Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft
File:                     45WAim89Q2FJAcmQyc5jLhXt-gc.mft (raw, json)
Hash identifier:          IX7ztFMgS+TY/k+zJmWBJGl9AId3gQ9sJXiWfpdyFCo=
Subject key identifier:   CA:FB:6C:40:10:F0:28:42:4D:01:0D:01:40:57:20:7D:2E:C3:77:6F
Authority key identifier: E3:95:80:8A:6F:3D:43:61:49:01:C9:90:C9:CE:63:2E:15:ED:FA:07
Certificate issuer:       /CN=e395808a6f3d43614901c990c9ce632e15edfa07
Certificate serial:       0197752DFA162FFCA6E8D0C9B305B54B6665
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45WAim89Q2FJAcmQyc5jLhXt-gc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft
Manifest number:          03EB
Signing time:             Sun 15 Jun 2025 20:00:36 +0000
Manifest this update:     Sun 15 Jun 2025 20:00:36 +0000
Manifest next update:     Mon 16 Jun 2025 20:00:36 +0000
Files and hashes:         1: 45WAim89Q2FJAcmQyc5jLhXt-gc.crl (hash: PV2Eo1XVcgAB4aXmP0DX86h7q/G2KasGc4fP0PK384o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/45WAim89Q2FJAcmQyc5jLhXt-gc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:75:2d:fa:16:2f:fc:a6:e8:d0:c9:b3:05:b5:4b:66:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e395808a6f3d43614901c990c9ce632e15edfa07
        Validity
            Not Before: Jun 15 20:00:36 2025 GMT
            Not After : Jun 16 20:00:36 2025 GMT
        Subject: CN=cafb6c4010f028424d010d014057207d2ec3776f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:78:46:a1:01:ef:d9:ea:e9:50:37:9f:44:1b:
                    bc:f5:c2:4d:8b:ea:41:69:b2:12:a4:3d:70:5e:7d:
                    48:2a:e5:55:91:f8:92:6f:98:11:d4:17:43:e2:c4:
                    6c:c9:f3:15:db:9d:b6:df:c1:8d:1c:4a:36:12:6e:
                    2e:49:f4:1d:44:83:1a:9f:4c:6a:17:e3:81:60:7f:
                    11:38:4a:70:f7:f1:d0:e6:fe:4c:dc:46:61:fc:73:
                    68:93:f2:f7:d0:6e:e1:e6:83:8f:ac:49:b8:db:8a:
                    a2:bb:38:f9:b3:2d:ba:48:9e:78:11:23:8c:7e:a8:
                    84:4c:7a:c8:e6:53:93:47:05:a6:79:ef:a4:29:95:
                    a1:15:b4:3b:3a:83:57:c7:a5:81:68:fe:97:e2:7f:
                    6f:2a:1d:f6:48:54:29:39:c1:2f:9d:d7:35:c1:33:
                    30:ce:d9:01:f6:f2:7f:74:c5:25:f5:1e:26:cd:41:
                    c8:9c:75:5e:ea:b9:ca:92:51:fe:ac:f9:d0:a3:4b:
                    fc:e5:93:42:73:88:41:48:b5:9f:56:fa:8b:42:f5:
                    cb:0f:2a:2b:a9:08:6d:c6:ea:4b:eb:70:ba:ed:42:
                    aa:74:06:1d:0e:fc:5d:5e:63:0c:48:c7:c3:50:65:
                    cb:18:6c:64:6d:5e:d8:8f:e8:44:58:f8:55:ce:e8:
                    60:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FB:6C:40:10:F0:28:42:4D:01:0D:01:40:57:20:7D:2E:C3:77:6F
            X509v3 Authority Key Identifier:
