Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
File:                     6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft (raw, json)
Hash identifier:          w1yci/m0uNiB1+iao0ml/q/xJ6AcRr6OR5zsnRsZKXE=
Subject key identifier:   A8:F4:86:A1:11:4F:8E:DC:A4:1C:AA:D6:8D:2F:C2:37:4C:FE:13:85
Authority key identifier: E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34
Certificate issuer:       /CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34
Certificate serial:       019748FA30C731274E82CAEF96DDE221F322
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
Manifest number:          0FF2
Signing time:             Sat 07 Jun 2025 06:00:45 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:45 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:45 +0000
Files and hashes:         1: 6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl (hash: dqjQyAq2yrA/+EUpraufJRUmZDK2p535/9OLmG57XQU=)
                          2: syj71zZ8MwWTuavJrSv9ey-GiNY.roa (hash: OwP0pURWBASyJxlo+FTFHbY+Smo6gzpAgQ+Dz8xZ608=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:30:c7:31:27:4e:82:ca:ef:96:dd:e2:21:f3:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34
        Validity
            Not Before: Jun  7 06:00:45 2025 GMT
            Not After : Jun  8 06:00:45 2025 GMT
        Subject: CN=a8f486a1114f8edca41caad68d2fc2374cfe1385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f4:fb:aa:e3:ed:46:2f:e5:44:1a:71:8b:6c:
                    d2:38:ca:1c:39:c7:24:95:4b:27:a8:3b:e5:0a:e8:
                    1e:78:04:08:aa:82:9d:01:f2:93:d0:40:35:fc:14:
                    96:39:69:45:0f:a9:e9:aa:65:b4:8c:df:65:9f:bd:
                    19:9d:44:69:5a:15:63:4e:2e:4f:3e:1b:38:41:c3:
                    c4:aa:73:f3:24:bf:59:95:0a:77:5a:7e:38:f0:cf:
                    f7:23:ef:96:9f:75:da:b9:e0:ba:01:ec:34:ff:2c:
                    9b:75:6e:c4:20:12:0e:45:54:3a:85:a0:4c:ab:71:
                    4a:35:5c:b1:1e:00:84:5d:a1:1f:cb:7c:f3:f2:cc:
                    b2:15:70:5c:08:3d:4f:31:f5:0a:bd:c1:86:eb:b0:
                    1e:39:aa:89:51:28:51:19:e1:11:da:15:27:d1:2e:
                    9e:80:c1:c5:a8:d8:7f:8c:1b:08:df:63:a3:5f:94:
                    66:ed:16:82:87:09:62:49:4f:80:61:c5:e7:a9:be:
                    6d:c7:d7:a9:8d:90:1c:9e:ff:a2:2b:45:af:fd:92:
                    01:a5:74:ed:b2:fe:12:46:50:a1:e2:fd:3e:97:08:
                    79:9d:94:3c:6d:51:a4:73:8f:47:91:a2:fa:2a:3a:
                    1c:a6:21:d0:a3:12:df:e3:04:44:0e:7e:e0:39:9e:
                    76:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F4:86:A1:11:4F:8E:DC:A4:1C:AA:D6:8D:2F:C2:37:4C:FE:13:85
