Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
File:                     cV2dGCxjrtg5f743LjYA9D2-62o.mft (raw, json)
Hash identifier:          P4EyCsuzG46iW5ho58+qHjsebJbt+Y8hdJc2oSPpJT8=
Subject key identifier:   55:1D:BD:3B:27:86:86:23:D5:46:3C:97:A3:57:ED:B1:7E:07:BC:60
Authority key identifier: 71:5D:9D:18:2C:63:AE:D8:39:7F:BE:37:2E:36:00:F4:3D:BE:EB:6A
Certificate issuer:       /CN=715d9d182c63aed8397fbe372e3600f43dbeeb6a
Certificate serial:       0197B6A0F591F726DE5BEE2F600978D230DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
Manifest number:          1546
Signing time:             Sat 28 Jun 2025 13:01:31 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:31 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:31 +0000
Files and hashes:         1: cV2dGCxjrtg5f743LjYA9D2-62o.crl (hash: qCk4WkbE7yuWY8XaVbCTHwOe3YxHwhUyOGVdlMOcpr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:f5:91:f7:26:de:5b:ee:2f:60:09:78:d2:30:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715d9d182c63aed8397fbe372e3600f43dbeeb6a
        Validity
            Not Before: Jun 28 13:01:31 2025 GMT
            Not After : Jun 29 13:01:31 2025 GMT
        Subject: CN=551dbd3b27868623d5463c97a357edb17e07bc60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9e:01:f3:1d:b3:4c:35:a6:c8:61:77:1a:04:
                    ea:4a:b8:59:90:b2:59:3c:b8:63:1e:7e:c0:50:cb:
                    9d:4c:74:f5:30:b0:ee:37:6c:ee:23:38:6f:e5:0f:
                    37:d6:27:7f:e0:60:8e:66:de:42:2e:dd:23:f0:71:
                    8e:9c:05:56:1c:b6:06:f5:df:44:77:d9:28:b3:e0:
                    ac:24:db:5e:e9:b8:9f:ea:aa:d4:bb:b1:53:d0:0f:
                    58:57:51:fe:4d:1b:df:a0:a9:0b:ae:75:2a:4b:b8:
                    1f:2a:38:7a:69:dd:96:2c:49:ba:3c:fe:a3:04:f6:
                    e2:10:6e:30:70:7d:b4:9e:31:7c:fb:d5:17:80:e5:
                    d5:b4:fc:f1:bb:2e:35:17:40:d2:7f:6c:af:f6:08:
                    3f:f7:57:49:c0:94:bc:8d:dc:e9:d8:8e:91:b1:c3:
                    d6:9b:16:4f:cc:1a:83:f1:38:cd:c6:6e:7a:34:26:
                    9a:22:05:04:eb:4c:3e:4a:eb:94:56:62:c5:ca:a6:
                    f6:a4:28:f4:58:ce:86:9c:d8:69:27:75:9a:36:df:
                    db:a6:a8:9e:4b:d6:63:27:3c:b1:b1:00:ad:2d:87:
                    24:39:4c:04:75:9f:58:8d:29:d0:a9:16:89:02:04:
                    50:11:87:9c:c7:c1:d9:01:3d:39:2d:7e:fb:33:46:
                    94:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1D:BD:3B:27:86:86:23:D5:46:3C:97:A3:57:ED:B1:7E:07:BC:60
            X509v3 Authority Key Identifier:
                keyid:71:5D:9D:18:2C:63:AE:D8:39:7F:BE:37:2E:36:00:F4:3D:BE:EB:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:1b:be:f9:fd:98:d0:81:e9:75:43:06:22:42:1e:05:af:0f:
         05:f9:43:0f:d5:b9:c6:9c:7e:da:0b:5a:15:44:68:e7:2b:39:
         db:cf:e6:67:2a:b8:0a:3f:05:89:0c:b5:a7:63:96:93:29:75:
         f2:97:9f:41:c6:94:64:65:b6:58:4a:3f:2d:ac:95:d9:33:a0:
         ae:b6:8d:50:75:12:51:ed:49:76:9e:12:14:60:0e:05:87:60:
         9a:55:9e:06:52:f7:7a:5f:6b:fa:6a:bd:7a:d3:3d:45:20:e8:
         b9:2b:2e:79:0a:98:97:f9:08:69:69:c9:fc:40:ed:6c:9a:d0:
         89:59:16:bf:54:24:b8:69:d5:64:94:bb:c1:d5:18:1f:f4:d5:
         be:6f:33:07:6a:f0:57:fb:47:57:0d:e3:9b:69:80:2d:44:72:
         d5:31:0c:ce:63:11:a3:22:fa:fa:5e:99:8e:b8:3f:52:65:dc:
         e8:eb:e4:fe:28:f8:8c:36:21:d7:1e:18:1b:a7:7b:a3:b6:68:
         d5:a8:7d:aa:a6:ec:3d:54:28:1a:c0:36:54:54:a9:b6:dd:00:
         73:6f:fb:57:f2:e6:b9:d0:9d:03:a7:02:86:d5:34:ae:13:2b:
         ff:b2:05:da:18:66:d3:bc:ad:32:42:6a:14:99:82:0b:81:b6:
         5a:5c:55:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oPWR9ybeW+4vYAl40jDeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNWQ5ZDE4MmM2M2FlZDgzOTdmYmUzNzJlMzYwMGY0M2Ri
ZWViNmEwHhcNMjUwNjI4MTMwMTMxWhcNMjUwNjI5MTMwMTMxWjAzMTEwLwYDVQQD
Eyg1NTFkYmQzYjI3ODY4NjIzZDU0NjNjOTdhMzU3ZWRiMTdlMDdiYzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J4B8x2zTDWmyGF3GgTqSrhZkLJZ
PLhjHn7AUMudTHT1MLDuN2zuIzhv5Q831id/4GCOZt5CLt0j8HGOnAVWHLYG9d9E
d9kos+CsJNte6bif6qrUu7FT0A9YV1H+TRvfoKkLrnUqS7gfKjh6ad2WLEm6PP6j
BPbiEG4wcH20njF8+9UXgOXVtPzxuy41F0DSf2yv9gg/91dJwJS8jdzp2I6RscPW
mxZPzBqD8TjNxm56NCaaIgUE60w+SuuUVmLFyqb2pCj0WM6GnNhpJ3WaNt/bpqie
S9ZjJzyxsQCtLYckOUwEdZ9YjSnQqRaJAgRQEYecx8HZAT05LX77M0aULwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUdvTsnhoYj1UY8l6NX7bF+B7xgMB8GA1UdIwQY
MBaAFHFdnRgsY67YOX++Ny42APQ9vutqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1YyZEdDeGpydGc1Zjc0M0xqWUE5RDItNjJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi80YmJhMWEtZWQwOC00ZmQ2LTlmYjgt
ZTQzM2NmYzcyNDc3LzEvY1YyZEdDeGpydGc1Zjc0M0xqWUE5RDItNjJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi80YmJhMWEtZWQwOC00ZmQ2LTlmYjgtZTQzM2NmYzcyNDc3
LzEvY1YyZEdDeGpydGc1Zjc0M0xqWUE5RDItNjJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChu++f2Y
0IHpdUMGIkIeBa8PBflDD9W5xpx+2gtaFURo5ys528/mZyq4Cj8FiQy1p2OWkyl1
8pefQcaUZGW2WEo/LayV2TOgrraNUHUSUe1Jdp4SFGAOBYdgmlWeBlL3el9r+mq9
etM9RSDouSsueQqYl/kIaWnJ/EDtbJrQiVkWv1QkuGnVZJS7wdUYH/TVvm8zB2rw
V/tHVw3jm2mALURy1TEMzmMRoyL6+l6Zjrg/UmXc6Ovk/ij4jDYh1x4YG6d7o7Zo
1ah9qqbsPVQoGsA2VFSptt0Ac2/7V/LmudCdA6cChtU0rhMr/7IF2hhm07ytMkJq
FJmCC4G2WlxV4A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:33 2025 by rpki-client