                keyid:E3:95:80:8A:6F:3D:43:61:49:01:C9:90:C9:CE:63:2E:15:ED:FA:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45WAim89Q2FJAcmQyc5jLhXt-gc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:3e:d9:25:4d:00:26:60:f3:17:f5:ae:7b:c5:e3:30:cf:6d:
         b8:bf:88:31:d0:c1:56:14:6e:75:f6:74:45:f3:8c:94:75:1b:
         07:7d:1e:53:96:79:5b:6e:11:7b:0c:07:6d:17:45:7e:8d:13:
         9c:d3:74:5a:67:a5:ea:93:15:5f:1c:fa:a0:5b:b7:af:86:2f:
         d3:b8:b4:76:ba:6d:2d:d8:35:8d:09:e8:9a:96:f1:44:c2:10:
         9f:d5:12:87:aa:53:d0:d2:6e:ce:d7:30:c5:b3:34:8b:39:cf:
         d1:bb:c4:73:56:a6:8a:3e:04:05:51:b5:75:2e:47:c8:dd:7a:
         00:dd:32:7a:56:d8:61:cd:dd:c7:a4:e5:80:87:59:53:01:b1:
         df:5d:6f:6d:59:dc:e4:94:85:fb:ef:cd:45:68:f3:ac:5f:28:
         42:7c:fd:7b:a8:75:9a:87:2a:55:9a:0f:b4:e7:ab:85:a8:63:
         3a:cf:06:2b:24:71:66:88:28:34:68:f3:5a:f1:38:0f:af:fd:
         04:5a:15:16:7a:c4:cd:c7:1d:5c:1e:42:08:43:ee:23:f2:5d:
         66:f1:5a:a6:d2:26:00:e5:04:2c:de:6a:4b:68:19:14:c5:88:
         6f:ee:ed:f4:ec:b0:91:1c:de:61:f1:8b:2a:65:38:2b:f6:af:
         35:24:58:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd1LfoWL/ym6NDJswW1S2ZlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOTU4MDhhNmYzZDQzNjE0OTAxYzk5MGM5Y2U2MzJlMTVl
ZGZhMDcwHhcNMjUwNjE1MjAwMDM2WhcNMjUwNjE2MjAwMDM2WjAzMTEwLwYDVQQD
EyhjYWZiNmM0MDEwZjAyODQyNGQwMTBkMDE0MDU3MjA3ZDJlYzM3NzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nhGoQHv2erpUDefRBu89cJNi+pB
abISpD1wXn1IKuVVkfiSb5gR1BdD4sRsyfMV252238GNHEo2Em4uSfQdRIMan0xq
F+OBYH8ROEpw9/HQ5v5M3EZh/HNok/L30G7h5oOPrEm424qiuzj5sy26SJ54ESOM
fqiETHrI5lOTRwWmee+kKZWhFbQ7OoNXx6WBaP6X4n9vKh32SFQpOcEvndc1wTMw
ztkB9vJ/dMUl9R4mzUHInHVe6rnKklH+rPnQo0v85ZNCc4hBSLWfVvqLQvXLDyor
qQhtxupL63C67UKqdAYdDvxdXmMMSMfDUGXLGGxkbV7Yj+hEWPhVzuhgywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMr7bEAQ8ChCTQENAUBXIH0uw3dvMB8GA1UdIwQY
MBaAFOOVgIpvPUNhSQHJkMnOYy4V7foHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDVXQWltODlRMkZKQWNtUXljNWpMaFh0LWdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zZmFiYWUtYjgwZS00M2M2LWJkMWYt
Zjc5NzNiMTgwOTBiLzEvNDVXQWltODlRMkZKQWNtUXljNWpMaFh0LWdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zZmFiYWUtYjgwZS00M2M2LWJkMWYtZjc5NzNiMTgwOTBi
LzEvNDVXQWltODlRMkZKQWNtUXljNWpMaFh0LWdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfj7ZJU0A
JmDzF/Wue8XjMM9tuL+IMdDBVhRudfZ0RfOMlHUbB30eU5Z5W24RewwHbRdFfo0T
nNN0Wmel6pMVXxz6oFu3r4Yv07i0drptLdg1jQnompbxRMIQn9USh6pT0NJuztcw
xbM0iznP0bvEc1amij4EBVG1dS5HyN16AN0yelbYYc3dx6TlgIdZUwGx311vbVnc
5JSF++/NRWjzrF8oQnz9e6h1mocqVZoPtOerhahjOs8GKyRxZogoNGjzWvE4D6/9
BFoVFnrEzccdXB5CCEPuI/JdZvFaptImAOUELN5qS2gZFMWIb+7t9OywkRzeYfGL
KmU4K/avNSRY6Q==
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:27:17 2025 by rpki-client