Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
File:                     cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft (raw, json)
Hash identifier:          KN4WgtBDlQW76cEcPcNt5gXTnkDr7dzDec4BNuJmXSE=
Subject key identifier:   E4:AA:1B:3A:35:08:50:97:36:10:2A:1E:AA:C1:BA:3F:E8:BD:AF:7E
Authority key identifier: 71:12:B7:28:8C:55:9E:1E:D4:A3:90:57:E0:AE:0C:2B:EC:42:DA:A2
Certificate issuer:       /CN=7112b7288c559e1ed4a39057e0ae0c2bec42daa2
Certificate serial:       019881D494031EFAC5991544186E825FAB72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
Manifest number:          0692
Signing time:             Thu 07 Aug 2025 00:00:49 +0000
Manifest this update:     Thu 07 Aug 2025 00:00:49 +0000
Manifest next update:     Fri 08 Aug 2025 00:00:49 +0000
Files and hashes:         1: cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl (hash: 7/XUx9ywWPtl3jMvFhfUT6HXtBj1WifOmzSZ80v01qg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:d4:94:03:1e:fa:c5:99:15:44:18:6e:82:5f:ab:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7112b7288c559e1ed4a39057e0ae0c2bec42daa2
        Validity
            Not Before: Aug  7 00:00:49 2025 GMT
            Not After : Aug  8 00:00:49 2025 GMT
        Subject: CN=e4aa1b3a3508509736102a1eaac1ba3fe8bdaf7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:eb:2d:03:79:8e:05:ed:db:aa:97:ca:f8:8f:
                    34:14:b2:c7:52:a9:46:1f:a1:02:9f:f5:ef:6f:3d:
                    18:46:68:7d:d4:1d:d6:dc:c1:87:5f:bc:e2:c4:e5:
                    94:6d:3b:2d:d9:c1:83:71:2d:d6:b6:a2:27:e7:7a:
                    22:a5:fb:8e:d1:b2:8e:1c:0e:5e:c2:df:2a:78:78:
                    bb:2e:fb:51:76:c6:f8:03:59:20:4c:a9:36:63:e0:
                    bc:f8:d4:5c:c2:0b:d2:1c:be:11:5b:42:ca:65:e4:
                    2c:4b:5a:a8:84:53:dc:e3:c5:97:ec:5d:05:be:70:
                    5f:97:c4:e2:2d:18:b1:ab:3d:74:31:39:d6:da:9b:
                    86:bc:3b:0e:7d:72:88:a5:f9:2b:47:10:d1:28:9b:
                    4b:c5:01:6d:2a:e0:8f:02:cc:2b:84:e8:8a:22:83:
                    22:cb:eb:fc:58:be:74:68:c8:a1:a2:3b:b2:4e:e4:
                    64:0a:04:91:04:37:4f:5f:4b:94:2b:35:a5:32:af:
                    ec:07:a4:8b:45:94:60:36:69:eb:1c:39:74:c5:e3:
                    a4:5b:02:97:4f:e9:11:a7:92:8a:76:16:ac:4b:83:
                    67:3d:fe:c1:41:58:c4:3e:f0:60:45:fa:97:8e:bf:
                    a2:81:ac:0d:f7:52:e4:fb:57:56:b6:7b:19:f9:88:
                    ca:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AA:1B:3A:35:08:50:97:36:10:2A:1E:AA:C1:BA:3F:E8:BD:AF:7E
            X509v3 Authority Key Identifier:
