Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
File:                     0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft (raw, json)
Hash identifier:          Z835qRFwwpiY0ChFhi2J9U150BJ5Bn5eaLJORm0p3iY=
Subject key identifier:   7B:8E:1F:82:0A:96:5E:B6:5A:7D:91:D0:2D:D7:84:9E:45:3E:F0:AD
Authority key identifier: D0:F7:93:96:9A:6C:84:83:CC:36:67:93:44:50:F6:67:8F:D1:97:58
Certificate issuer:       /CN=d0f793969a6c8483cc3667934450f6678fd19758
Certificate serial:       01976E19A4C937C10CBA7DC18E7C23AD96C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
Manifest number:          05BB
Signing time:             Sat 14 Jun 2025 11:01:03 +0000
Manifest this update:     Sat 14 Jun 2025 11:01:03 +0000
Manifest next update:     Sun 15 Jun 2025 11:01:03 +0000
Files and hashes:         1: 0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl (hash: 9iNdZZTHwACOBH5buvINSpKY0zE4WcZE2ektHFERSE0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:19:a4:c9:37:c1:0c:ba:7d:c1:8e:7c:23:ad:96:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f793969a6c8483cc3667934450f6678fd19758
        Validity
            Not Before: Jun 14 11:01:03 2025 GMT
            Not After : Jun 15 11:01:03 2025 GMT
        Subject: CN=7b8e1f820a965eb65a7d91d02dd7849e453ef0ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f3:83:d5:4e:2b:1f:7d:01:d4:7d:28:5d:da:
                    3c:78:bf:06:8d:52:18:fd:3f:89:4c:5b:02:d2:97:
                    92:dd:a8:6e:75:52:ee:94:e8:74:16:ec:8d:12:5d:
                    e4:69:2d:7a:72:c8:87:e6:13:c9:0a:2b:70:1a:33:
                    15:17:8b:71:97:49:ab:3e:94:9d:18:ad:a6:aa:01:
                    7d:84:2d:33:35:a4:6d:a0:ff:98:cf:3e:1d:ed:dc:
                    ce:fd:8d:46:bb:ae:d7:c1:77:7a:3d:22:be:d0:7d:
                    1c:8e:cf:c5:de:f4:b4:07:08:fa:42:aa:84:b1:7c:
                    7a:72:a4:8c:1b:cf:f2:21:d6:6b:5a:ec:b9:37:c0:
                    25:21:4c:7f:8e:ed:fd:91:03:9b:1e:5a:be:01:2e:
                    c7:d7:1a:a4:e3:5b:1f:5f:81:aa:1e:53:9d:b2:1e:
                    1b:83:3f:82:25:c9:34:b7:47:05:55:dd:04:2a:90:
                    06:cd:dc:3e:cb:6f:70:5a:e6:ec:ae:b7:c9:f2:ce:
                    f4:76:f3:96:88:33:21:f2:e2:e2:43:2b:96:99:33:
                    71:17:f3:8c:ae:a9:eb:b7:21:8f:33:7d:18:04:85:
                    a1:09:b8:4d:45:79:7c:6b:3e:20:57:c0:36:9e:0d:
                    66:bd:82:a8:26:df:ff:75:7c:43:b7:a2:51:62:ab:
                    55:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8E:1F:82:0A:96:5E:B6:5A:7D:91:D0:2D:D7:84:9E:45:3E:F0:AD
            X509v3 Authority Key Identifier:
                keyid:D0:F7:93:96:9A:6C:84:83:CC:36:67:93:44:50:F6:67:8F:D1:97:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:7d:e9:11:bc:6f:d8:f0:07:d4:c7:1b:94:e8:41:fd:c5:a3:
         01:dc:aa:78:c6:81:56:49:d0:d2:f4:c8:2a:33:b1:57:7d:40:
         7f:13:a6:91:68:10:94:60:ce:45:a0:ac:02:a0:bb:25:b1:36:
         0b:03:fb:38:30:70:7f:49:c8:a2:eb:6e:91:55:5a:26:90:ee:
         26:1a:4a:21:62:27:88:3f:e8:d7:89:4b:71:b0:14:91:70:1c:
         20:c4:8a:52:6b:d0:2d:b1:fc:e1:d1:90:9f:f6:ff:5c:20:0c:
         28:9c:1b:a0:49:14:18:7e:bb:f6:bc:94:55:b6:65:6f:db:d0:
         8a:a3:24:68:39:fa:cd:da:d0:a5:64:eb:fb:ba:bd:fe:ec:d8:
         64:c5:25:81:71:6a:b8:1f:c4:3d:e3:ee:05:b7:f3:00:c9:f5:
         e9:25:bc:8e:83:40:72:c5:0c:ad:a7:49:27:e0:be:05:81:da:
         d7:f6:eb:32:cf:bb:5b:65:d3:89:af:c5:98:94:31:cf:8d:83:
         2c:05:0b:04:50:32:a3:7c:d8:0e:72:52:e5:25:6b:31:3a:1c:
         6b:a1:a4:58:e0:ad:aa:7d:51:c6:ca:91:74:0f:23:e1:40:40:
         09:d1:45:8b:26:73:4d:6a:23:88:35:94:b7:be:5b:f0:ca:eb:
         f6:47:90:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduGaTJN8EMun3BjnwjrZbDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjc5Mzk2OWE2Yzg0ODNjYzM2Njc5MzQ0NTBmNjY3OGZk
MTk3NTgwHhcNMjUwNjE0MTEwMTAzWhcNMjUwNjE1MTEwMTAzWjAzMTEwLwYDVQQD
Eyg3YjhlMWY4MjBhOTY1ZWI2NWE3ZDkxZDAyZGQ3ODQ5ZTQ1M2VmMGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/OD1U4rH30B1H0oXdo8eL8GjVIY
/T+JTFsC0peS3ahudVLulOh0FuyNEl3kaS16csiH5hPJCitwGjMVF4txl0mrPpSd
GK2mqgF9hC0zNaRtoP+Yzz4d7dzO/Y1Gu67XwXd6PSK+0H0cjs/F3vS0Bwj6QqqE
sXx6cqSMG8/yIdZrWuy5N8AlIUx/ju39kQObHlq+AS7H1xqk41sfX4GqHlOdsh4b
gz+CJck0t0cFVd0EKpAGzdw+y29wWubsrrfJ8s70dvOWiDMh8uLiQyuWmTNxF/OM
rqnrtyGPM30YBIWhCbhNRXl8az4gV8A2ng1mvYKoJt//dXxDt6JRYqtVGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuOH4IKll62Wn2R0C3XhJ5FPvCtMB8GA1UdIwQY
MBaAFND3k5aabISDzDZnk0RQ9meP0ZdYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBlVGxwcHNoSVBNTm1lVFJGRDJaNF9SbDFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hNmY2MDgtMzIwMy00N2Y3LWJiY2Et
MGE3NTc0OWY3MTQ4LzEvMFBlVGxwcHNoSVBNTm1lVFJGRDJaNF9SbDFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9hNmY2MDgtMzIwMy00N2Y3LWJiY2EtMGE3NTc0OWY3MTQ4
LzEvMFBlVGxwcHNoSVBNTm1lVFJGRDJaNF9SbDFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAon3pEbxv
2PAH1McblOhB/cWjAdyqeMaBVknQ0vTIKjOxV31AfxOmkWgQlGDORaCsAqC7JbE2
CwP7ODBwf0nIoutukVVaJpDuJhpKIWIniD/o14lLcbAUkXAcIMSKUmvQLbH84dGQ
n/b/XCAMKJwboEkUGH679ryUVbZlb9vQiqMkaDn6zdrQpWTr+7q9/uzYZMUlgXFq
uB/EPePuBbfzAMn16SW8joNAcsUMradJJ+C+BYHa1/brMs+7W2XTia/FmJQxz42D
LAULBFAyo3zYDnJS5SVrMToca6GkWOCtqn1RxsqRdA8j4UBACdFFiyZzTWojiDWU
t75b8Mrr9keQNA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 20:16:57 2025 by rpki-client