Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft
File:                     vWCuPD0yPaOUps4F9rI9fPTdE0g.mft (raw, json)
Hash identifier:          mMUpnmeUnPByxqyrd6Dktds4LIGFgOWOW0Z1D9Vvt3s=
Subject key identifier:   83:03:2C:D4:E4:12:18:6D:65:E1:70:E6:23:D3:D7:73:21:25:30:47
Authority key identifier: BD:60:AE:3C:3D:32:3D:A3:94:A6:CE:05:F6:B2:3D:7C:F4:DD:13:48
Certificate issuer:       /CN=bd60ae3c3d323da394a6ce05f6b23d7cf4dd1348
Certificate serial:       0197B96B02CCFD3F2FEB5208097043B9366B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWCuPD0yPaOUps4F9rI9fPTdE0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft
Manifest number:          0FAE
Signing time:             Sun 29 Jun 2025 02:01:27 +0000
Manifest this update:     Sun 29 Jun 2025 02:01:27 +0000
Manifest next update:     Mon 30 Jun 2025 02:01:27 +0000
Files and hashes:         1: vWCuPD0yPaOUps4F9rI9fPTdE0g.crl (hash: 8zhD6XTWaD/2w5665BgOg6rAU91WR4pq265edFlqpuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vWCuPD0yPaOUps4F9rI9fPTdE0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6b:02:cc:fd:3f:2f:eb:52:08:09:70:43:b9:36:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd60ae3c3d323da394a6ce05f6b23d7cf4dd1348
        Validity
            Not Before: Jun 29 02:01:27 2025 GMT
            Not After : Jun 30 02:01:27 2025 GMT
        Subject: CN=83032cd4e412186d65e170e623d3d77321253047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1a:e1:ae:32:e7:5a:af:5b:1e:70:12:3f:c3:
                    a2:0c:63:b7:6c:cf:3c:ff:9a:22:3f:38:97:ce:aa:
                    d1:2c:c9:45:c4:ab:9a:6a:f0:be:88:ed:f9:43:3e:
                    aa:15:8e:5b:bb:71:d0:0a:ed:36:0a:a2:ec:16:98:
                    75:72:fd:33:fb:e5:7e:4a:7b:e9:77:00:b0:ba:a1:
                    92:02:c5:62:b6:a5:87:b1:aa:c7:4d:96:5a:b8:ba:
                    dc:58:a7:c6:5f:d3:56:4b:6e:dd:d2:48:26:f8:02:
                    48:a4:9e:bd:49:b4:62:79:75:96:9a:3c:eb:84:4c:
                    b4:13:82:bd:68:63:0e:ef:04:3d:85:f2:37:2b:af:
                    c7:23:1c:50:fb:06:31:bb:6e:31:27:a9:57:e7:99:
                    f2:99:ca:b8:c9:23:22:e9:fd:bf:9b:f9:71:6f:17:
                    b3:18:7d:b2:7f:42:f4:a6:41:06:12:be:41:4f:b7:
                    68:8f:a5:00:93:94:1c:8a:eb:a7:8a:25:61:8c:92:
                    da:93:be:a0:76:8e:87:7a:0b:48:09:8b:b0:ef:ae:
                    86:82:65:f1:15:85:d7:aa:f0:5d:83:52:d0:de:6b:
                    8c:4c:56:21:ec:55:ae:25:ec:9a:8c:13:60:fe:34:
                    e3:8c:ab:7d:ae:6f:ec:e3:7d:98:44:10:e5:11:c7:
                    63:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:03:2C:D4:E4:12:18:6D:65:E1:70:E6:23:D3:D7:73:21:25:30:47
            X509v3 Authority Key Identifier:
                keyid:BD:60:AE:3C:3D:32:3D:A3:94:A6:CE:05:F6:B2:3D:7C:F4:DD:13:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWCuPD0yPaOUps4F9rI9fPTdE0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:d5:01:8f:29:fd:d4:5a:a9:1f:3b:23:ab:97:f8:c5:10:9b:
         6f:31:9d:40:6b:5e:84:8b:e9:5b:0c:5c:58:b7:49:6a:53:95:
         a1:b4:88:ce:94:c6:4e:29:1e:8b:2a:6e:ef:4e:7f:58:33:c8:
         b8:09:a5:f7:8f:10:d4:2a:4d:22:99:ff:e7:76:2a:08:bd:d5:
         36:8c:88:17:0f:11:92:5a:f8:db:f1:20:cf:f0:e2:fb:27:43:
         6f:ab:60:e1:3b:da:d3:1e:70:f8:c2:41:fe:c2:7b:b5:9f:98:
         96:43:3a:d8:df:01:48:04:9a:e4:ab:2d:bc:80:eb:25:57:7b:
         57:57:a8:31:fa:cf:e5:28:64:f1:63:8e:1e:00:e7:bf:45:50:
         b8:e0:52:6f:a1:19:24:4a:3f:31:f7:34:f9:87:64:3f:dd:37:
         66:63:5d:12:4a:fd:b8:e0:80:53:08:96:34:e7:4c:1f:8b:14:
         e7:13:03:06:16:7a:7c:b0:0b:67:7a:32:eb:9b:63:3e:cd:62:
         97:3f:c9:1c:ee:27:48:fc:7d:32:f8:82:35:b9:51:b2:44:3d:
         02:c9:37:b2:31:56:4e:b7:16:4c:51:51:f5:c8:c9:f4:50:22:
         57:1c:87:e7:08:b8:03:9d:e9:db:ea:5e:33:4b:8e:6b:a3:02:
         7c:96:6b:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5awLM/T8v61IICXBDuTZrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNjBhZTNjM2QzMjNkYTM5NGE2Y2UwNWY2YjIzZDdjZjRk
ZDEzNDgwHhcNMjUwNjI5MDIwMTI3WhcNMjUwNjMwMDIwMTI3WjAzMTEwLwYDVQQD
Eyg4MzAzMmNkNGU0MTIxODZkNjVlMTcwZTYyM2QzZDc3MzIxMjUzMDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxrhrjLnWq9bHnASP8OiDGO3bM88
/5oiPziXzqrRLMlFxKuaavC+iO35Qz6qFY5bu3HQCu02CqLsFph1cv0z++V+Snvp
dwCwuqGSAsVitqWHsarHTZZauLrcWKfGX9NWS27d0kgm+AJIpJ69SbRieXWWmjzr
hEy0E4K9aGMO7wQ9hfI3K6/HIxxQ+wYxu24xJ6lX55nymcq4ySMi6f2/m/lxbxez
GH2yf0L0pkEGEr5BT7doj6UAk5QciuuniiVhjJLak76gdo6HegtICYuw766GgmXx
FYXXqvBdg1LQ3muMTFYh7FWuJeyajBNg/jTjjKt9rm/s432YRBDlEcdjaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMDLNTkEhhtZeFw5iPT13MhJTBHMB8GA1UdIwQY
MBaAFL1grjw9Mj2jlKbOBfayPXz03RNIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdldDdVBEMHlQYU9VcHM0RjlySTlmUFRkRTBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82ZmM1Y2YtOTk4Yi00ZTNkLTlkZmEt
MWMzODY0YTdjMmRlLzEvdldDdVBEMHlQYU9VcHM0RjlySTlmUFRkRTBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82ZmM1Y2YtOTk4Yi00ZTNkLTlkZmEtMWMzODY0YTdjMmRl
LzEvdldDdVBEMHlQYU9VcHM0RjlySTlmUFRkRTBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9UBjyn9
1FqpHzsjq5f4xRCbbzGdQGtehIvpWwxcWLdJalOVobSIzpTGTikeiypu705/WDPI
uAml948Q1CpNIpn/53YqCL3VNoyIFw8Rklr42/Egz/Di+ydDb6tg4Tva0x5w+MJB
/sJ7tZ+YlkM62N8BSASa5KstvIDrJVd7V1eoMfrP5Shk8WOOHgDnv0VQuOBSb6EZ
JEo/Mfc0+YdkP903ZmNdEkr9uOCAUwiWNOdMH4sU5xMDBhZ6fLALZ3oy65tjPs1i
lz/JHO4nSPx9MviCNblRskQ9Ask3sjFWTrcWTFFR9cjJ9FAiVxyH5wi4A53p2+pe
M0uOa6MCfJZrCw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:24:18 2025 by rpki-client