Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft
File:                     IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft (raw, json)
Hash identifier:          hp2TvFJxUj6yj4mteRkpmPEjfe+sH9391URCSuhLgEA=
Subject key identifier:   31:67:BB:46:D1:A6:EA:C8:63:5B:D1:3B:8A:16:ED:F6:4A:E9:E2:83
Authority key identifier: 22:F5:53:FE:F5:C1:85:9D:95:23:00:AD:3E:FB:51:1E:58:AF:DA:01
Certificate issuer:       /CN=22f553fef5c1859d952300ad3efb511e58afda01
Certificate serial:       0197B7457371715413F93E53A63DD30C2CBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IvVT_vXBhZ2VIwCtPvtRHliv2gE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft
Manifest number:          15B0
Signing time:             Sat 28 Jun 2025 16:01:11 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:11 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:11 +0000
Files and hashes:         1: IvVT_vXBhZ2VIwCtPvtRHliv2gE.crl (hash: vT3DWJTCbl1Ahqi6JDfXQf886QhVJrEBS2IzTDwUfd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IvVT_vXBhZ2VIwCtPvtRHliv2gE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:73:71:71:54:13:f9:3e:53:a6:3d:d3:0c:2c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f553fef5c1859d952300ad3efb511e58afda01
        Validity
            Not Before: Jun 28 16:01:11 2025 GMT
            Not After : Jun 29 16:01:11 2025 GMT
        Subject: CN=3167bb46d1a6eac8635bd13b8a16edf64ae9e283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:75:7f:c9:cb:91:fa:94:fc:51:f5:18:3b:c9:
                    f3:3c:b0:8f:3b:1c:f6:95:71:da:2e:ee:e0:8e:34:
                    3d:84:3b:e4:44:61:a9:46:a4:0a:15:be:c9:5a:f2:
                    35:df:9f:f1:ba:cb:9a:09:3e:03:fc:1a:77:c7:2b:
                    1b:35:78:49:72:10:91:1f:e7:b8:c2:87:25:8c:99:
                    22:fc:78:2e:33:21:f1:bd:2f:5b:a7:ee:52:5e:80:
                    45:62:f0:41:27:6f:9a:68:df:c8:59:9f:ae:45:00:
                    32:63:89:5b:0c:f5:5b:46:73:9a:b3:ca:16:de:e3:
                    3b:08:31:09:73:e3:e2:3f:51:25:89:5b:26:ce:8a:
                    02:cc:58:0f:ff:60:f4:d5:ca:f6:1f:ec:2f:57:36:
                    fc:f1:03:4f:46:04:34:7d:5e:dd:cb:55:74:43:3d:
                    61:18:ea:2b:a9:81:aa:63:44:d7:75:3e:68:72:d9:
                    05:18:91:3e:a7:53:d9:f1:ea:d5:87:d7:bc:9c:bf:
                    4f:03:35:51:95:a0:3d:86:8d:96:52:ca:2b:63:82:
                    18:98:45:bc:8f:70:87:97:e2:e9:e0:f4:d4:60:1b:
                    f4:a0:69:21:d4:df:90:c1:d1:81:a5:fd:92:7a:2f:
                    da:9b:3d:72:52:eb:2a:c0:4b:20:f5:32:3b:79:47:
                    1c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:67:BB:46:D1:A6:EA:C8:63:5B:D1:3B:8A:16:ED:F6:4A:E9:E2:83
            X509v3 Authority Key Identifier:
