Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
File:                     TE6QpGzZL4_8sZJLk7cdG60xMBI.mft (raw, json)
Hash identifier:          1vO88JWTTzapIHPmghm6/RVklx2TB913Ye+GTGRFTfA=
Subject key identifier:   6A:77:1F:8E:6F:B2:92:44:A6:2A:F9:81:D9:1E:B3:4D:C8:35:09:E3
Authority key identifier: 4C:4E:90:A4:6C:D9:2F:8F:FC:B1:92:4B:93:B7:1D:1B:AD:31:30:12
Certificate issuer:       /CN=4c4e90a46cd92f8ffcb1924b93b71d1bad313012
Certificate serial:       019749684FE0646332457715587080999D49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
Manifest number:          0D7A
Signing time:             Sat 07 Jun 2025 08:01:02 +0000
Manifest this update:     Sat 07 Jun 2025 08:01:02 +0000
Manifest next update:     Sun 08 Jun 2025 08:01:02 +0000
Files and hashes:         1: TE6QpGzZL4_8sZJLk7cdG60xMBI.crl (hash: YYJiVS/rkpSBHvuRy6Fg9pZe7xLeIVcQ0UBIH9I4cas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:68:4f:e0:64:63:32:45:77:15:58:70:80:99:9d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c4e90a46cd92f8ffcb1924b93b71d1bad313012
        Validity
            Not Before: Jun  7 08:01:02 2025 GMT
            Not After : Jun  8 08:01:02 2025 GMT
        Subject: CN=6a771f8e6fb29244a62af981d91eb34dc83509e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ae:43:c2:ac:2b:de:d9:3c:d6:a4:a8:56:9e:
                    ea:1d:32:8a:ff:bd:de:13:74:ba:6a:24:7a:24:52:
                    d9:6c:7f:1e:33:2d:cc:9d:e2:e6:02:35:05:af:1b:
                    22:83:e5:8e:fa:dc:57:c7:83:b4:bb:3e:eb:41:22:
                    22:a3:b6:9b:c7:3f:78:fe:68:56:25:c6:45:22:91:
                    7e:5a:d1:d3:e4:2d:25:ab:f2:bf:b2:a9:93:4b:26:
                    2c:cf:3c:00:c8:58:4a:a7:53:82:bd:2a:77:2f:4d:
                    38:7b:c9:6c:35:aa:41:b1:2c:96:b8:38:46:8a:d0:
                    c2:f6:f3:46:22:d3:a9:12:c2:cd:f5:8e:e5:a0:ff:
                    fc:6b:f5:8e:a1:32:b7:4b:cf:ee:17:e5:b2:1e:9b:
                    df:0d:12:5e:e6:4d:1b:cf:4e:06:55:7c:8e:0a:5f:
                    4c:7e:89:e9:2c:97:23:ab:57:89:ef:73:d5:57:ee:
                    d6:1c:eb:c6:df:29:30:42:f4:87:c2:87:3d:bf:01:
                    ee:78:a3:2f:dd:9a:49:66:54:8e:9c:9a:3d:01:cf:
                    70:36:ae:5f:8b:d1:eb:a9:3c:fe:02:05:5b:69:44:
                    df:c5:59:e0:83:c8:9c:53:8e:63:2f:d7:f4:2b:97:
                    aa:7b:9f:8a:7b:d1:1e:aa:67:98:d4:eb:44:b1:a7:
                    42:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:77:1F:8E:6F:B2:92:44:A6:2A:F9:81:D9:1E:B3:4D:C8:35:09:E3
            X509v3 Authority Key Identifier:
                keyid:4C:4E:90:A4:6C:D9:2F:8F:FC:B1:92:4B:93:B7:1D:1B:AD:31:30:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:3a:6b:e8:68:1d:82:36:21:eb:3e:0a:6d:5d:ae:ed:d7:b3:
         24:1c:23:7b:66:ca:60:1d:6c:79:1d:12:b9:54:04:8d:0f:ea:
         29:b1:45:fd:cc:21:d4:0c:a6:33:6c:4d:a1:4e:59:01:1f:bf:
         12:34:6c:5f:c1:ef:58:b8:fc:be:13:bb:9e:0d:f5:9a:5e:2b:
         6f:f2:a8:b5:34:a0:41:2b:fb:1a:a0:eb:ed:a8:10:20:6c:71:
         35:b5:7a:90:b8:5c:c8:f4:6f:0d:10:51:5f:a8:0e:b0:26:35:
         d0:d9:8e:50:5f:fd:df:b6:12:94:72:10:8f:16:59:5f:5e:7d:
         05:29:05:8f:d8:64:71:8f:fb:fa:b0:98:c0:7b:af:f8:ce:f3:
         38:4d:9f:d7:f9:c7:46:a0:37:77:6a:7f:73:69:75:d2:b6:c6:
         4b:4c:5a:66:c6:63:b6:4d:9d:c5:3d:fa:00:c0:6f:0b:41:64:
         89:d8:82:22:db:39:72:52:aa:f1:51:84:a9:17:4f:4a:c8:52:
         39:69:cd:4f:bc:e0:28:0c:df:52:03:93:a6:f8:5b:37:8b:8f:
         dc:4b:99:52:b1:42:16:43:84:3d:0b:c6:0d:3b:79:3b:63:d3:
         5c:72:e4:bc:b9:9b:ee:f6:86:54:1b:32:b8:2e:06:f1:09:f3:
         92:20:7c:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaE/gZGMyRXcVWHCAmZ1JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNGU5MGE0NmNkOTJmOGZmY2IxOTI0YjkzYjcxZDFiYWQz
MTMwMTIwHhcNMjUwNjA3MDgwMTAyWhcNMjUwNjA4MDgwMTAyWjAzMTEwLwYDVQQD
Eyg2YTc3MWY4ZTZmYjI5MjQ0YTYyYWY5ODFkOTFlYjM0ZGM4MzUwOWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq5Dwqwr3tk81qSoVp7qHTKK/73e
E3S6aiR6JFLZbH8eMy3MneLmAjUFrxsig+WO+txXx4O0uz7rQSIio7abxz94/mhW
JcZFIpF+WtHT5C0lq/K/sqmTSyYszzwAyFhKp1OCvSp3L004e8lsNapBsSyWuDhG
itDC9vNGItOpEsLN9Y7loP/8a/WOoTK3S8/uF+WyHpvfDRJe5k0bz04GVXyOCl9M
fonpLJcjq1eJ73PVV+7WHOvG3ykwQvSHwoc9vwHueKMv3ZpJZlSOnJo9Ac9wNq5f
i9HrqTz+AgVbaUTfxVngg8icU45jL9f0K5eqe5+Ke9EeqmeY1OtEsadCGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGp3H45vspJEpir5gdkes03INQnjMB8GA1UdIwQY
MBaAFExOkKRs2S+P/LGSS5O3HRutMTASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEU2UXBHelpMNF84c1pKTGs3Y2RHNjB4TUJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jMjdlZWMtNzE0MS00NTc1LTlhNmYt
YzQ1NzI4YzU2ZjNiLzEvVEU2UXBHelpMNF84c1pKTGs3Y2RHNjB4TUJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9jMjdlZWMtNzE0MS00NTc1LTlhNmYtYzQ1NzI4YzU2ZjNi
LzEvVEU2UXBHelpMNF84c1pKTGs3Y2RHNjB4TUJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDpr6Ggd
gjYh6z4KbV2u7dezJBwje2bKYB1seR0SuVQEjQ/qKbFF/cwh1AymM2xNoU5ZAR+/
EjRsX8HvWLj8vhO7ng31ml4rb/KotTSgQSv7GqDr7agQIGxxNbV6kLhcyPRvDRBR
X6gOsCY10NmOUF/937YSlHIQjxZZX159BSkFj9hkcY/7+rCYwHuv+M7zOE2f1/nH
RqA3d2p/c2l10rbGS0xaZsZjtk2dxT36AMBvC0FkidiCIts5clKq8VGEqRdPSshS
OWnNT7zgKAzfUgOTpvhbN4uP3EuZUrFCFkOEPQvGDTt5O2PTXHLkvLmb7vaGVBsy
uC4G8QnzkiB80Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:58:34 2025 by rpki-client