Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
File:                     7W3VjHMPSQxsZTC3ULUY55Okh6U.mft (raw, json)
Hash identifier:          UtIL4DXENPy1Aq1F3YiX40NLOys9h87q85ypIk0H2mE=
Subject key identifier:   A0:9E:30:F5:C5:83:80:4D:00:D5:DB:24:DE:3E:EF:8A:EE:77:EE:48
Authority key identifier: ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5
Certificate issuer:       /CN=ed6dd58c730f490c6c6530b750b518e793a487a5
Certificate serial:       0197B6A1EAB0646D81EE544BA6BC7A496DA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
Manifest number:          0C9A
Signing time:             Sat 28 Jun 2025 13:02:34 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:34 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:34 +0000
Files and hashes:         1: 7W3VjHMPSQxsZTC3ULUY55Okh6U.crl (hash: UgCvvX0U2uK5/CrL7b6/De5W6nbjYmk1EI1iRKH++Ks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:ea:b0:64:6d:81:ee:54:4b:a6:bc:7a:49:6d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6dd58c730f490c6c6530b750b518e793a487a5
        Validity
            Not Before: Jun 28 13:02:34 2025 GMT
            Not After : Jun 29 13:02:34 2025 GMT
        Subject: CN=a09e30f5c583804d00d5db24de3eef8aee77ee48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:16:f7:84:fe:99:8e:9d:5c:a7:a9:e4:b6:56:
                    55:ad:d0:bb:ee:f3:88:92:9e:de:d5:03:6f:c9:97:
                    e4:fe:24:18:6f:25:48:be:f1:38:0f:4e:6c:20:d1:
                    22:ef:25:17:d3:d1:aa:20:90:44:89:e0:38:a9:6a:
                    2a:7a:62:e4:23:5e:ed:c7:23:17:ba:1f:7a:0f:37:
                    33:d9:53:6e:61:43:42:c4:de:70:f2:25:93:36:f4:
                    38:7a:8a:ca:6a:8a:42:9c:45:b2:bf:45:60:c0:4d:
                    9d:61:8b:89:96:31:57:73:54:0f:b9:0e:22:b7:54:
                    91:d1:a9:f4:de:92:bf:eb:b1:02:98:2a:cc:0a:e0:
                    f3:24:00:23:85:71:2b:c5:34:70:44:de:d8:be:44:
                    0c:d6:58:ea:73:01:2c:49:92:2a:23:78:9a:44:82:
                    26:15:c9:b9:0f:bc:77:a7:09:74:74:64:9a:34:58:
                    bd:2f:d3:ef:08:c0:ad:62:75:da:1f:aa:f8:7b:4e:
                    07:41:5a:e4:23:8f:99:9a:76:29:bd:60:58:3e:82:
                    43:df:d3:6d:b5:8b:c1:0a:89:14:58:2f:68:8f:b9:
                    f5:88:2e:db:8c:88:ed:4f:1b:be:93:16:71:40:88:
                    79:e9:c3:3b:bb:38:42:28:54:10:3f:67:4f:bf:aa:
                    0e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9E:30:F5:C5:83:80:4D:00:D5:DB:24:DE:3E:EF:8A:EE:77:EE:48
            X509v3 Authority Key Identifier:
