Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft
File:                     0dyvv2n_2nKwgna9sRGTVkrtj5c.mft (raw, json)
Hash identifier:          YXD5heRc+k7JiyT4y64qWgINyCBPRH7OjycJvWCqTdM=
Subject key identifier:   3E:03:13:DD:FF:6E:7F:51:0C:CB:E6:09:2C:82:51:7E:0E:43:99:9C
Authority key identifier: D1:DC:AF:BF:69:FF:DA:72:B0:82:76:BD:B1:11:93:56:4A:ED:8F:97
Certificate issuer:       /CN=d1dcafbf69ffda72b08276bdb11193564aed8f97
Certificate serial:       019873E1CBA96067565A1ECB485F04D90044
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0dyvv2n_2nKwgna9sRGTVkrtj5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft
Manifest number:          1614
Signing time:             Mon 04 Aug 2025 07:00:34 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:34 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:34 +0000
Files and hashes:         1: 0dyvv2n_2nKwgna9sRGTVkrtj5c.crl (hash: bD1Hvv5wHRXwxbIIfaOrS5lX/SmXsDO4kNmCJbzSRdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0dyvv2n_2nKwgna9sRGTVkrtj5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e1:cb:a9:60:67:56:5a:1e:cb:48:5f:04:d9:00:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1dcafbf69ffda72b08276bdb11193564aed8f97
        Validity
            Not Before: Aug  4 07:00:34 2025 GMT
            Not After : Aug  5 07:00:34 2025 GMT
        Subject: CN=3e0313ddff6e7f510ccbe6092c82517e0e43999c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:01:b5:05:bd:be:03:3b:be:53:3a:c9:83:9a:
                    40:70:74:d7:83:6d:ad:07:da:9f:12:ae:6e:50:90:
                    17:cf:a4:b9:09:62:93:c8:4a:5c:a9:67:f9:7d:e8:
                    7e:fa:fa:1c:c3:d3:42:18:06:b3:38:22:59:5f:76:
                    9c:ed:3f:f0:88:2f:99:b8:ce:2a:ec:49:74:de:8e:
                    1d:d9:c3:e0:8a:09:00:2d:16:8a:8f:23:e2:7e:c7:
                    0f:95:45:59:6e:33:eb:56:17:24:4e:57:cc:32:78:
                    0f:38:d6:ff:7f:ee:e9:04:e6:22:e5:78:6e:d9:02:
                    dc:68:66:53:f2:d7:bb:13:2b:0d:b6:e1:e2:9a:d0:
                    d3:cd:f8:5b:82:e7:67:8a:38:b4:1a:dc:f5:29:cc:
                    d8:61:85:60:b9:bc:f2:37:54:02:c6:d7:6b:6e:7d:
                    fc:64:3d:c8:23:67:7e:3b:b6:e6:ad:a3:6f:70:f2:
                    43:5a:73:86:27:69:38:cb:d7:ec:15:fe:3c:6a:a3:
                    df:65:3e:cf:64:1c:14:7c:32:45:31:f5:a6:d0:88:
                    26:7e:c4:9e:ef:d5:b9:89:7e:04:a8:c0:6c:a7:89:
                    71:88:88:3c:51:77:95:28:0b:69:b3:7b:17:39:d1:
                    d6:66:b5:a1:e7:27:d1:c8:e4:8f:bc:47:db:a9:cc:
                    44:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:03:13:DD:FF:6E:7F:51:0C:CB:E6:09:2C:82:51:7E:0E:43:99:9C
            X509v3 Authority Key Identifier:
