Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
File:                     Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft (raw, json)
Hash identifier:          1uld4afNHo1YXaogKb5XYZHRvNryN6rhR7RiZBy3Co0=
Subject key identifier:   30:4F:00:56:3C:98:1E:D5:82:34:91:8A:33:FB:88:29:40:3B:F9:2D
Authority key identifier: 17:18:39:A0:B6:47:6D:FB:F8:33:51:01:61:3C:E1:A7:72:1E:F3:85
Certificate issuer:       /CN=171839a0b6476dfbf8335101613ce1a7721ef385
Certificate serial:       0197B6A05F4D87E9A67BC65F445E685314F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
Manifest number:          1544
Signing time:             Sat 28 Jun 2025 13:00:52 +0000
Manifest this update:     Sat 28 Jun 2025 13:00:52 +0000
Manifest next update:     Sun 29 Jun 2025 13:00:52 +0000
Files and hashes:         1: Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl (hash: PrUexcEo1ewMUb8ytFLdKHgvJd7Io2uYNE15SEU+w/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:5f:4d:87:e9:a6:7b:c6:5f:44:5e:68:53:14:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171839a0b6476dfbf8335101613ce1a7721ef385
        Validity
            Not Before: Jun 28 13:00:52 2025 GMT
            Not After : Jun 29 13:00:52 2025 GMT
        Subject: CN=304f00563c981ed58234918a33fb8829403bf92d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:07:5c:c4:4e:8b:e9:64:7b:4c:7e:84:b7:9d:
                    d6:7f:35:31:4d:d0:1c:0d:4c:e6:e2:b2:e6:31:61:
                    9e:17:90:28:ed:fb:1d:ee:52:d6:5b:82:a7:2c:e2:
                    8f:98:bb:84:ce:94:0c:9c:35:aa:cd:60:52:da:ba:
                    e4:75:f2:e4:5f:45:4c:9f:86:8a:49:fc:cd:72:07:
                    22:e1:94:8a:f1:79:8b:eb:f3:9c:83:ca:46:03:68:
                    a4:a3:0d:23:57:c6:74:d4:14:27:5e:fa:f9:38:e5:
                    f9:44:bc:82:18:4e:91:8c:7d:79:7b:72:14:bd:5f:
                    ec:e8:a7:b9:c5:0e:f5:ba:59:ca:8a:8e:78:38:19:
                    aa:ae:4b:71:63:97:a5:eb:1b:50:36:37:a6:7a:b8:
                    40:a8:4f:fd:5a:1d:5e:f1:0c:ad:ab:dd:ed:57:97:
                    b6:11:59:66:e7:5c:44:dc:ed:ad:e3:c8:bf:c5:40:
                    10:9c:ed:db:64:51:fc:6a:dd:52:3b:d2:4c:26:4f:
                    af:80:92:d2:59:bd:66:4a:00:99:89:16:71:61:ba:
                    0f:e2:83:1d:9c:13:10:00:a1:16:93:d2:bd:3e:c1:
                    30:8d:dc:cb:72:e9:7a:ac:75:63:0d:0d:3a:e3:18:
                    fb:97:6f:b5:73:10:24:bf:c3:fa:e8:40:91:80:19:
                    db:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4F:00:56:3C:98:1E:D5:82:34:91:8A:33:FB:88:29:40:3B:F9:2D
            X509v3 Authority Key Identifier:
                keyid:17:18:39:A0:B6:47:6D:FB:F8:33:51:01:61:3C:E1:A7:72:1E:F3:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e4:d3:28:58:bc:72:fd:7e:b3:24:e8:92:b4:40:48:29:73:
         45:e2:2f:d9:2e:e5:ac:28:0b:92:90:5a:6d:9b:b3:75:3e:3e:
         b5:7b:4b:7d:1d:5a:2d:a0:2c:f5:65:de:06:fd:e7:19:44:77:
         ab:92:0f:d4:9f:36:15:2f:00:62:ff:67:cf:cb:fd:e4:d8:51:
         f5:6a:17:44:42:85:cf:e2:bb:49:46:3d:1a:dc:b3:8e:7d:ec:
         dd:7a:b8:e7:e0:e9:8f:cc:f8:7b:05:ec:30:66:6a:7f:eb:96:
         b3:1d:3c:8e:55:fe:09:5c:c4:2f:86:44:d2:00:34:41:ae:2e:
         38:60:54:70:84:86:c5:96:36:09:de:47:b8:e7:d3:c6:7e:ce:
         05:0a:04:f5:3b:e6:08:5b:13:2b:33:0e:10:e3:db:2d:ce:c2:
         95:b1:14:69:f1:d3:2d:0a:f9:cd:ea:c8:75:c1:8c:10:ec:3d:
         09:a1:d8:84:72:1f:1d:52:e0:25:fc:b9:9b:cd:40:fe:fe:20:
         af:5e:85:e8:83:ea:4b:ca:eb:06:ab:21:8c:43:dd:6f:c6:c0:
         59:20:e6:0e:36:c0:c9:1e:74:b9:cb:2e:03:ce:49:6d:e3:4b:
         35:3d:b6:c8:d8:9e:dc:b0:55:c9:bd:b6:5d:1a:2f:d7:0c:53:
         5c:36:f8:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oF9Nh+mme8ZfRF5oUxT5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MTgzOWEwYjY0NzZkZmJmODMzNTEwMTYxM2NlMWE3NzIx
ZWYzODUwHhcNMjUwNjI4MTMwMDUyWhcNMjUwNjI5MTMwMDUyWjAzMTEwLwYDVQQD
EygzMDRmMDA1NjNjOTgxZWQ1ODIzNDkxOGEzM2ZiODgyOTQwM2JmOTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wdcxE6L6WR7TH6Et53WfzUxTdAc
DUzm4rLmMWGeF5Ao7fsd7lLWW4KnLOKPmLuEzpQMnDWqzWBS2rrkdfLkX0VMn4aK
SfzNcgci4ZSK8XmL6/Ocg8pGA2ikow0jV8Z01BQnXvr5OOX5RLyCGE6RjH15e3IU
vV/s6Ke5xQ71ulnKio54OBmqrktxY5el6xtQNjemerhAqE/9Wh1e8Qytq93tV5e2
EVlm51xE3O2t48i/xUAQnO3bZFH8at1SO9JMJk+vgJLSWb1mSgCZiRZxYboP4oMd
nBMQAKEWk9K9PsEwjdzLcul6rHVjDQ064xj7l2+1cxAkv8P66ECRgBnboQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBPAFY8mB7VgjSRijP7iClAO/ktMB8GA1UdIwQY
MBaAFBcYOaC2R237+DNRAWE84adyHvOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnhnNW9MWkhiZnY0TTFFQllUemhwM0llODRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8yOTM1YTEtMmFlYi00Nzk4LWFhZGIt
MjUxZTJkY2IzOTlmLzEvRnhnNW9MWkhiZnY0TTFFQllUemhwM0llODRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8yOTM1YTEtMmFlYi00Nzk4LWFhZGItMjUxZTJkY2IzOTlm
LzEvRnhnNW9MWkhiZnY0TTFFQllUemhwM0llODRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+TTKFi8
cv1+syTokrRASClzReIv2S7lrCgLkpBabZuzdT4+tXtLfR1aLaAs9WXeBv3nGUR3
q5IP1J82FS8AYv9nz8v95NhR9WoXREKFz+K7SUY9Gtyzjn3s3Xq45+Dpj8z4ewXs
MGZqf+uWsx08jlX+CVzEL4ZE0gA0Qa4uOGBUcISGxZY2Cd5HuOfTxn7OBQoE9Tvm
CFsTKzMOEOPbLc7ClbEUafHTLQr5zerIdcGMEOw9CaHYhHIfHVLgJfy5m81A/v4g
r16F6IPqS8rrBqshjEPdb8bAWSDmDjbAyR50ucsuA85JbeNLNT22yNie3LBVyb22
XRov1wxTXDb4Sw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:31 2025 by rpki-client