                keyid:71:12:B7:28:8C:55:9E:1E:D4:A3:90:57:E0:AE:0C:2B:EC:42:DA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:98:15:77:d4:d0:37:0c:d6:b2:d5:70:5f:2f:25:2d:82:49:
         a9:6d:06:68:50:d4:40:5e:cd:2f:f5:62:b1:fa:df:3a:ff:cb:
         2c:2c:17:c8:0a:0a:db:aa:15:9d:e6:c1:a5:aa:d8:09:56:6c:
         45:5c:14:7b:80:3d:2a:b7:8d:d4:5b:8a:9b:ac:93:00:e5:ae:
         73:ab:77:62:84:55:9c:f1:a7:2e:22:fe:14:47:bb:0e:2f:77:
         e6:2b:7f:ac:af:cc:76:ef:3d:03:f5:1e:14:c3:00:ad:0e:86:
         e1:45:a8:37:c6:eb:de:67:f8:1f:a3:53:5a:07:57:40:fc:48:
         5e:2d:b9:47:1b:9d:28:07:3b:29:f1:27:5a:df:72:fb:7b:6f:
         57:bf:a2:05:b2:ea:37:36:05:23:9a:34:7f:98:34:19:71:d8:
         c3:5d:86:16:42:7f:36:46:97:64:60:5e:f6:ce:4f:62:08:44:
         f1:35:04:96:18:1f:62:5d:a2:b2:ca:2a:2b:00:3b:fa:eb:af:
         0a:61:40:2f:f5:cb:66:34:9e:00:8e:c4:f1:99:b4:3d:21:bf:
         c8:ba:87:e6:50:7e:15:d7:de:7a:e7:b1:d6:88:e2:8c:8f:7a:
         22:e4:7c:34:10:9a:2e:2c:da:42:99:a9:d1:f0:0e:03:8d:16:
         33:5f:6c:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiB1JQDHvrFmRVEGG6CX6tyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTJiNzI4OGM1NTllMWVkNGEzOTA1N2UwYWUwYzJiZWM0
MmRhYTIwHhcNMjUwODA3MDAwMDQ5WhcNMjUwODA4MDAwMDQ5WjAzMTEwLwYDVQQD
EyhlNGFhMWIzYTM1MDg1MDk3MzYxMDJhMWVhYWMxYmEzZmU4YmRhZjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArustA3mOBe3bqpfK+I80FLLHUqlG
H6ECn/Xvbz0YRmh91B3W3MGHX7zixOWUbTst2cGDcS3WtqIn53oipfuO0bKOHA5e
wt8qeHi7LvtRdsb4A1kgTKk2Y+C8+NRcwgvSHL4RW0LKZeQsS1qohFPc48WX7F0F
vnBfl8TiLRixqz10MTnW2puGvDsOfXKIpfkrRxDRKJtLxQFtKuCPAswrhOiKIoMi
y+v8WL50aMihojuyTuRkCgSRBDdPX0uUKzWlMq/sB6SLRZRgNmnrHDl0xeOkWwKX
T+kRp5KKdhasS4NnPf7BQVjEPvBgRfqXjr+igawN91Lk+1dWtnsZ+YjKpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSqGzo1CFCXNhAqHqrBuj/ova9+MB8GA1UdIwQY
MBaAFHEStyiMVZ4e1KOQV+CuDCvsQtqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JLM0tJeFZuaDdVbzVCWDRLNE1LLXhDMnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9hNjMwY2YtYjI1Ny00MDFmLWIzZmIt
MTU2ZjNjZmJjMTYxLzEvY1JLM0tJeFZuaDdVbzVCWDRLNE1LLXhDMnFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9hNjMwY2YtYjI1Ny00MDFmLWIzZmItMTU2ZjNjZmJjMTYx
LzEvY1JLM0tJeFZuaDdVbzVCWDRLNE1LLXhDMnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpgVd9TQ
NwzWstVwXy8lLYJJqW0GaFDUQF7NL/VisfrfOv/LLCwXyAoK26oVnebBparYCVZs
RVwUe4A9KreN1FuKm6yTAOWuc6t3YoRVnPGnLiL+FEe7Di935it/rK/Mdu89A/Ue
FMMArQ6G4UWoN8br3mf4H6NTWgdXQPxIXi25RxudKAc7KfEnWt9y+3tvV7+iBbLq
NzYFI5o0f5g0GXHYw12GFkJ/NkaXZGBe9s5PYghE8TUElhgfYl2issoqKwA7+uuv
CmFAL/XLZjSeAI7E8Zm0PSG/yLqH5lB+Fdfeeuex1ojijI96IuR8NBCaLizaQpmp
0fAOA40WM19sOQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:59:45 2025 by rpki-client