                keyid:ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:ca:5e:44:1e:a7:d6:91:32:49:cb:bf:c7:f5:de:ff:c7:8a:
         b6:99:f5:08:69:76:d6:10:fa:88:cd:5c:7e:b1:16:4b:03:a4:
         69:9e:aa:76:06:36:fc:e5:ef:48:1c:bd:25:17:d4:ed:d7:e2:
         35:11:c1:fd:4d:e2:3c:eb:41:7e:35:96:17:ff:9d:df:de:83:
         2f:99:90:28:43:8f:84:95:e8:45:e6:82:e3:11:20:5c:eb:e9:
         2b:6e:d5:66:89:c2:d5:31:dd:d7:81:3d:7a:4a:e1:57:e9:ee:
         a1:15:85:ef:4f:53:04:86:db:37:e9:bb:5a:f7:78:93:2e:d8:
         85:9b:86:6e:d3:84:c2:76:29:15:e5:f9:7b:03:26:87:ca:3f:
         24:6b:e1:d4:ba:12:e7:3a:11:94:78:7f:45:d5:27:95:de:33:
         24:69:2a:a2:d9:d5:2e:d5:a4:a9:e9:06:bb:ba:c3:74:1d:7d:
         c6:46:53:2e:c0:c5:3d:4d:a7:0b:65:73:f0:f3:c6:7f:b5:76:
         af:79:6e:2e:e9:98:bb:93:17:c1:71:06:89:f0:c2:34:b6:a2:
         9d:ed:2c:33:82:90:4d:d0:b7:83:fc:54:ba:c3:4a:0c:b7:32:
         c2:2c:26:10:c9:c3:9d:01:37:6c:cd:91:9e:e4:a3:2a:0f:78:
         0a:78:6c:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oeqwZG2B7lRLprx6SW2pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNmRkNThjNzMwZjQ5MGM2YzY1MzBiNzUwYjUxOGU3OTNh
NDg3YTUwHhcNMjUwNjI4MTMwMjM0WhcNMjUwNjI5MTMwMjM0WjAzMTEwLwYDVQQD
EyhhMDllMzBmNWM1ODM4MDRkMDBkNWRiMjRkZTNlZWY4YWVlNzdlZTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRb3hP6Zjp1cp6nktlZVrdC77vOI
kp7e1QNvyZfk/iQYbyVIvvE4D05sINEi7yUX09GqIJBEieA4qWoqemLkI17txyMX
uh96Dzcz2VNuYUNCxN5w8iWTNvQ4eorKaopCnEWyv0VgwE2dYYuJljFXc1QPuQ4i
t1SR0an03pK/67ECmCrMCuDzJAAjhXErxTRwRN7YvkQM1ljqcwEsSZIqI3iaRIIm
Fcm5D7x3pwl0dGSaNFi9L9PvCMCtYnXaH6r4e04HQVrkI4+ZmnYpvWBYPoJD39Nt
tYvBCokUWC9oj7n1iC7bjIjtTxu+kxZxQIh56cM7uzhCKFQQP2dPv6oOWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCeMPXFg4BNANXbJN4+74rud+5IMB8GA1UdIwQY
MBaAFO1t1YxzD0kMbGUwt1C1GOeTpIelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1czVmpITVBTUXhzWlRDM1VMVVk1NU9raDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9lMWRhZDItMTc5Ni00NzY0LWFjZjkt
MGFhZWE2NjcwNjYzLzEvN1czVmpITVBTUXhzWlRDM1VMVVk1NU9raDZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9lMWRhZDItMTc5Ni00NzY0LWFjZjktMGFhZWE2NjcwNjYz
LzEvN1czVmpITVBTUXhzWlRDM1VMVVk1NU9raDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMpeRB6n
1pEyScu/x/Xe/8eKtpn1CGl21hD6iM1cfrEWSwOkaZ6qdgY2/OXvSBy9JRfU7dfi
NRHB/U3iPOtBfjWWF/+d396DL5mQKEOPhJXoReaC4xEgXOvpK27VZonC1THd14E9
ekrhV+nuoRWF709TBIbbN+m7Wvd4ky7YhZuGbtOEwnYpFeX5ewMmh8o/JGvh1LoS
5zoRlHh/RdUnld4zJGkqotnVLtWkqekGu7rDdB19xkZTLsDFPU2nC2Vz8PPGf7V2
r3luLumYu5MXwXEGifDCNLaine0sM4KQTdC3g/xUusNKDLcywiwmEMnDnQE3bM2R
nuSjKg94CnhsBA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:45 2025 by rpki-client