Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
File:                     4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft (raw, json)
Hash identifier:          N+Y0Awk/mYqh21DuoAUtkF9g78FHxYw50jV4AQiXcbU=
Subject key identifier:   85:86:67:03:54:ED:A6:BE:51:25:3C:B6:6C:7A:7C:CD:8F:49:54:27
Authority key identifier: E2:FF:4C:4E:23:81:06:DC:5F:29:6E:26:A9:CE:CF:3C:4A:43:55:46
Certificate issuer:       /CN=e2ff4c4e238106dc5f296e26a9cecf3c4a435546
Certificate serial:       0197B6A1C08C2F99FE66FBAF206DCDD3DCB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
Manifest number:          41
Signing time:             Sat 28 Jun 2025 13:02:23 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:23 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:23 +0000
Files and hashes:         1: 4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl (hash: Im2IsvRtLu0mLZ8XvSx7JEcOwLRFJPiDcDk2FEgxP7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:c0:8c:2f:99:fe:66:fb:af:20:6d:cd:d3:dc:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2ff4c4e238106dc5f296e26a9cecf3c4a435546
        Validity
            Not Before: Jun 28 13:02:23 2025 GMT
            Not After : Jun 29 13:02:23 2025 GMT
        Subject: CN=8586670354eda6be51253cb66c7a7ccd8f495427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1b:5d:ec:34:6d:a8:87:2d:77:cc:dc:41:e0:
                    51:4f:4b:5b:14:c7:de:7c:b2:4b:32:49:ed:84:c0:
                    d7:ee:24:49:66:1e:fe:21:68:aa:0c:8b:f2:cf:9d:
                    92:93:5b:aa:74:64:4c:8c:81:f9:b3:9f:6f:a0:dc:
                    33:1c:ee:be:f0:90:4e:f3:dd:af:fc:2e:f5:46:d3:
                    50:b0:df:df:df:d4:c8:f7:34:8e:3e:eb:ee:a6:57:
                    ba:0e:11:31:18:a2:66:52:f1:09:b8:46:2b:19:6b:
                    6e:8e:6c:17:ca:91:3f:df:77:60:40:67:b0:26:aa:
                    3f:b2:20:e5:87:36:2f:79:bd:d4:43:7c:65:fd:fc:
                    68:d5:b5:e9:f9:9c:f6:87:bc:af:1e:8a:e4:d3:71:
                    48:1e:98:f0:d0:fd:09:50:ff:b0:fd:ec:eb:30:11:
                    0e:17:1b:8a:d7:dc:7a:09:9c:99:fe:f5:dc:76:00:
                    a1:be:b8:88:2c:d1:52:05:93:17:eb:15:c0:1a:70:
                    08:4e:ea:7e:50:e7:08:97:b4:52:50:7d:45:4c:df:
                    8b:a0:9c:82:97:6b:b0:0e:51:a4:ce:18:d6:e6:2a:
                    d2:1f:b3:4a:9f:f7:4f:a9:21:b8:53:cb:40:3c:aa:
                    e6:a1:90:d6:1e:bf:b0:bc:f0:3a:8f:fc:c8:45:ec:
                    1f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:86:67:03:54:ED:A6:BE:51:25:3C:B6:6C:7A:7C:CD:8F:49:54:27
            X509v3 Authority Key Identifier:
                keyid:E2:FF:4C:4E:23:81:06:DC:5F:29:6E:26:A9:CE:CF:3C:4A:43:55:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:fe:aa:37:e8:67:cb:2e:68:e2:2f:d7:e5:34:c4:42:6f:f5:
         38:bc:ee:d4:3b:aa:83:fb:d5:51:55:05:cc:7c:3d:4a:8f:e0:
         51:71:98:ba:f8:8c:69:aa:aa:16:ab:51:67:69:30:2a:72:b5:
         ff:5d:81:ab:da:c2:b9:80:fc:2c:e8:73:4e:65:56:50:7a:60:
         c9:0a:5d:75:83:d5:24:9a:74:3a:4f:e7:bf:96:c9:59:b6:6f:
         f1:bf:09:77:e3:7c:dd:e3:04:04:0b:bd:fc:f0:50:3f:58:70:
         45:7b:c5:59:ae:8a:9f:19:89:65:c9:27:c8:92:15:bd:59:37:
         b7:dc:b5:5f:94:c2:f9:d6:e9:01:84:d1:e3:40:a7:b3:53:8a:
         e8:49:83:cb:7d:09:7f:3c:45:96:48:fc:77:48:97:a0:18:49:
         08:27:76:58:77:a0:3e:0b:5e:8a:0f:67:55:68:41:b5:dd:ce:
         00:45:3b:5b:cf:75:49:ec:41:9d:4c:5b:b6:bc:ee:d1:81:4b:
         52:11:4c:dc:6e:eb:c2:8b:a1:79:37:a9:cd:b0:2c:ff:d6:66:
         a0:27:5b:22:27:5f:77:6e:ee:cc:d2:b6:66:b8:7c:ea:84:be:
         a8:b8:5d:3d:c4:2b:23:ea:0e:72:b6:d4:5f:e6:a4:db:b4:38:
         67:e0:c1:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ocCML5n+ZvuvIG3N09ywMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZmY0YzRlMjM4MTA2ZGM1ZjI5NmUyNmE5Y2VjZjNjNGE0
MzU1NDYwHhcNMjUwNjI4MTMwMjIzWhcNMjUwNjI5MTMwMjIzWjAzMTEwLwYDVQQD
Eyg4NTg2NjcwMzU0ZWRhNmJlNTEyNTNjYjY2YzdhN2NjZDhmNDk1NDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBtd7DRtqIctd8zcQeBRT0tbFMfe
fLJLMknthMDX7iRJZh7+IWiqDIvyz52Sk1uqdGRMjIH5s59voNwzHO6+8JBO892v
/C71RtNQsN/f39TI9zSOPuvuple6DhExGKJmUvEJuEYrGWtujmwXypE/33dgQGew
Jqo/siDlhzYveb3UQ3xl/fxo1bXp+Zz2h7yvHork03FIHpjw0P0JUP+w/ezrMBEO
FxuK19x6CZyZ/vXcdgChvriILNFSBZMX6xXAGnAITup+UOcIl7RSUH1FTN+LoJyC
l2uwDlGkzhjW5irSH7NKn/dPqSG4U8tAPKrmoZDWHr+wvPA6j/zIRewfJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWGZwNU7aa+USU8tmx6fM2PSVQnMB8GA1UdIwQY
MBaAFOL/TE4jgQbcXyluJqnOzzxKQ1VGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHY5TVRpT0JCdHhmS1c0bXFjN1BQRXBEVlVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kODYxMzctYThjOC00YTYyLTg3Yzkt
MjNlZjZjZWU1ZWRmLzEvNHY5TVRpT0JCdHhmS1c0bXFjN1BQRXBEVlVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9kODYxMzctYThjOC00YTYyLTg3YzktMjNlZjZjZWU1ZWRm
LzEvNHY5TVRpT0JCdHhmS1c0bXFjN1BQRXBEVlVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/6qN+hn
yy5o4i/X5TTEQm/1OLzu1Duqg/vVUVUFzHw9So/gUXGYuviMaaqqFqtRZ2kwKnK1
/12Bq9rCuYD8LOhzTmVWUHpgyQpddYPVJJp0Ok/nv5bJWbZv8b8Jd+N83eMEBAu9
/PBQP1hwRXvFWa6KnxmJZcknyJIVvVk3t9y1X5TC+dbpAYTR40Cns1OK6EmDy30J
fzxFlkj8d0iXoBhJCCd2WHegPgteig9nVWhBtd3OAEU7W891SexBnUxbtrzu0YFL
UhFM3G7rwouheTepzbAs/9ZmoCdbIidfd27uzNK2Zrh86oS+qLhdPcQrI+oOcrbU
X+ak27Q4Z+DBiA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:34 2025 by rpki-client