            X509v3 Authority Key Identifier:
                keyid:E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:60:44:9a:94:b5:92:b0:94:28:0a:cd:b1:3c:f3:c0:35:07:
         07:3a:f9:cb:03:d1:61:fa:4a:78:f3:81:e6:6d:2d:0b:68:43:
         73:8b:da:83:da:02:3f:da:ce:d9:3c:11:16:f3:e9:b2:12:27:
         78:a7:81:77:9e:73:95:c3:cc:7e:6d:15:f5:7a:85:eb:64:8c:
         1f:40:ee:3c:1b:b8:02:7e:ae:1b:84:b7:21:67:a2:6b:58:2e:
         6d:8a:00:db:66:4c:88:75:75:a3:17:f2:73:28:1d:8e:05:8b:
         6e:80:98:40:ba:c8:9b:7a:53:e9:f5:46:67:ee:48:df:b4:a2:
         2f:18:d7:8d:ac:c8:3c:df:ae:ee:f1:3d:d1:f4:e8:37:5e:fd:
         79:78:b8:2c:99:8e:74:08:95:84:78:c3:05:6a:46:8f:fb:d3:
         eb:e2:2e:4e:a7:9d:df:1e:42:f3:c8:64:65:58:ad:fe:17:97:
         50:41:a2:f3:9f:7b:2e:6e:ed:ba:79:15:4b:89:39:f7:9c:21:
         66:9c:5d:12:ca:e2:2c:9b:e7:1c:52:5c:aa:91:0a:96:bd:dd:
         f4:e6:d3:0a:df:1e:37:80:4e:64:cf:50:40:0a:78:3e:99:56:
         c2:9a:92:7d:16:65:60:6a:6c:75:14:bf:8e:27:07:dc:48:10:
         53:3f:c2:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+jDHMSdOgsrvlt3iIfMiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDE4Nzk4NGZhYWVmZjhmYTFkMGQ0OGFlZDdjMGNmZDgw
MGRlMzQwHhcNMjUwNjA3MDYwMDQ1WhcNMjUwNjA4MDYwMDQ1WjAzMTEwLwYDVQQD
EyhhOGY0ODZhMTExNGY4ZWRjYTQxY2FhZDY4ZDJmYzIzNzRjZmUxMzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPT7quPtRi/lRBpxi2zSOMocOcck
lUsnqDvlCugeeAQIqoKdAfKT0EA1/BSWOWlFD6npqmW0jN9ln70ZnURpWhVjTi5P
Phs4QcPEqnPzJL9ZlQp3Wn448M/3I++Wn3XaueC6Aew0/yybdW7EIBIORVQ6haBM
q3FKNVyxHgCEXaEfy3zz8syyFXBcCD1PMfUKvcGG67AeOaqJUShRGeER2hUn0S6e
gMHFqNh/jBsI32OjX5Rm7RaChwliSU+AYcXnqb5tx9epjZAcnv+iK0Wv/ZIBpXTt
sv4SRlCh4v0+lwh5nZQ8bVGkc49HkaL6KjocpiHQoxLf4wREDn7gOZ52HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKj0hqERT47cpByq1o0vwjdM/hOFMB8GA1UdIwQY
MBaAFOhBh5hPqu/4+h0NSK7XwM/YAN40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVHSG1FLXE3X2o2SFExSXJ0ZkF6OWdBM2pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81ZGYyMzEtMjY4NC00ZjEzLWFiNmYt
ZWEzMDJhZDE4YWQ2LzEvNkVHSG1FLXE3X2o2SFExSXJ0ZkF6OWdBM2pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS81ZGYyMzEtMjY4NC00ZjEzLWFiNmYtZWEzMDJhZDE4YWQ2
LzEvNkVHSG1FLXE3X2o2SFExSXJ0ZkF6OWdBM2pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2BEmpS1
krCUKArNsTzzwDUHBzr5ywPRYfpKePOB5m0tC2hDc4vag9oCP9rO2TwRFvPpshIn
eKeBd55zlcPMfm0V9XqF62SMH0DuPBu4An6uG4S3IWeia1gubYoA22ZMiHV1oxfy
cygdjgWLboCYQLrIm3pT6fVGZ+5I37SiLxjXjazIPN+u7vE90fToN179eXi4LJmO
dAiVhHjDBWpGj/vT6+IuTqed3x5C88hkZVit/heXUEGi8597Lm7tunkVS4k595wh
ZpxdEsriLJvnHFJcqpEKlr3d9ObTCt8eN4BOZM9QQAp4PplWwpqSfRZlYGpsdRS/
jicH3EgQUz/C6g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:27:17 2025 by rpki-client