Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
File:                     J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft (raw, json)
Hash identifier:          sU1TIKrfr0/ZsOX/b1LzDPm11EayoEIJ8eyMnWXo0Sc=
Subject key identifier:   6A:65:60:AE:F1:9C:62:38:F7:25:09:79:E7:A9:03:D2:1E:C9:EC:FD
Authority key identifier: 27:A1:10:45:23:84:64:9D:05:C1:E9:8F:B9:7B:49:AE:11:60:09:73
Certificate issuer:       /CN=27a110452384649d05c1e98fb97b49ae11600973
Certificate serial:       019848C067F7EA5EE1EB3D61A5B697CCEAC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J6EQRSOEZJ0FwemPuXtJrhFgCXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
Manifest number:          0E1B
Signing time:             Sat 26 Jul 2025 22:00:25 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:25 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:25 +0000
Files and hashes:         1: J6EQRSOEZJ0FwemPuXtJrhFgCXM.crl (hash: XAaKa3UEt0F3tzeLSjHP6LAg17ql2IWMv2/QSFJBpM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J6EQRSOEZJ0FwemPuXtJrhFgCXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:67:f7:ea:5e:e1:eb:3d:61:a5:b6:97:cc:ea:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a110452384649d05c1e98fb97b49ae11600973
        Validity
            Not Before: Jul 26 22:00:25 2025 GMT
            Not After : Jul 27 22:00:25 2025 GMT
        Subject: CN=6a6560aef19c6238f7250979e7a903d21ec9ecfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:80:6e:5f:fe:65:88:ea:f8:49:25:4d:c3:5f:
                    40:84:e0:ab:02:52:af:a9:ee:ec:96:bc:fd:ed:ae:
                    f4:f4:bd:a4:8c:2b:3b:97:9d:29:34:19:bd:27:c2:
                    66:95:bc:de:be:ee:88:9b:10:83:bd:78:4c:ec:ff:
                    0d:3a:14:8a:43:1f:1b:7d:5f:a6:26:f3:b7:7e:de:
                    7e:42:08:0d:b7:e0:c1:ca:11:3c:43:64:a6:c9:4b:
                    78:82:50:43:3d:6b:06:1f:0c:57:c9:50:34:f3:30:
                    10:69:88:c6:37:ae:16:59:8a:46:5b:16:a4:6a:e7:
                    60:10:f0:01:6b:ed:01:1f:51:c0:3d:77:d4:e1:8e:
                    3c:19:5d:7d:60:9b:d1:f2:66:84:04:87:59:ec:b1:
                    74:9c:6a:8e:d6:cc:2a:d0:29:d4:f6:bd:cc:1e:3c:
                    97:13:30:0e:64:28:f7:52:5f:78:54:d1:7b:0e:49:
                    82:10:2b:c0:b2:4f:39:a1:a0:34:5b:96:9f:bf:08:
                    49:85:38:39:72:36:90:4e:18:b9:b0:26:7d:b0:ef:
                    6f:3f:41:4c:18:05:92:e8:bd:39:d0:e4:f7:f5:92:
                    f8:66:d2:dc:1c:01:51:4d:c5:5f:e0:41:73:c3:37:
                    45:69:9b:b8:3d:f4:9a:e6:85:10:ba:65:ac:e1:09:
                    73:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:65:60:AE:F1:9C:62:38:F7:25:09:79:E7:A9:03:D2:1E:C9:EC:FD
            X509v3 Authority Key Identifier:
                keyid:27:A1:10:45:23:84:64:9D:05:C1:E9:8F:B9:7B:49:AE:11:60:09:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6EQRSOEZJ0FwemPuXtJrhFgCXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:7f:54:3c:bc:10:36:81:64:2f:d1:e7:4b:8f:31:02:4e:6b:
         99:9e:0f:6e:ac:fc:7f:e9:1f:fc:13:cf:c4:d9:6d:ba:aa:55:
         3c:3c:08:6b:bc:87:f0:ec:30:0e:ef:44:3e:74:e9:b8:af:85:
         bf:1e:22:93:c0:b6:21:5d:55:33:24:4f:cb:fb:5f:22:0b:76:
         5f:0b:79:f8:5e:15:28:c3:29:15:d3:a0:a5:a4:0e:ec:43:48:
         0f:49:20:bf:7d:e7:e9:61:d9:47:8a:cf:a8:78:91:fb:d7:49:
         3b:7a:c3:a9:58:a3:d3:d1:62:c3:f1:1c:34:27:a9:0f:7c:3c:
         6c:41:6c:a7:0a:2d:ba:ec:ff:59:9e:5b:b1:7f:9d:fa:b4:25:
         09:81:ec:db:3f:2b:b5:fb:27:37:ad:03:82:83:1e:2d:96:68:
         1f:bb:da:7a:e5:49:c1:8d:98:60:32:7c:6d:88:34:65:01:0c:
         a3:36:da:f8:f3:ef:82:20:73:dc:bc:44:04:a9:d5:0b:8c:b7:
         86:6a:ab:f8:46:31:07:8e:bb:d9:d4:0d:e6:45:9c:12:5d:ae:
         bf:03:5d:16:bd:c0:a4:6e:00:3d:45:67:68:57:22:59:b4:3d:
         7a:f3:fd:10:de:41:69:8e:42:f9:9c:25:01:36:82:4a:11:66:
         8c:91:47:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwGf36l7h6z1hpbaXzOrCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YTExMDQ1MjM4NDY0OWQwNWMxZTk4ZmI5N2I0OWFlMTE2
MDA5NzMwHhcNMjUwNzI2MjIwMDI1WhcNMjUwNzI3MjIwMDI1WjAzMTEwLwYDVQQD
Eyg2YTY1NjBhZWYxOWM2MjM4ZjcyNTA5NzllN2E5MDNkMjFlYzllY2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIBuX/5liOr4SSVNw19AhOCrAlKv
qe7slrz97a709L2kjCs7l50pNBm9J8Jmlbzevu6ImxCDvXhM7P8NOhSKQx8bfV+m
JvO3ft5+QggNt+DByhE8Q2SmyUt4glBDPWsGHwxXyVA08zAQaYjGN64WWYpGWxak
audgEPABa+0BH1HAPXfU4Y48GV19YJvR8maEBIdZ7LF0nGqO1swq0CnU9r3MHjyX
EzAOZCj3Ul94VNF7DkmCECvAsk85oaA0W5afvwhJhTg5cjaQThi5sCZ9sO9vP0FM
GAWS6L050OT39ZL4ZtLcHAFRTcVf4EFzwzdFaZu4PfSa5oUQumWs4QlzOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGplYK7xnGI49yUJeeepA9Ieyez9MB8GA1UdIwQY
MBaAFCehEEUjhGSdBcHpj7l7Sa4RYAlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjZFUVJTT0VaSjBGd2VtUHVYdEpyaEZnQ1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83NzBiZGQtYjNlNC00MDFhLTk0NzAt
MGVhOGNkYmM0YjA4LzEvSjZFUVJTT0VaSjBGd2VtUHVYdEpyaEZnQ1hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83NzBiZGQtYjNlNC00MDFhLTk0NzAtMGVhOGNkYmM0YjA4
LzEvSjZFUVJTT0VaSjBGd2VtUHVYdEpyaEZnQ1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQH9UPLwQ
NoFkL9HnS48xAk5rmZ4Pbqz8f+kf/BPPxNltuqpVPDwIa7yH8OwwDu9EPnTpuK+F
vx4ik8C2IV1VMyRPy/tfIgt2Xwt5+F4VKMMpFdOgpaQO7ENID0kgv33n6WHZR4rP
qHiR+9dJO3rDqVij09Fiw/EcNCepD3w8bEFspwotuuz/WZ5bsX+d+rQlCYHs2z8r
tfsnN60DgoMeLZZoH7vaeuVJwY2YYDJ8bYg0ZQEMozba+PPvgiBz3LxEBKnVC4y3
hmqr+EYxB4672dQN5kWcEl2uvwNdFr3ApG4APUVnaFciWbQ9evP9EN5BaY5C+Zwl
ATaCShFmjJFH4A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:20:19 2025 by rpki-client