                keyid:22:F5:53:FE:F5:C1:85:9D:95:23:00:AD:3E:FB:51:1E:58:AF:DA:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvVT_vXBhZ2VIwCtPvtRHliv2gE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:3a:94:ac:82:31:f7:84:3f:e0:90:88:d4:6c:c6:bc:21:7b:
         ce:cb:76:1f:eb:2b:9a:bb:e5:1a:51:ba:ec:df:96:d9:bb:17:
         cf:cb:7f:ea:ad:52:b0:13:f0:4a:d1:ce:2a:7d:53:e4:3b:29:
         f3:cd:8b:30:e4:f7:aa:5a:d3:fe:b1:79:7e:95:94:52:0e:1a:
         bb:ab:2c:8c:bc:2c:65:23:26:08:13:2d:78:26:3f:29:b0:29:
         c9:6e:34:5f:f3:d9:64:8a:11:06:fd:aa:35:0f:00:c8:d7:a0:
         67:b4:3a:4b:2a:21:2c:0b:6f:ce:42:58:d3:28:c4:d4:cd:9a:
         a1:db:de:ee:7e:af:d1:66:6f:1a:e4:a2:49:5c:9b:f5:90:d6:
         bd:2d:82:fe:15:66:88:fa:31:74:5d:0a:35:75:6b:10:3a:40:
         75:86:b9:7a:f0:36:e8:c1:5c:dc:51:11:fe:3e:25:8f:c2:71:
         aa:97:42:88:bb:f2:12:e6:23:59:cf:37:6c:fb:9b:d0:04:77:
         08:4b:d2:37:2d:ba:ff:ac:ab:a8:1e:15:e3:90:66:20:44:f4:
         f8:57:d7:5c:fe:e0:46:71:37:25:dc:49:7f:0a:39:bd:9f:e1:
         9d:df:70:76:bc:56:e5:94:81:8b:b5:4c:85:a1:a3:b6:e8:a2:
         d1:25:6b:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RXNxcVQT+T5Tpj3TDCy6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjU1M2ZlZjVjMTg1OWQ5NTIzMDBhZDNlZmI1MTFlNThh
ZmRhMDEwHhcNMjUwNjI4MTYwMTExWhcNMjUwNjI5MTYwMTExWjAzMTEwLwYDVQQD
EygzMTY3YmI0NmQxYTZlYWM4NjM1YmQxM2I4YTE2ZWRmNjRhZTllMjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3V/ycuR+pT8UfUYO8nzPLCPOxz2
lXHaLu7gjjQ9hDvkRGGpRqQKFb7JWvI135/xusuaCT4D/Bp3xysbNXhJchCRH+e4
wocljJki/HguMyHxvS9bp+5SXoBFYvBBJ2+aaN/IWZ+uRQAyY4lbDPVbRnOas8oW
3uM7CDEJc+PiP1EliVsmzooCzFgP/2D01cr2H+wvVzb88QNPRgQ0fV7dy1V0Qz1h
GOorqYGqY0TXdT5octkFGJE+p1PZ8erVh9e8nL9PAzVRlaA9ho2WUsorY4IYmEW8
j3CHl+Lp4PTUYBv0oGkh1N+QwdGBpf2Sei/amz1yUusqwEsg9TI7eUccdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFnu0bRpurIY1vRO4oW7fZK6eKDMB8GA1UdIwQY
MBaAFCL1U/71wYWdlSMArT77UR5Yr9oBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZWVF92WEJoWjJWSXdDdFB2dFJIbGl2MmdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jNTAyYmEtZDg0My00YmZkLTk4OWQt
NjZkOWU4NjFiNDc4LzEvSXZWVF92WEJoWjJWSXdDdFB2dFJIbGl2MmdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9jNTAyYmEtZDg0My00YmZkLTk4OWQtNjZkOWU4NjFiNDc4
LzEvSXZWVF92WEJoWjJWSXdDdFB2dFJIbGl2MmdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzqUrIIx
94Q/4JCI1GzGvCF7zst2H+srmrvlGlG67N+W2bsXz8t/6q1SsBPwStHOKn1T5Dsp
882LMOT3qlrT/rF5fpWUUg4au6ssjLwsZSMmCBMteCY/KbApyW40X/PZZIoRBv2q
NQ8AyNegZ7Q6SyohLAtvzkJY0yjE1M2aodve7n6v0WZvGuSiSVyb9ZDWvS2C/hVm
iPoxdF0KNXVrEDpAdYa5evA26MFc3FER/j4lj8JxqpdCiLvyEuYjWc83bPub0AR3
CEvSNy26/6yrqB4V45BmIET0+FfXXP7gRnE3JdxJfwo5vZ/hnd9wdrxW5ZSBi7VM
haGjtuii0SVrpg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:49 2025 by rpki-client