:55:
                    0b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:61:AC:60:08:85:04:15:2C:6A:2E:73:29:77:CD:BC:48:40:59:70
            X509v3 Authority Key Identifier:
                keyid:7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:53:ab:23:92:4d:f1:7b:22:9c:ca:9f:3d:24:87:be:fd:05:
         38:19:62:3d:c4:ec:a3:34:44:21:4d:63:a1:57:19:54:b3:ec:
         ab:2e:a4:06:6a:32:5a:69:d7:55:af:85:d6:96:cc:d9:ab:ea:
         22:34:e5:b3:94:b8:f1:97:2f:3f:fd:53:03:85:b0:6a:52:5d:
         2e:90:aa:d3:89:56:20:dc:87:e8:b1:19:61:61:9c:4b:d8:98:
         28:47:86:29:1a:48:90:4e:34:39:f1:a9:8b:29:33:ed:cb:5d:
         4f:f6:52:67:c6:1f:fc:44:1f:65:e9:df:20:ac:fd:65:e1:2c:
         d1:0b:bf:4e:d8:a7:5e:d3:2b:98:86:89:d4:70:34:13:d2:99:
         7f:07:d6:4f:41:36:61:cf:81:fd:64:53:e4:c3:d9:d9:be:94:
         48:d8:64:63:67:66:74:d4:d0:f8:a1:f4:ea:1e:bf:93:65:c2:
         b6:d5:39:27:e3:8b:f3:b6:e7:0b:e2:cf:45:d2:63:be:30:71:
         f9:bd:2a:76:4e:bc:fe:5e:fe:2b:52:63:ca:63:66:0e:55:71:
         e9:26:89:b8:11:37:8b:a2:b6:04:44:63:d0:5d:2a:9b:c7:41:
         58:a3:21:2a:57:1a:36:e1:0f:3d:36:c1:05:f5:0e:0c:6b:d4:
         f8:54:cc:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYHe1agQk+NDI3nxv5+XAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMDc1N2MzMzE5ODFlMDQyYjc0NzEzNzM1MjdkMGY2NGEx
MzU2YjQwHhcNMjUwNjEzMTMwMDE5WhcNMjUwNjE0MTMwMDE5WjAzMTEwLwYDVQQD
EyhhZTYxYWM2MDA4ODUwNDE1MmM2YTJlNzMyOTc3Y2RiYzQ4NDA1OTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruXKRkBWDfEqE74K1Hu6pEv943N7
2KfdsNYV3oyoLRixTViTOdrNWV4vIUOgZjjNmU9WH/xOkeYUQEe4PniW5f3YCOBM
Jbf1d1kUKdEHAFo3ky3qcP20/yrmKbVAD2k33OM4vYWJyIjjYaqibniTk4IQghyS
tvRFJ40pkLe0L/E1/fA92hqh7NzJmCeyb9wS8dV5THzNIXd53Yfkhweeig494tW5
/DnI7v60pvTPe/qbNnIPDjjMAWEb7gPGhXGsEG0sNXT+gZ4cpSWoaGufcYo2Dmwp
AR63DlqR0jOPK55kFCigREG//vWgSSASwIYj/CeRBsIjAeZGLRPIElULhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5hrGAIhQQVLGoucyl3zbxIQFlwMB8GA1UdIwQY
MBaAFH8HV8MxmB4EK3RxNzUn0PZKE1a0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZndkWHd6R1lIZ1FyZEhFM05TZlE5a29UVnJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80Zjk2ZjktNTY5Zi00MzNjLWI5YTgt
NmEyNjEyZDQwZjUwLzEvZndkWHd6R1lIZ1FyZEhFM05TZlE5a29UVnJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC80Zjk2ZjktNTY5Zi00MzNjLWI5YTgtNmEyNjEyZDQwZjUw
LzEvZndkWHd6R1lIZ1FyZEhFM05TZlE5a29UVnJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilOrI5JN
8XsinMqfPSSHvv0FOBliPcTsozREIU1joVcZVLPsqy6kBmoyWmnXVa+F1pbM2avq
IjTls5S48ZcvP/1TA4WwalJdLpCq04lWINyH6LEZYWGcS9iYKEeGKRpIkE40OfGp
iykz7ctdT/ZSZ8Yf/EQfZenfIKz9ZeEs0Qu/TtinXtMrmIaJ1HA0E9KZfwfWT0E2
Yc+B/WRT5MPZ2b6USNhkY2dmdNTQ+KH06h6/k2XCttU5J+OL87bnC+LPRdJjvjBx
+b0qdk68/l7+K1JjymNmDlVx6SaJuBE3i6K2BERj0F0qm8dBWKMhKlcaNuEPPTbB
BfUODGvU+FTMUw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:22:36 2025 by rpki-client