Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft
File:                     adA-sSuz_i5OlkUcnMPvjunTtfU.mft (raw, json)
Hash identifier:          7KhlR+7i1CDjm4ujBqhYivaqCPzLw2KTRNPcKjULuS8=
Subject key identifier:   7C:82:C8:5C:41:85:23:06:63:8B:02:5F:75:28:E8:98:95:2C:95:C7
Authority key identifier: 69:D0:3E:B1:2B:B3:FE:2E:4E:96:45:1C:9C:C3:EF:8E:E9:D3:B5:F5
Certificate issuer:       /CN=69d03eb12bb3fe2e4e96451c9cc3ef8ee9d3b5f5
Certificate serial:       0197B6A18FC539B1991FE3BF4338B2CDCEB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adA-sSuz_i5OlkUcnMPvjunTtfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft
Manifest number:          1245
Signing time:             Sat 28 Jun 2025 13:02:10 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:10 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:10 +0000
Files and hashes:         1: adA-sSuz_i5OlkUcnMPvjunTtfU.crl (hash: pVBixhe7AXM6WcPyEe3UVwomXnMY/OiEJc19qCVK3zU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adA-sSuz_i5OlkUcnMPvjunTtfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:8f:c5:39:b1:99:1f:e3:bf:43:38:b2:cd:ce:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d03eb12bb3fe2e4e96451c9cc3ef8ee9d3b5f5
        Validity
            Not Before: Jun 28 13:02:10 2025 GMT
            Not After : Jun 29 13:02:10 2025 GMT
        Subject: CN=7c82c85c41852306638b025f7528e898952c95c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:72:ad:fc:31:d1:ae:00:b3:ea:2f:00:3d:66:
                    4e:e1:a9:1b:e9:16:45:0f:3c:8d:ac:17:b3:f8:c7:
                    35:dd:f1:6b:79:b4:9d:43:cf:37:bb:6c:19:81:da:
                    23:60:6c:b4:9f:15:15:aa:a4:1b:cf:81:be:55:9b:
                    3e:d4:fc:51:9f:56:dc:65:67:e0:08:7f:b3:63:13:
                    0e:c4:3e:12:c0:a1:dc:ba:98:7e:16:e6:9c:e6:f2:
                    81:a7:b4:74:64:46:d9:77:62:d8:b1:17:19:ca:60:
                    af:df:08:c2:0e:ed:c7:d4:e2:af:65:b1:1e:54:c4:
                    4f:82:1f:bd:09:f3:18:31:b4:51:43:99:36:3d:b8:
                    64:ad:c5:60:30:ae:70:52:d2:d8:e8:b5:b9:e0:c9:
                    f2:07:56:cc:8d:a8:44:04:57:af:b7:09:5a:5b:0a:
                    ce:2b:63:43:67:dd:97:5c:a3:36:dc:a5:b9:79:15:
                    68:f8:4a:30:d2:fe:1e:b5:f5:5a:5a:78:6c:7e:e6:
                    9d:5f:eb:5a:01:1f:cc:c9:7d:5a:9e:6f:c0:7d:43:
                    aa:44:3b:c5:ba:fb:0d:b8:fa:55:59:d3:18:8d:02:
                    d2:13:cc:5b:d3:fb:25:b0:c5:fe:86:9e:35:61:76:
                    87:4b:39:39:a2:1a:87:e6:9e:b1:88:0a:08:7e:64:
                    2e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:82:C8:5C:41:85:23:06:63:8B:02:5F:75:28:E8:98:95:2C:95:C7
            X509v3 Authority Key Identifier:
                keyid:69:D0:3E:B1:2B:B3:FE:2E:4E:96:45:1C:9C:C3:EF:8E:E9:D3:B5:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adA-sSuz_i5OlkUcnMPvjunTtfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:81:d0:08:6d:5f:06:94:02:a6:10:66:0a:f2:e8:92:68:dd:
         32:9a:b8:c6:cd:52:24:f3:bf:c6:b0:a2:73:31:b5:2f:0c:be:
         a2:0a:3f:cf:26:13:c7:28:e2:80:06:fb:14:ce:16:46:db:75:
         a5:4b:91:9d:9a:b8:ac:71:3f:32:4c:ae:01:29:83:fc:09:36:
         d5:cc:61:da:0b:61:ff:85:1c:e8:3e:d2:cd:7d:58:7c:c9:be:
         72:61:85:8a:24:1b:7a:24:bc:55:11:f8:e8:eb:77:77:bc:e0:
         86:e5:dc:37:77:2f:e5:22:16:04:b6:1a:42:42:4f:a5:9b:8f:
         ab:b1:2e:f0:77:41:a3:67:99:d8:a2:e4:14:e5:56:50:8d:9a:
         59:98:43:37:dc:c9:79:a0:74:5c:43:1f:6d:53:54:4c:16:a9:
         a4:5c:a8:46:05:dc:bd:82:5d:27:43:ef:e4:bd:7f:28:6a:7a:
         9f:9a:86:de:d8:ea:d7:de:dc:a3:b0:4f:49:43:4e:23:4e:f0:
         2e:35:3f:55:f5:56:4a:75:cc:9f:8b:57:f5:07:55:57:69:8d:
         fe:c5:90:8b:a5:58:29:da:68:5b:21:ac:ca:4e:91:87:57:b5:
         b7:27:9b:75:5b:ec:d7:2f:e3:db:1d:9c:00:99:45:e9:03:24:
         24:3d:fc:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oY/FObGZH+O/Qziyzc62MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZDAzZWIxMmJiM2ZlMmU0ZTk2NDUxYzljYzNlZjhlZTlk
M2I1ZjUwHhcNMjUwNjI4MTMwMjEwWhcNMjUwNjI5MTMwMjEwWjAzMTEwLwYDVQQD
Eyg3YzgyYzg1YzQxODUyMzA2NjM4YjAyNWY3NTI4ZTg5ODk1MmM5NWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXKt/DHRrgCz6i8APWZO4akb6RZF
DzyNrBez+Mc13fFrebSdQ883u2wZgdojYGy0nxUVqqQbz4G+VZs+1PxRn1bcZWfg
CH+zYxMOxD4SwKHcuph+Fuac5vKBp7R0ZEbZd2LYsRcZymCv3wjCDu3H1OKvZbEe
VMRPgh+9CfMYMbRRQ5k2PbhkrcVgMK5wUtLY6LW54MnyB1bMjahEBFevtwlaWwrO
K2NDZ92XXKM23KW5eRVo+Eow0v4etfVaWnhsfuadX+taAR/MyX1anm/AfUOqRDvF
uvsNuPpVWdMYjQLSE8xb0/slsMX+hp41YXaHSzk5ohqH5p6xiAoIfmQu8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyCyFxBhSMGY4sCX3Uo6JiVLJXHMB8GA1UdIwQY
MBaAFGnQPrErs/4uTpZFHJzD747p07X1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWRBLXNTdXpfaTVPbGtVY25NUHZqdW5UdGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84MjliYzYtZWUxYy00NWEzLWJjZGQt
MDU3Y2VlMDVlMGUzLzEvYWRBLXNTdXpfaTVPbGtVY25NUHZqdW5UdGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy84MjliYzYtZWUxYy00NWEzLWJjZGQtMDU3Y2VlMDVlMGUz
LzEvYWRBLXNTdXpfaTVPbGtVY25NUHZqdW5UdGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAooHQCG1f
BpQCphBmCvLokmjdMpq4xs1SJPO/xrCiczG1Lwy+ogo/zyYTxyjigAb7FM4WRtt1
pUuRnZq4rHE/MkyuASmD/Ak21cxh2gth/4Uc6D7SzX1YfMm+cmGFiiQbeiS8VRH4
6Ot3d7zghuXcN3cv5SIWBLYaQkJPpZuPq7Eu8HdBo2eZ2KLkFOVWUI2aWZhDN9zJ
eaB0XEMfbVNUTBappFyoRgXcvYJdJ0Pv5L1/KGp6n5qG3tjq197co7BPSUNOI07w
LjU/VfVWSnXMn4tX9QdVV2mN/sWQi6VYKdpoWyGsyk6Rh1e1tyebdVvs1y/j2x2c
AJlF6QMkJD38VA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:08 2025 by rpki-client