Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
File:                     C6C-CUpak9B84Z5GvmL5_85jRYM.mft (raw, json)
Hash identifier:          Gww5cjmy8GhqQd/zKusSjbhHKTmgpv2ZL66YkF31ELM=
Subject key identifier:   2B:15:2B:DE:0C:EA:B9:42:AA:EC:5F:F0:89:B6:A0:AA:39:BA:81:95
Authority key identifier: 0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83
Certificate issuer:       /CN=0ba0be094a5a93d07ce19e46be62f9ffce634583
Certificate serial:       019848C0277A0AE0B0F9E37E29E5DDA073C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
Manifest number:          0CE0
Signing time:             Sat 26 Jul 2025 22:00:09 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:09 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:09 +0000
Files and hashes:         1: C6C-CUpak9B84Z5GvmL5_85jRYM.crl (hash: d+OuaHlP1U8k6jmv4V3TAW/fyPPJ0UwhYuzGAxZRWvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:27:7a:0a:e0:b0:f9:e3:7e:29:e5:dd:a0:73:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba0be094a5a93d07ce19e46be62f9ffce634583
        Validity
            Not Before: Jul 26 22:00:09 2025 GMT
            Not After : Jul 27 22:00:09 2025 GMT
        Subject: CN=2b152bde0ceab942aaec5ff089b6a0aa39ba8195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e0:e4:d8:f7:67:bc:bb:c3:08:49:c8:a5:fe:
                    b8:57:bb:0f:d6:9e:52:2b:b7:34:df:92:e2:fb:38:
                    00:48:82:c5:21:4f:9c:92:bc:d1:0d:01:36:27:53:
                    f2:cb:28:1e:db:dd:9a:3c:b6:b8:30:9c:63:e7:b8:
                    e8:be:2c:6a:52:41:bb:93:cc:b4:f6:8a:9f:67:1c:
                    35:43:b0:1c:68:11:e3:b5:81:3c:83:e7:83:01:89:
                    59:12:36:24:55:30:e5:b2:f3:2f:10:83:3b:67:8f:
                    72:93:dd:3a:15:d3:ad:74:71:b7:01:c4:31:56:2c:
                    0d:40:f0:5f:35:f9:38:d3:f9:f6:bb:87:10:be:71:
                    61:6b:44:54:19:0e:da:dc:5b:a5:d8:6b:30:2c:4a:
                    6f:8a:c6:e9:33:f5:a8:ba:f6:d6:68:9e:72:ac:75:
                    2f:b3:1f:6b:6a:8d:35:fb:e9:6f:63:a6:3b:80:11:
                    18:27:38:24:73:c2:ed:99:14:d5:e3:ab:09:6c:b0:
                    12:61:69:ed:b7:fb:2a:3b:1d:a2:fe:de:71:18:ef:
                    0c:82:21:70:3e:9e:c8:09:41:0a:b4:c4:85:cf:a1:
                    1a:f3:26:ff:70:52:89:36:65:1a:c3:50:c6:80:d5:
                    ff:b5:e5:cb:b4:72:9b:48:2a:f9:97:b3:36:cf:f2:
                    c1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:15:2B:DE:0C:EA:B9:42:AA:EC:5F:F0:89:B6:A0:AA:39:BA:81:95
            X509v3 Authority Key Identifier:
                keyid:0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e3:d1:b9:91:b1:41:ab:83:35:3e:e1:d6:5c:d4:b8:b2:9c:
         28:ae:5e:2b:86:a0:71:95:dd:b8:95:be:8c:47:97:ef:ae:59:
         06:29:9b:11:bd:49:ca:50:9c:b4:09:37:a0:a2:ac:bc:bc:3d:
         de:70:c3:a4:6e:22:0f:65:b0:b5:53:ae:bd:be:5e:ed:ee:91:
         2e:d7:4f:40:71:16:49:0c:fa:22:a2:67:24:e0:40:4a:aa:21:
         55:7e:49:ec:10:94:96:2a:37:01:77:87:ad:48:f2:cd:2d:f1:
         3d:51:1c:07:6e:64:a7:91:37:ff:02:8d:4d:70:ec:44:c7:f8:
         b1:ea:7b:25:99:14:d3:ee:eb:d6:b9:80:53:c6:c8:37:d3:b0:
         91:36:0f:97:ee:85:d3:4c:b0:3d:ae:c6:44:42:1d:3e:ba:2d:
         da:75:60:3d:c8:c5:b8:1e:d5:a1:9a:b3:12:12:68:d6:ea:b9:
         2b:9f:6a:30:51:43:f0:6b:04:44:1e:2b:2c:21:12:5c:74:4a:
         82:01:3d:b4:27:f0:0a:2f:72:c4:e5:1f:19:12:89:2e:5d:08:
         0f:7d:50:45:ba:d1:72:ad:40:a3:3a:49:0b:a8:bc:cc:d3:bb:
         e4:29:2b:cd:0c:a6:e3:8f:30:b9:35:4b:37:54:1a:98:ec:07:
         8e:ca:18:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwCd6CuCw+eN+KeXdoHPCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYTBiZTA5NGE1YTkzZDA3Y2UxOWU0NmJlNjJmOWZmY2U2
MzQ1ODMwHhcNMjUwNzI2MjIwMDA5WhcNMjUwNzI3MjIwMDA5WjAzMTEwLwYDVQQD
EygyYjE1MmJkZTBjZWFiOTQyYWFlYzVmZjA4OWI2YTBhYTM5YmE4MTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsODk2PdnvLvDCEnIpf64V7sP1p5S
K7c035Li+zgASILFIU+ckrzRDQE2J1Pyyyge292aPLa4MJxj57jovixqUkG7k8y0
9oqfZxw1Q7AcaBHjtYE8g+eDAYlZEjYkVTDlsvMvEIM7Z49yk906FdOtdHG3AcQx
ViwNQPBfNfk40/n2u4cQvnFha0RUGQ7a3Ful2GswLEpvisbpM/WouvbWaJ5yrHUv
sx9rao01++lvY6Y7gBEYJzgkc8LtmRTV46sJbLASYWntt/sqOx2i/t5xGO8MgiFw
Pp7ICUEKtMSFz6Ea8yb/cFKJNmUaw1DGgNX/teXLtHKbSCr5l7M2z/LBXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsVK94M6rlCquxf8Im2oKo5uoGVMB8GA1UdIwQY
MBaAFAugvglKWpPQfOGeRr5i+f/OY0WDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzZDLUNVcGFrOUI4NFo1R3ZtTDVfODVqUllNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lOTE1MmEtMWJmNi00NjA5LWI2NDEt
YmZjYWIzMmRhZmM2LzEvQzZDLUNVcGFrOUI4NFo1R3ZtTDVfODVqUllNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lOTE1MmEtMWJmNi00NjA5LWI2NDEtYmZjYWIzMmRhZmM2
LzEvQzZDLUNVcGFrOUI4NFo1R3ZtTDVfODVqUllNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOPRuZGx
QauDNT7h1lzUuLKcKK5eK4agcZXduJW+jEeX765ZBimbEb1JylCctAk3oKKsvLw9
3nDDpG4iD2WwtVOuvb5e7e6RLtdPQHEWSQz6IqJnJOBASqohVX5J7BCUlio3AXeH
rUjyzS3xPVEcB25kp5E3/wKNTXDsRMf4sep7JZkU0+7r1rmAU8bIN9OwkTYPl+6F
00ywPa7GREIdProt2nVgPcjFuB7VoZqzEhJo1uq5K59qMFFD8GsERB4rLCESXHRK
ggE9tCfwCi9yxOUfGRKJLl0ID31QRbrRcq1AozpJC6i8zNO75CkrzQym448wuTVL
N1QamOwHjsoY8A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:50:08 2025 by rpki-client