Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
File:                     03lp9dJTIQsKvo4HoIb2CNbyoK8.mft (raw, json)
Hash identifier:          7wpFIHThJESImNgVl2Iyq/nNy6QcnMZdccSiW+jMu00=
Subject key identifier:   4D:CA:C2:8F:6B:B3:7F:1F:69:46:33:27:92:F2:1B:68:BB:69:E8:51
Authority key identifier: D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF
Certificate issuer:       /CN=d37969f5d253210b0abe8e07a086f608d6f2a0af
Certificate serial:       0197B820DDA30C5FB5580027C94CB2D1CC92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
Manifest number:          45
Signing time:             Sat 28 Jun 2025 20:00:51 +0000
Manifest this update:     Sat 28 Jun 2025 20:00:51 +0000
Manifest next update:     Sun 29 Jun 2025 20:00:51 +0000
Files and hashes:         1: 03lp9dJTIQsKvo4HoIb2CNbyoK8.crl (hash: dGhGtCSEHvS/7H3OinfnQP6XOiuRktg4/iVnksimYDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:20:dd:a3:0c:5f:b5:58:00:27:c9:4c:b2:d1:cc:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d37969f5d253210b0abe8e07a086f608d6f2a0af
        Validity
            Not Before: Jun 28 20:00:51 2025 GMT
            Not After : Jun 29 20:00:51 2025 GMT
        Subject: CN=4dcac28f6bb37f1f6946332792f21b68bb69e851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:06:d9:9e:71:0c:41:69:d5:33:24:7e:79:02:
                    07:ee:af:39:22:3c:60:cb:54:8a:7d:0a:60:da:75:
                    5f:e6:df:04:fc:2a:75:cc:a6:65:7f:be:6b:33:1c:
                    47:b1:cc:07:bf:a7:53:fd:54:15:c3:19:65:93:13:
                    4c:bb:ec:a5:8d:f5:1f:e0:05:39:7e:07:16:10:38:
                    c1:93:f1:3d:52:2a:d5:d4:ba:f9:0f:b7:ff:0d:3c:
                    ef:e6:d5:e7:dc:e1:57:af:a3:61:70:3b:e7:00:d2:
                    c3:a2:e9:53:b9:9c:cc:60:bd:1f:b9:56:97:07:16:
                    db:bd:6d:dc:34:4f:a4:6b:90:5c:99:30:08:b6:a9:
                    fd:a4:b9:c5:00:88:8e:a9:93:68:aa:1e:cf:ad:34:
                    70:00:3b:6e:97:8c:05:f5:50:0a:e4:23:b1:4c:78:
                    99:df:36:47:0e:b3:38:cd:a5:6e:a9:e2:e1:42:83:
                    73:5a:30:03:8e:13:bd:6b:62:6c:bc:13:08:02:12:
                    34:b2:ae:59:ca:61:a1:56:42:1d:e9:3b:f4:85:30:
                    6d:cc:dd:cd:2d:59:40:53:88:96:19:e8:06:2c:cf:
                    fd:43:84:5b:99:f9:7d:3e:f6:59:ef:b9:d6:4d:d9:
                    e0:cb:27:4f:e8:83:ee:72:50:9d:b5:80:e0:6c:af:
                    e2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CA:C2:8F:6B:B3:7F:1F:69:46:33:27:92:F2:1B:68:BB:69:E8:51
            X509v3 Authority Key Identifier:
                keyid:D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:2d:b8:4c:76:82:0b:b9:08:f0:77:be:c0:a5:e0:d4:5c:7f:
         1f:3c:dd:18:af:0d:af:25:6b:f6:12:f2:cb:51:e8:6f:5a:7d:
         1a:d8:17:b2:4c:0f:b2:86:83:e2:8b:49:aa:cc:5d:d1:1e:db:
         bc:7a:6a:c9:b3:75:c0:49:97:b1:53:b7:de:7a:95:e9:54:b2:
         e0:f5:16:f0:07:fe:8f:33:ed:9a:35:8e:74:11:3f:bc:c7:db:
         fa:fb:c4:af:a6:97:a4:75:1e:6c:ff:ee:ab:fb:7b:24:4b:fe:
         ea:50:00:85:aa:6d:1d:64:93:45:eb:ea:61:91:9b:6d:84:07:
         d2:98:e8:da:ea:74:27:59:c6:74:6f:c7:38:0d:c9:09:04:f5:
         35:95:6d:c9:a7:c1:35:a6:fe:11:45:46:8e:a8:11:b5:ff:d2:
         b9:23:13:62:c5:a6:4f:ac:82:36:47:e6:83:9d:9c:93:f9:9a:
         9f:5f:43:25:62:81:33:31:2d:7e:dd:2a:5f:39:05:e6:22:82:
         36:4c:2e:26:cb:48:4a:cc:23:28:d5:22:7c:e9:2a:49:d7:00:
         b4:f5:da:1c:89:f1:76:df:45:f3:b8:1a:b7:50:a9:30:2b:2e:
         0a:6d:06:c4:dc:a7:f3:e4:29:22:d2:a2:15:66:f1:bc:04:bf:
         be:6d:18:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IN2jDF+1WAAnyUyy0cySMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNzk2OWY1ZDI1MzIxMGIwYWJlOGUwN2EwODZmNjA4ZDZm
MmEwYWYwHhcNMjUwNjI4MjAwMDUxWhcNMjUwNjI5MjAwMDUxWjAzMTEwLwYDVQQD
Eyg0ZGNhYzI4ZjZiYjM3ZjFmNjk0NjMzMjc5MmYyMWI2OGJiNjllODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wbZnnEMQWnVMyR+eQIH7q85Ijxg
y1SKfQpg2nVf5t8E/Cp1zKZlf75rMxxHscwHv6dT/VQVwxllkxNMu+yljfUf4AU5
fgcWEDjBk/E9UirV1Lr5D7f/DTzv5tXn3OFXr6NhcDvnANLDoulTuZzMYL0fuVaX
BxbbvW3cNE+ka5BcmTAItqn9pLnFAIiOqZNoqh7PrTRwADtul4wF9VAK5COxTHiZ
3zZHDrM4zaVuqeLhQoNzWjADjhO9a2JsvBMIAhI0sq5ZymGhVkId6Tv0hTBtzN3N
LVlAU4iWGegGLM/9Q4Rbmfl9PvZZ77nWTdngyydP6IPuclCdtYDgbK/i+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3Kwo9rs38faUYzJ5LyG2i7aehRMB8GA1UdIwQY
MBaAFNN5afXSUyELCr6OB6CG9gjW8qCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDNscDlkSlRJUXNLdm80SG9JYjJDTmJ5b0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81MjQwYTYtY2Q2MS00ZTBjLTg4YjYt
ZjU5ZDIwZWYyN2I0LzEvMDNscDlkSlRJUXNLdm80SG9JYjJDTmJ5b0s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC81MjQwYTYtY2Q2MS00ZTBjLTg4YjYtZjU5ZDIwZWYyN2I0
LzEvMDNscDlkSlRJUXNLdm80SG9JYjJDTmJ5b0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAii24THaC
C7kI8He+wKXg1Fx/HzzdGK8NryVr9hLyy1Hob1p9GtgXskwPsoaD4otJqsxd0R7b
vHpqybN1wEmXsVO33nqV6VSy4PUW8Af+jzPtmjWOdBE/vMfb+vvEr6aXpHUebP/u
q/t7JEv+6lAAhaptHWSTRevqYZGbbYQH0pjo2up0J1nGdG/HOA3JCQT1NZVtyafB
Nab+EUVGjqgRtf/SuSMTYsWmT6yCNkfmg52ck/man19DJWKBMzEtft0qXzkF5iKC
NkwuJstISswjKNUifOkqSdcAtPXaHInxdt9F87gat1CpMCsuCm0GxNyn8+QpItKi
FWbxvAS/vm0YKw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:45 2025 by rpki-client