Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
File:                     enUOttEsV-pkMLnwI5XK8qgb7Pg.mft (raw, json)
Hash identifier:          YKht5pHG13dgz6bFuOxyoTZvWP9CVpuavrNPFwTkOJM=
Subject key identifier:   E5:53:EC:5B:77:3B:AB:DA:39:6A:44:F5:16:DE:3F:62:F5:9D:7A:76
Authority key identifier: 7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8
Certificate issuer:       /CN=7a750eb6d12c57ea6430b9f02395caf2a81becf8
Certificate serial:       0197B70EEEA66B2D6714652C3502458FF831
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
Manifest number:          15B3
Signing time:             Sat 28 Jun 2025 15:01:38 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:38 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:38 +0000
Files and hashes:         1: enUOttEsV-pkMLnwI5XK8qgb7Pg.crl (hash: CycYtAzukbyvEIomYukDOa0RGH3mnAaI9LH2YF4jLh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:ee:a6:6b:2d:67:14:65:2c:35:02:45:8f:f8:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a750eb6d12c57ea6430b9f02395caf2a81becf8
        Validity
            Not Before: Jun 28 15:01:38 2025 GMT
            Not After : Jun 29 15:01:38 2025 GMT
        Subject: CN=e553ec5b773babda396a44f516de3f62f59d7a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a0:3e:f1:d8:6b:58:64:39:8f:f2:f6:cf:8e:
                    69:12:7f:6c:04:bf:ec:5c:dc:fe:30:f0:fc:b8:f6:
                    d5:31:e3:3a:31:8b:fa:fd:fb:1e:57:c4:21:a2:99:
                    b9:ed:b3:52:a1:95:70:40:92:ff:34:e8:a3:a5:b6:
                    0a:5d:a6:f6:8e:0a:5c:a1:b9:a0:01:c9:9d:02:c9:
                    8b:36:50:96:c0:54:0d:20:1b:1f:0d:78:37:71:4d:
                    6c:2b:a7:82:3b:5b:0e:64:fa:51:b8:63:ae:b0:1c:
                    5d:af:b6:fd:b9:52:29:ef:e8:82:3b:0f:08:d2:f9:
                    87:67:9d:f5:88:f6:87:d4:67:aa:40:14:ed:cb:02:
                    d8:bd:06:e8:c7:04:9f:0b:df:f7:b3:73:aa:36:27:
                    4b:e1:c8:55:05:ee:46:3e:b0:b2:82:dc:41:b1:a1:
                    2a:de:d9:4d:b5:57:4d:b4:97:94:7b:d2:45:39:95:
                    d6:f7:53:e7:c1:00:ab:d5:9b:94:41:3a:45:a8:bc:
                    38:5f:9c:37:0c:7b:f2:7d:4b:12:ef:af:6f:37:d4:
                    3b:37:f2:ab:62:47:6c:c8:1b:71:20:1a:c7:eb:ce:
                    2e:e9:0b:0a:af:0b:62:3a:af:fc:d1:c6:75:2f:93:
                    30:7c:f7:f0:2d:b8:e3:ec:21:d5:b9:0a:e7:38:28:
                    2e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:53:EC:5B:77:3B:AB:DA:39:6A:44:F5:16:DE:3F:62:F5:9D:7A:76
            X509v3 Authority Key Identifier:
                keyid:7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c8:7f:dc:26:bf:7b:41:45:13:1e:07:a8:b4:1d:09:fc:12:
         73:e4:bf:7a:8e:22:46:72:73:48:1c:87:14:11:fb:56:52:3e:
         d7:34:89:4b:c2:40:08:fe:31:96:e4:ef:37:e5:17:fd:2e:db:
         eb:e4:08:29:bf:47:09:8e:b5:f1:4e:a8:3d:c8:a0:38:e1:04:
         bc:28:3f:10:4e:4d:a1:e6:ab:e4:90:d9:ec:0c:b9:f7:e6:93:
         85:96:53:c2:b5:4f:4d:53:73:24:e8:9f:35:ba:5d:9f:4b:f6:
         97:43:16:2d:36:13:8e:b2:15:af:16:04:23:89:da:53:c7:28:
         2b:a0:b1:e3:72:c8:07:05:42:ec:e9:6b:11:ea:53:0d:99:ec:
         44:3e:3a:de:5b:c3:f8:d8:1f:99:49:e3:bf:be:83:24:5c:a2:
         86:c1:3e:b0:a5:9c:96:ad:99:e3:f7:97:c6:20:0b:51:52:86:
         c4:f8:4c:d4:90:d8:35:dd:ce:b3:9f:5a:d5:3a:6f:52:9c:bf:
         7c:4d:69:ea:f2:e7:e1:a5:03:52:e3:08:86:fe:a6:79:13:38:
         23:a1:af:14:eb:81:e9:8f:ab:84:b2:8f:9d:ad:dd:68:a3:b6:
         f3:a1:f8:0e:6c:7c:cc:5f:ea:42:f7:ae:1b:c5:72:e3:3e:53:
         18:cb:a0:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Du6may1nFGUsNQJFj/gxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNzUwZWI2ZDEyYzU3ZWE2NDMwYjlmMDIzOTVjYWYyYTgx
YmVjZjgwHhcNMjUwNjI4MTUwMTM4WhcNMjUwNjI5MTUwMTM4WjAzMTEwLwYDVQQD
EyhlNTUzZWM1Yjc3M2JhYmRhMzk2YTQ0ZjUxNmRlM2Y2MmY1OWQ3YTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqA+8dhrWGQ5j/L2z45pEn9sBL/s
XNz+MPD8uPbVMeM6MYv6/fseV8Qhopm57bNSoZVwQJL/NOijpbYKXab2jgpcobmg
AcmdAsmLNlCWwFQNIBsfDXg3cU1sK6eCO1sOZPpRuGOusBxdr7b9uVIp7+iCOw8I
0vmHZ531iPaH1GeqQBTtywLYvQboxwSfC9/3s3OqNidL4chVBe5GPrCygtxBsaEq
3tlNtVdNtJeUe9JFOZXW91PnwQCr1ZuUQTpFqLw4X5w3DHvyfUsS769vN9Q7N/Kr
YkdsyBtxIBrH684u6QsKrwtiOq/80cZ1L5MwfPfwLbjj7CHVuQrnOCguWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVT7Ft3O6vaOWpE9RbeP2L1nXp2MB8GA1UdIwQY
MBaAFHp1DrbRLFfqZDC58COVyvKoG+z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW5VT3R0RXNWLXBrTUxud0k1WEs4cWdiN1BnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85OGRjNmYtYmU1Ni00YzhkLWI5NGUt
NTcyMjc5ODJhMDAwLzEvZW5VT3R0RXNWLXBrTUxud0k1WEs4cWdiN1BnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi85OGRjNmYtYmU1Ni00YzhkLWI5NGUtNTcyMjc5ODJhMDAw
LzEvZW5VT3R0RXNWLXBrTUxud0k1WEs4cWdiN1BnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKch/3Ca/
e0FFEx4HqLQdCfwSc+S/eo4iRnJzSByHFBH7VlI+1zSJS8JACP4xluTvN+UX/S7b
6+QIKb9HCY618U6oPcigOOEEvCg/EE5Noear5JDZ7Ay59+aThZZTwrVPTVNzJOif
Nbpdn0v2l0MWLTYTjrIVrxYEI4naU8coK6Cx43LIBwVC7OlrEepTDZnsRD463lvD
+NgfmUnjv76DJFyihsE+sKWclq2Z4/eXxiALUVKGxPhM1JDYNd3Os59a1TpvUpy/
fE1p6vLn4aUDUuMIhv6meRM4I6GvFOuB6Y+rhLKPna3daKO286H4Dmx8zF/qQveu
G8Vy4z5TGMugnA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:31 2025 by rpki-client