Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
File:                     3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft (raw, json)
Hash identifier:          hlK4tu3Af4dUzCblXpdzslpLjbZUgnEuggLVN3Fm94Y=
Subject key identifier:   87:26:EA:01:04:9E:E5:1B:51:57:C1:85:18:B0:31:9A:81:87:43:0F
Authority key identifier: DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71
Certificate issuer:       /CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
Certificate serial:       0197B6A1054D10B6A9F5BDB87C10AD4ED732
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
Manifest number:          06EF
Signing time:             Sat 28 Jun 2025 13:01:35 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:35 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:35 +0000
Files and hashes:         1: 3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl (hash: OXvwvFbc1ayHPhNOHMed6FqFljsusaxzFJtj765apg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:05:4d:10:b6:a9:f5:bd:b8:7c:10:ad:4e:d7:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
        Validity
            Not Before: Jun 28 13:01:35 2025 GMT
            Not After : Jun 29 13:01:35 2025 GMT
        Subject: CN=8726ea01049ee51b5157c18518b0319a8187430f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:28:34:29:af:39:1e:a4:9a:56:fb:e0:e7:56:
                    8c:6e:ff:d0:10:f4:49:43:9f:46:57:cd:58:d2:5c:
                    0d:d9:f7:5d:0d:6d:03:a9:55:97:8c:55:ce:8b:83:
                    db:17:54:53:cc:85:71:1d:44:94:53:42:7c:04:84:
                    23:b6:d0:51:ca:6b:89:8b:44:0b:99:50:28:4a:7d:
                    97:5b:6c:48:3c:f7:13:e2:cd:c6:48:ec:55:6a:5c:
                    cb:15:f8:8f:05:96:5f:d1:ba:0e:0e:6f:dd:88:c7:
                    b7:c4:b5:4f:a4:a1:c5:91:db:e7:9b:db:84:7c:29:
                    c7:c6:8e:76:a9:31:aa:2e:f4:8d:74:b0:c5:0a:43:
                    96:ba:b4:a5:7d:a3:65:1e:26:23:fd:92:b8:84:da:
                    36:1a:75:00:74:ed:46:fd:eb:62:f3:6a:56:0f:d5:
                    f8:02:61:54:86:be:f9:72:12:81:66:5e:c4:f8:a3:
                    f1:f0:2e:fc:9b:34:fa:4a:23:51:69:d6:5d:06:99:
                    b7:e7:b3:a5:58:e1:ad:40:06:05:58:ef:be:ab:75:
                    03:f2:fa:5b:9b:f9:bf:84:98:57:bb:a5:bc:13:2f:
                    e5:c6:7f:10:73:40:04:28:91:00:60:59:5c:53:ad:
                    51:11:f2:d7:61:c3:1f:a5:ef:e2:15:3f:35:68:6c:
                    0c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:26:EA:01:04:9E:E5:1B:51:57:C1:85:18:B0:31:9A:81:87:43:0F
            X509v3 Authority Key Identifier:
                keyid:DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:32:d1:7c:eb:31:44:b8:0b:75:62:3d:b2:46:49:5f:b5:e8:
         39:f0:1d:d9:4c:7d:d5:bf:0a:2b:5b:4d:60:3d:14:bf:76:c6:
         5b:c7:e5:8b:0d:54:6b:8f:fe:7d:b9:66:4c:fe:0f:97:89:1f:
         21:75:f1:ec:33:f2:45:57:04:99:cf:57:58:e8:c1:36:1f:74:
         e3:c2:56:9e:76:83:95:17:8d:9f:b9:85:1a:c2:18:f9:cc:51:
         e2:78:57:97:7d:9a:9a:f1:38:cd:36:a6:57:90:e2:7b:00:e8:
         eb:31:73:ee:5b:f7:af:7a:15:3b:6f:d2:aa:90:b5:5f:8b:0c:
         38:6e:28:2f:29:d0:48:f9:52:28:58:46:7d:86:c1:c7:8e:df:
         7b:f6:14:3b:62:f9:79:9a:25:70:e4:32:b9:e1:72:55:59:d3:
         37:74:c0:59:13:53:30:7a:59:f7:4f:cc:cf:71:c0:15:eb:e5:
         87:49:c5:d3:54:bc:21:79:d8:1b:cb:73:b7:a1:c2:8e:a0:28:
         73:59:66:88:2b:4d:dd:0d:a6:49:25:a0:83:a5:9b:82:19:2b:
         20:89:8b:31:53:78:41:f8:1c:57:d8:cd:47:fd:71:93:2e:24:
         5e:4c:18:2d:a7:c0:fb:60:9f:1d:8c:48:f3:23:c9:5a:3e:27:
         61:bc:5f:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oQVNELap9b24fBCtTtcyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNmMzZGQ4ZGRlZmZkOWFlNGM4NTVjNWY5NDgzODA0N2Rj
OWFkNzEwHhcNMjUwNjI4MTMwMTM1WhcNMjUwNjI5MTMwMTM1WjAzMTEwLwYDVQQD
Eyg4NzI2ZWEwMTA0OWVlNTFiNTE1N2MxODUxOGIwMzE5YTgxODc0MzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyg0Ka85HqSaVvvg51aMbv/QEPRJ
Q59GV81Y0lwN2fddDW0DqVWXjFXOi4PbF1RTzIVxHUSUU0J8BIQjttBRymuJi0QL
mVAoSn2XW2xIPPcT4s3GSOxValzLFfiPBZZf0boODm/diMe3xLVPpKHFkdvnm9uE
fCnHxo52qTGqLvSNdLDFCkOWurSlfaNlHiYj/ZK4hNo2GnUAdO1G/eti82pWD9X4
AmFUhr75chKBZl7E+KPx8C78mzT6SiNRadZdBpm357OlWOGtQAYFWO++q3UD8vpb
m/m/hJhXu6W8Ey/lxn8Qc0AEKJEAYFlcU61REfLXYcMfpe/iFT81aGwMNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcm6gEEnuUbUVfBhRiwMZqBh0MPMB8GA1UdIwQY
MBaAFN1sPdjd7/2a5MhVxflIOAR9ya1xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1d3OTJOM3ZfWnJreUZYRi1VZzRCSDNKclhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83OTM1YmItYjAxNC00MjU1LTlhMGMt
YTJiYzcyYjE1OWQ3LzEvM1d3OTJOM3ZfWnJreUZYRi1VZzRCSDNKclhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83OTM1YmItYjAxNC00MjU1LTlhMGMtYTJiYzcyYjE1OWQ3
LzEvM1d3OTJOM3ZfWnJreUZYRi1VZzRCSDNKclhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjLRfOsx
RLgLdWI9skZJX7XoOfAd2Ux91b8KK1tNYD0Uv3bGW8fliw1Ua4/+fblmTP4Pl4kf
IXXx7DPyRVcEmc9XWOjBNh9048JWnnaDlReNn7mFGsIY+cxR4nhXl32amvE4zTam
V5DiewDo6zFz7lv3r3oVO2/SqpC1X4sMOG4oLynQSPlSKFhGfYbBx47fe/YUO2L5
eZolcOQyueFyVVnTN3TAWRNTMHpZ90/Mz3HAFevlh0nF01S8IXnYG8tzt6HCjqAo
c1lmiCtN3Q2mSSWgg6WbghkrIImLMVN4QfgcV9jNR/1xky4kXkwYLafA+2CfHYxI
8yPJWj4nYbxfVQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:48 2025 by rpki-client