                keyid:D1:DC:AF:BF:69:FF:DA:72:B0:82:76:BD:B1:11:93:56:4A:ED:8F:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dyvv2n_2nKwgna9sRGTVkrtj5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:88:ca:30:42:85:3a:47:9f:ce:aa:c9:3a:2d:7d:9c:10:af:
         3a:f5:6d:05:6f:dc:3e:97:55:24:18:ef:da:d2:b7:6f:29:5c:
         4b:bf:b8:32:e9:60:0b:3f:98:34:a2:24:9d:1a:75:0b:7d:b3:
         83:ca:b7:b0:71:ca:38:8d:47:84:5d:7a:f2:7d:ee:c7:81:a8:
         a6:40:72:3d:cc:36:e2:ef:b7:4d:43:30:f4:57:de:ec:22:fc:
         29:32:b0:81:0f:b8:a8:c9:7b:ba:b6:3c:5b:d8:e6:02:5a:09:
         7f:91:2f:1a:6c:02:36:fc:0c:ec:1b:63:1c:c5:04:00:0b:2f:
         f4:70:7e:7c:37:61:76:ca:53:bf:9a:3e:39:a3:0b:76:88:0a:
         be:ac:3c:06:41:4e:94:a3:69:e3:0d:e0:61:19:a5:ab:db:dc:
         16:dc:3c:b0:18:47:5d:74:eb:13:45:e0:16:81:ac:94:f9:a1:
         f7:48:35:c9:23:57:3e:7d:22:8e:50:07:8c:c1:c8:21:ff:81:
         19:c8:d3:7b:60:f0:dd:c1:87:d0:18:2a:e8:04:b2:8a:61:71:
         da:b0:e5:ae:4f:8b:ca:b6:36:de:bf:68:11:16:bd:6e:fe:09:
         cd:47:6b:d8:a8:8d:aa:b3:de:fd:f2:19:f0:96:ca:1e:f7:38:
         ca:20:90:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4cupYGdWWh7LSF8E2QBEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGNhZmJmNjlmZmRhNzJiMDgyNzZiZGIxMTE5MzU2NGFl
ZDhmOTcwHhcNMjUwODA0MDcwMDM0WhcNMjUwODA1MDcwMDM0WjAzMTEwLwYDVQQD
EygzZTAzMTNkZGZmNmU3ZjUxMGNjYmU2MDkyYzgyNTE3ZTBlNDM5OTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQG1Bb2+Azu+UzrJg5pAcHTXg22t
B9qfEq5uUJAXz6S5CWKTyEpcqWf5feh++vocw9NCGAazOCJZX3ac7T/wiC+ZuM4q
7El03o4d2cPgigkALRaKjyPifscPlUVZbjPrVhckTlfMMngPONb/f+7pBOYi5Xhu
2QLcaGZT8te7EysNtuHimtDTzfhbgudniji0Gtz1KczYYYVgubzyN1QCxtdrbn38
ZD3II2d+O7bmraNvcPJDWnOGJ2k4y9fsFf48aqPfZT7PZBwUfDJFMfWm0IgmfsSe
79W5iX4EqMBsp4lxiIg8UXeVKAtps3sXOdHWZrWh5yfRyOSPvEfbqcxE7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4DE93/bn9RDMvmCSyCUX4OQ5mcMB8GA1UdIwQY
MBaAFNHcr79p/9pysIJ2vbERk1ZK7Y+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGR5dnYybl8ybkt3Z25hOXNSR1RWa3J0ajVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82ZTY5N2UtMDg1OC00NmY1LTg4YTUt
NWU2YzhkNDczYTU5LzEvMGR5dnYybl8ybkt3Z25hOXNSR1RWa3J0ajVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82ZTY5N2UtMDg1OC00NmY1LTg4YTUtNWU2YzhkNDczYTU5
LzEvMGR5dnYybl8ybkt3Z25hOXNSR1RWa3J0ajVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4jKMEKF
OkefzqrJOi19nBCvOvVtBW/cPpdVJBjv2tK3bylcS7+4MulgCz+YNKIknRp1C32z
g8q3sHHKOI1HhF168n3ux4GopkByPcw24u+3TUMw9Ffe7CL8KTKwgQ+4qMl7urY8
W9jmAloJf5EvGmwCNvwM7BtjHMUEAAsv9HB+fDdhdspTv5o+OaMLdogKvqw8BkFO
lKNp4w3gYRmlq9vcFtw8sBhHXXTrE0XgFoGslPmh90g1ySNXPn0ijlAHjMHIIf+B
GcjTe2Dw3cGH0Bgq6ASyimFx2rDlrk+LyrY23r9oERa9bv4JzUdr2KiNqrPe/fIZ
8JbKHvc4yiCQ7g==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:54 2025 by rpki-client