Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft
File:                     adRwF7UV7iFLKEIO2-2zAVwW7ik.mft (raw, json)
Hash identifier:          5UpgrAT8NCdF/3uYo0FDKidMPyqSb5YgRTZay8ZKrbc=
Subject key identifier:   2B:F3:80:0B:F7:DB:3D:34:C6:D7:40:33:E7:52:C1:0B:A0:15:01:4A
Authority key identifier: 69:D4:70:17:B5:15:EE:21:4B:28:42:0E:DB:ED:B3:01:5C:16:EE:29
Certificate issuer:       /CN=69d47017b515ee214b28420edbedb3015c16ee29
Certificate serial:       0197711A3E8CF00CDC03DDF8B8745A5BDCE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adRwF7UV7iFLKEIO2-2zAVwW7ik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft
Manifest number:          158D
Signing time:             Sun 15 Jun 2025 01:00:34 +0000
Manifest this update:     Sun 15 Jun 2025 01:00:34 +0000
Manifest next update:     Mon 16 Jun 2025 01:00:34 +0000
Files and hashes:         1: adRwF7UV7iFLKEIO2-2zAVwW7ik.crl (hash: 2U6SeWEPd80HRx9g9tLxhZzqmhHJAE0waXH5BTKB2D8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adRwF7UV7iFLKEIO2-2zAVwW7ik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1a:3e:8c:f0:0c:dc:03:dd:f8:b8:74:5a:5b:dc:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d47017b515ee214b28420edbedb3015c16ee29
        Validity
            Not Before: Jun 15 01:00:34 2025 GMT
            Not After : Jun 16 01:00:34 2025 GMT
        Subject: CN=2bf3800bf7db3d34c6d74033e752c10ba015014a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6f:b1:e0:bc:47:85:47:ef:42:c5:d9:77:9c:
                    52:d2:88:95:d5:58:6e:33:91:39:14:bc:ff:bf:44:
                    d6:69:41:c2:f5:40:c6:d2:28:33:ce:c8:ac:cd:a3:
                    62:f9:ca:78:67:3c:a8:66:a7:26:8e:ab:6b:9e:a8:
                    3d:dc:4b:9b:34:89:1c:9a:a7:8f:95:35:06:28:75:
                    aa:b3:9c:cf:76:26:60:b7:76:4b:e4:cb:29:e1:85:
                    81:d3:65:9d:04:68:cd:61:ce:7d:ef:a0:05:77:bf:
                    a9:54:00:44:8c:d3:b1:76:1f:28:13:51:35:44:06:
                    6d:a0:aa:6a:98:b9:62:1e:86:02:b2:a7:07:32:01:
                    ba:16:10:50:e6:f2:63:78:f1:16:e9:c8:10:51:a0:
                    0f:e0:8b:11:2f:1b:27:44:6f:c7:4c:8b:74:7f:53:
                    56:e6:07:d7:d8:f8:9e:22:6a:80:a2:3e:20:77:11:
                    16:91:c6:72:0e:65:4b:72:33:80:4b:42:c4:0b:5f:
                    11:13:40:41:99:6b:c5:19:50:f3:62:cf:b1:bc:5d:
                    48:e5:b7:4a:fd:c2:0c:ca:65:46:c4:7e:1a:30:b6:
                    d5:22:ee:29:a2:f1:3a:5d:d0:00:2d:33:79:98:8d:
                    b6:9b:83:3b:80:81:3a:7a:b8:cc:3c:84:86:3a:81:
                    72:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F3:80:0B:F7:DB:3D:34:C6:D7:40:33:E7:52:C1:0B:A0:15:01:4A
            X509v3 Authority Key Identifier:
                keyid:69:D4:70:17:B5:15:EE:21:4B:28:42:0E:DB:ED:B3:01:5C:16:EE:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adRwF7UV7iFLKEIO2-2zAVwW7ik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:17:14:1a:87:af:bd:f8:f4:f4:35:76:bd:d7:7d:3f:e2:59:
         cc:48:2d:86:32:53:48:e5:04:94:d8:16:59:86:e6:43:a6:ad:
         c4:ae:c0:6b:3f:6a:45:6e:4e:12:f2:83:bc:62:d8:94:48:fb:
         77:ee:a8:96:14:2d:01:c4:d5:cd:6d:fe:53:a4:44:7d:dc:f4:
         ab:14:f6:55:2d:bd:09:62:0e:ba:a6:fe:f3:7a:24:e0:3f:f0:
         37:58:86:03:8c:3d:df:32:09:c9:4e:9c:78:ef:20:c1:78:f5:
         62:35:e3:29:d7:57:cf:56:9d:7d:d6:20:29:d3:8e:6e:7e:f1:
         cf:ec:52:78:c0:68:74:e5:b4:35:94:59:ff:e4:1e:06:49:2e:
         c6:2f:fa:45:aa:89:c8:ce:62:85:33:75:9e:0c:2a:c3:1e:e6:
         4b:87:6f:21:f9:03:de:83:85:02:06:b6:31:47:c9:07:f3:01:
         c7:43:c7:e9:b6:6e:48:34:c8:ff:be:60:fa:76:6c:a9:1e:4c:
         4f:49:75:4e:77:f1:6c:56:0e:2e:f9:5a:a8:73:a5:6e:5d:b1:
         00:40:3b:b2:ec:53:07:97:30:87:bb:14:a1:2f:9c:45:1f:30:
         ce:23:1f:e2:16:e4:ca:4a:30:35:4d:4c:3c:ed:95:0f:3b:1f:
         1e:aa:8a:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxGj6M8AzcA934uHRaW9zoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZDQ3MDE3YjUxNWVlMjE0YjI4NDIwZWRiZWRiMzAxNWMx
NmVlMjkwHhcNMjUwNjE1MDEwMDM0WhcNMjUwNjE2MDEwMDM0WjAzMTEwLwYDVQQD
EygyYmYzODAwYmY3ZGIzZDM0YzZkNzQwMzNlNzUyYzEwYmEwMTUwMTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2+x4LxHhUfvQsXZd5xS0oiV1Vhu
M5E5FLz/v0TWaUHC9UDG0igzzsiszaNi+cp4ZzyoZqcmjqtrnqg93EubNIkcmqeP
lTUGKHWqs5zPdiZgt3ZL5Msp4YWB02WdBGjNYc5976AFd7+pVABEjNOxdh8oE1E1
RAZtoKpqmLliHoYCsqcHMgG6FhBQ5vJjePEW6cgQUaAP4IsRLxsnRG/HTIt0f1NW
5gfX2PieImqAoj4gdxEWkcZyDmVLcjOAS0LEC18RE0BBmWvFGVDzYs+xvF1I5bdK
/cIMymVGxH4aMLbVIu4povE6XdAALTN5mI22m4M7gIE6erjMPISGOoFyiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvzgAv32z00xtdAM+dSwQugFQFKMB8GA1UdIwQY
MBaAFGnUcBe1Fe4hSyhCDtvtswFcFu4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWRSd0Y3VVY3aUZMS0VJTzItMnpBVndXN2lrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC81MzdjZmMtMzcwYy00YjdiLTk4ZDQt
MjNiNGM5MzM1NmY4LzEvYWRSd0Y3VVY3aUZMS0VJTzItMnpBVndXN2lrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC81MzdjZmMtMzcwYy00YjdiLTk4ZDQtMjNiNGM5MzM1NmY4
LzEvYWRSd0Y3VVY3aUZMS0VJTzItMnpBVndXN2lrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhcUGoev
vfj09DV2vdd9P+JZzEgthjJTSOUElNgWWYbmQ6atxK7Aaz9qRW5OEvKDvGLYlEj7
d+6olhQtAcTVzW3+U6REfdz0qxT2VS29CWIOuqb+83ok4D/wN1iGA4w93zIJyU6c
eO8gwXj1YjXjKddXz1adfdYgKdOObn7xz+xSeMBodOW0NZRZ/+QeBkkuxi/6RaqJ
yM5ihTN1ngwqwx7mS4dvIfkD3oOFAga2MUfJB/MBx0PH6bZuSDTI/75g+nZsqR5M
T0l1TnfxbFYOLvlaqHOlbl2xAEA7suxTB5cwh7sUoS+cRR8wziMf4hbkykowNU1M
PO2VDzsfHqqK/A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:37:38 2025 by rpki-client