Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
File:                     CuenjWwPepgBOXu51SmocVlcgEc.mft (raw, json)
Hash identifier:          VNdkP5P9TmuzcTtJw/7OVP1WpFFm9jDhib+BPfkYUwY=
Subject key identifier:   5E:34:9F:6B:70:62:FF:B2:FA:F1:CC:39:F8:B5:B0:E4:40:7B:4C:86
Authority key identifier: 0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47
Certificate issuer:       /CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047
Certificate serial:       0197B70EFB99ED426FE4595F10639A18F00B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
Manifest number:          073A
Signing time:             Sat 28 Jun 2025 15:01:41 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:41 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:41 +0000
Files and hashes:         1: CuenjWwPepgBOXu51SmocVlcgEc.crl (hash: wQoZ2kkSxqSDWfT72zeJ6AIGi8J5saFHnu5TLOM517Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:fb:99:ed:42:6f:e4:59:5f:10:63:9a:18:f0:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047
        Validity
            Not Before: Jun 28 15:01:41 2025 GMT
            Not After : Jun 29 15:01:41 2025 GMT
        Subject: CN=5e349f6b7062ffb2faf1cc39f8b5b0e4407b4c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:12:2c:79:38:31:96:92:79:f5:a2:39:27:60:
                    9d:4e:8b:a3:69:cd:34:c0:b2:08:9a:5d:d5:99:c3:
                    98:69:a7:25:55:d0:25:58:0f:58:82:65:eb:dc:d1:
                    93:30:da:d7:e8:11:60:a1:c4:e2:76:63:e8:6a:2c:
                    74:79:bf:0a:68:af:fe:d0:11:91:9a:87:90:f5:9f:
                    3c:89:f5:87:aa:a3:77:af:6d:ce:60:f0:66:d0:e5:
                    a1:c3:75:07:0f:d6:38:ec:6c:c8:4a:6f:7b:15:aa:
                    57:33:b5:10:00:29:8e:1b:d1:65:18:bf:ce:41:de:
                    fc:29:37:41:9a:db:9b:e8:28:3d:6f:d0:32:98:82:
                    01:27:6e:62:67:eb:09:24:79:a0:10:2f:9c:70:56:
                    fc:8b:53:c7:cc:ec:3d:65:cb:27:f5:57:8d:09:cf:
                    c4:74:b9:47:24:73:22:82:df:12:57:f3:ad:e4:29:
                    b5:50:61:2a:41:a3:6c:33:f6:d7:1f:2e:a0:51:7b:
                    47:94:d6:5f:83:99:d5:5b:69:6b:64:6b:f8:43:e2:
                    99:13:10:11:da:9d:35:23:bc:f4:ec:10:d1:cd:82:
                    60:47:a8:b9:e8:9e:6d:bc:c5:34:55:59:ab:85:d0:
                    e6:71:e7:80:57:10:e6:8e:82:14:54:7b:8d:69:33:
                    05:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:34:9F:6B:70:62:FF:B2:FA:F1:CC:39:F8:B5:B0:E4:40:7B:4C:86
            X509v3 Authority Key Identifier:
                keyid:0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:37:43:33:67:50:4a:df:1c:9b:cf:4e:b0:d6:5f:25:e4:7a:
         d5:92:0a:c9:58:83:2d:bc:2f:dd:e9:cd:9e:56:b6:03:b7:9d:
         c3:0c:3f:63:48:18:ab:76:5d:f5:5f:4c:08:61:df:ab:50:f6:
         2d:78:a9:16:10:6c:4b:5d:c1:5b:d1:93:cb:15:aa:3f:46:80:
         d8:40:c6:8d:d4:af:ec:7f:c3:f2:72:51:8a:5a:27:81:22:39:
         62:3c:55:e2:58:f1:26:05:9f:7c:cd:c3:cb:b2:b3:0a:98:f9:
         fc:3c:62:01:36:6c:35:77:6a:92:e2:bc:19:2a:2d:65:85:90:
         f0:a1:6f:78:54:f3:b9:e8:de:bd:53:bf:b6:50:51:e3:2a:c7:
         69:e3:95:09:7c:65:3e:82:13:bf:e1:e5:1e:e9:04:a7:6a:0c:
         03:d4:bf:b1:7d:d8:9e:73:04:b7:0f:f9:21:10:61:8b:ba:fe:
         fe:f4:32:be:75:c8:30:3f:dd:ef:0a:2d:6b:f9:0d:32:b0:40:
         99:7f:5b:ab:e7:80:7f:7c:16:e9:da:3e:a8:d6:70:d3:78:5d:
         1e:e7:76:16:23:44:ab:48:75:37:45:fe:f5:9a:f1:4b:f8:c4:
         75:af:ec:3d:5a:47:6d:76:57:f4:2f:14:31:82:7f:45:2e:fa:
         58:38:61:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DvuZ7UJv5FlfEGOaGPALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZTdhNzhkNmMwZjdhOTgwMTM5N2JiOWQ1MjlhODcxNTk1
YzgwNDcwHhcNMjUwNjI4MTUwMTQxWhcNMjUwNjI5MTUwMTQxWjAzMTEwLwYDVQQD
Eyg1ZTM0OWY2YjcwNjJmZmIyZmFmMWNjMzlmOGI1YjBlNDQwN2I0Yzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRIseTgxlpJ59aI5J2CdToujac00
wLIIml3VmcOYaaclVdAlWA9YgmXr3NGTMNrX6BFgocTidmPoaix0eb8KaK/+0BGR
moeQ9Z88ifWHqqN3r23OYPBm0OWhw3UHD9Y47GzISm97FapXM7UQACmOG9FlGL/O
Qd78KTdBmtub6Cg9b9AymIIBJ25iZ+sJJHmgEC+ccFb8i1PHzOw9Zcsn9VeNCc/E
dLlHJHMigt8SV/Ot5Cm1UGEqQaNsM/bXHy6gUXtHlNZfg5nVW2lrZGv4Q+KZExAR
2p01I7z07BDRzYJgR6i56J5tvMU0VVmrhdDmceeAVxDmjoIUVHuNaTMFVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF40n2twYv+y+vHMOfi1sORAe0yGMB8GA1UdIwQY
MBaAFArnp41sD3qYATl7udUpqHFZXIBHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3VlbmpXd1BlcGdCT1h1NTFTbW9jVmxjZ0VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85Yzc2OTUtOTBlMi00ODI1LTlkODUt
YWMwZjk1ZDhlZjIwLzEvQ3VlbmpXd1BlcGdCT1h1NTFTbW9jVmxjZ0VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy85Yzc2OTUtOTBlMi00ODI1LTlkODUtYWMwZjk1ZDhlZjIw
LzEvQ3VlbmpXd1BlcGdCT1h1NTFTbW9jVmxjZ0VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDdDM2dQ
St8cm89OsNZfJeR61ZIKyViDLbwv3enNnla2A7edwww/Y0gYq3Zd9V9MCGHfq1D2
LXipFhBsS13BW9GTyxWqP0aA2EDGjdSv7H/D8nJRilongSI5YjxV4ljxJgWffM3D
y7KzCpj5/DxiATZsNXdqkuK8GSotZYWQ8KFveFTzuejevVO/tlBR4yrHaeOVCXxl
PoITv+HlHukEp2oMA9S/sX3YnnMEtw/5IRBhi7r+/vQyvnXIMD/d7wota/kNMrBA
mX9bq+eAf3wW6do+qNZw03hdHud2FiNEq0h1N0X+9ZrxS/jEda/sPVpHbXZX9C8U
MYJ/RS76WDhh9g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:32 2025 by rpki-client