Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft
File:                     6YMf0OexWxfgoKfcz8q7Bj18R8o.mft (raw, json)
Hash identifier:          0JeAq+Sr8dxFr3YIt7Xo9v3KYWNMlzviA1L8Qcqfz74=
Subject key identifier:   32:5F:9C:90:CB:50:8B:33:2A:D6:5F:17:C7:58:80:6F:97:B0:D1:F2
Authority key identifier: E9:83:1F:D0:E7:B1:5B:17:E0:A0:A7:DC:CF:CA:BB:06:3D:7C:47:CA
Certificate issuer:       /CN=e9831fd0e7b15b17e0a0a7dccfcabb063d7c47ca
Certificate serial:       0198477814A06A8A860C120CAE4B07DA4A77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6YMf0OexWxfgoKfcz8q7Bj18R8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft
Manifest number:          03E1
Signing time:             Sat 26 Jul 2025 16:01:48 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:48 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:48 +0000
Files and hashes:         1: 6YMf0OexWxfgoKfcz8q7Bj18R8o.crl (hash: By0z/d3nMLZh0i10seh56c4exOfc1n5aFcpKzT52k2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6YMf0OexWxfgoKfcz8q7Bj18R8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:78:14:a0:6a:8a:86:0c:12:0c:ae:4b:07:da:4a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9831fd0e7b15b17e0a0a7dccfcabb063d7c47ca
        Validity
            Not Before: Jul 26 16:01:48 2025 GMT
            Not After : Jul 27 16:01:48 2025 GMT
        Subject: CN=325f9c90cb508b332ad65f17c758806f97b0d1f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:12:bf:5e:81:68:9f:25:6f:2b:96:eb:de:7f:
                    43:23:5d:ad:6a:7f:ec:c5:80:dc:7d:55:2b:8e:98:
                    e8:90:f1:a5:ae:70:c1:de:e5:8c:cb:dc:a0:12:02:
                    79:10:77:3d:3f:4e:50:22:bd:60:12:dd:a3:ce:df:
                    4b:a1:61:62:c6:42:45:12:50:18:9c:c3:59:0f:a4:
                    5b:55:b6:28:51:08:6d:5a:41:22:f1:1c:9d:ae:c1:
                    dd:8a:b2:9e:bf:1a:2b:7b:70:a2:f0:9e:81:cd:41:
                    20:81:e7:ad:7d:29:6c:49:2f:68:c1:92:5b:02:2d:
                    23:93:0e:6f:7a:27:a3:e1:6c:8f:ca:9e:98:4e:fe:
                    6d:85:e1:0b:0a:21:9d:9f:5e:08:ad:d9:a2:33:ec:
                    7c:08:d1:31:11:89:8b:9c:70:11:1e:67:09:d7:a5:
                    49:ca:3d:b6:1b:52:18:49:30:c9:11:fd:35:76:d9:
                    58:2c:ce:cd:ac:6c:78:59:ec:9e:4d:ff:1a:44:28:
                    3d:be:c3:33:f4:18:c0:54:e7:ed:96:96:1d:5c:34:
                    53:36:8f:92:94:f8:2f:3c:f7:85:63:8a:c3:6e:59:
                    2b:04:4c:30:86:a7:89:96:08:76:0e:4e:1b:cc:2c:
                    99:c8:a9:a2:a3:dd:7f:ac:cb:f2:2b:30:18:7c:f1:
                    34:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5F:9C:90:CB:50:8B:33:2A:D6:5F:17:C7:58:80:6F:97:B0:D1:F2
            X509v3 Authority Key Identifier:
                keyid:E9:83:1F:D0:E7:B1:5B:17:E0:A0:A7:DC:CF:CA:BB:06:3D:7C:47:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6YMf0OexWxfgoKfcz8q7Bj18R8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:bd:b5:d7:66:1b:37:92:c9:fe:4c:a1:f1:4c:6f:88:1b:26:
         17:c3:98:76:e3:e6:3f:ec:96:f7:54:91:42:06:eb:d6:8a:13:
         17:16:a9:50:bb:4c:db:b8:73:bc:f3:75:2d:3c:55:4a:09:c9:
         54:4f:db:9b:39:8e:7e:fe:d4:50:38:0c:be:90:5b:f3:6a:30:
         b5:2c:89:93:7b:7e:87:8b:8e:53:45:da:55:16:2d:f3:2b:4c:
         57:68:9c:6a:6c:39:81:a8:ac:0e:b6:05:10:7f:dc:e7:52:0f:
         22:e4:91:73:3f:96:1c:b4:25:7e:24:a4:89:1b:3d:0c:11:03:
         d2:a3:b0:5f:24:01:b0:c9:20:5a:41:5c:ad:c1:82:31:42:3a:
         03:8c:d9:63:61:75:af:46:2f:5f:63:52:24:bc:44:5a:48:45:
         de:11:6f:ee:f2:e1:9a:f3:50:1f:2a:c3:2f:7e:c7:80:74:0a:
         2d:52:6c:e5:05:1a:5d:f5:74:91:bd:ca:6a:ff:48:fa:cc:98:
         3c:da:6a:47:98:c5:a5:82:ff:56:46:da:91:4f:43:e4:75:48:
         ef:d6:cf:9a:32:c6:dd:36:dc:a9:dc:d0:8c:3a:2e:67:87:b7:
         d0:dc:28:6f:8f:e0:9a:62:95:80:e8:a8:cb:84:7d:fe:3c:d5:
         1a:81:74:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHeBSgaoqGDBIMrksH2kp3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ODMxZmQwZTdiMTViMTdlMGEwYTdkY2NmY2FiYjA2M2Q3
YzQ3Y2EwHhcNMjUwNzI2MTYwMTQ4WhcNMjUwNzI3MTYwMTQ4WjAzMTEwLwYDVQQD
EygzMjVmOWM5MGNiNTA4YjMzMmFkNjVmMTdjNzU4ODA2Zjk3YjBkMWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhK/XoFonyVvK5br3n9DI12tan/s
xYDcfVUrjpjokPGlrnDB3uWMy9ygEgJ5EHc9P05QIr1gEt2jzt9LoWFixkJFElAY
nMNZD6RbVbYoUQhtWkEi8RydrsHdirKevxore3Ci8J6BzUEggeetfSlsSS9owZJb
Ai0jkw5veiej4WyPyp6YTv5theELCiGdn14IrdmiM+x8CNExEYmLnHARHmcJ16VJ
yj22G1IYSTDJEf01dtlYLM7NrGx4WeyeTf8aRCg9vsMz9BjAVOftlpYdXDRTNo+S
lPgvPPeFY4rDblkrBEwwhqeJlgh2Dk4bzCyZyKmio91/rMvyKzAYfPE0jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJfnJDLUIszKtZfF8dYgG+XsNHyMB8GA1UdIwQY
MBaAFOmDH9DnsVsX4KCn3M/KuwY9fEfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNllNZjBPZXhXeGZnb0tmY3o4cTdCajE4UjhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi85NGZkOGEtM2I2NS00YWY3LTg4NWQt
MDE0N2UxM2E5OTNlLzEvNllNZjBPZXhXeGZnb0tmY3o4cTdCajE4UjhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi85NGZkOGEtM2I2NS00YWY3LTg4NWQtMDE0N2UxM2E5OTNl
LzEvNllNZjBPZXhXeGZnb0tmY3o4cTdCajE4UjhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK72112Yb
N5LJ/kyh8UxviBsmF8OYduPmP+yW91SRQgbr1ooTFxapULtM27hzvPN1LTxVSgnJ
VE/bmzmOfv7UUDgMvpBb82owtSyJk3t+h4uOU0XaVRYt8ytMV2icamw5gaisDrYF
EH/c51IPIuSRcz+WHLQlfiSkiRs9DBED0qOwXyQBsMkgWkFcrcGCMUI6A4zZY2F1
r0YvX2NSJLxEWkhF3hFv7vLhmvNQHyrDL37HgHQKLVJs5QUaXfV0kb3Kav9I+syY
PNpqR5jFpYL/VkbakU9D5HVI79bPmjLG3TbcqdzQjDouZ4e30Nwob4/gmmKVgOio
y4R9/jzVGoF0Qw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:56:40 2025 by rpki-client