Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
File:                     SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft (raw, json)
Hash identifier:          Wn3YLzSZ1mRUCysbZeS97Quy/2i5qH+2kBj/Ii/kiVg=
Subject key identifier:   50:CC:0F:D0:34:65:CA:FB:81:B8:47:36:41:13:F9:B1:77:DD:7E:90
Authority key identifier: 4A:A2:FA:6F:67:70:F7:2D:80:84:BC:6C:18:30:58:B8:0E:83:8D:73
Certificate issuer:       /CN=4aa2fa6f6770f72d8084bc6c183058b80e838d73
Certificate serial:       019747B0F2CC3805EC3B3031A44B5C5014EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
Manifest number:          015A
Signing time:             Sat 07 Jun 2025 00:01:08 +0000
Manifest this update:     Sat 07 Jun 2025 00:01:08 +0000
Manifest next update:     Sun 08 Jun 2025 00:01:08 +0000
Files and hashes:         1: SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl (hash: jYvPJEIZPnveHoSCuSkw89vC9DP60QfVosdyxOFNG1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:b0:f2:cc:38:05:ec:3b:30:31:a4:4b:5c:50:14:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aa2fa6f6770f72d8084bc6c183058b80e838d73
        Validity
            Not Before: Jun  7 00:01:08 2025 GMT
            Not After : Jun  8 00:01:08 2025 GMT
        Subject: CN=50cc0fd03465cafb81b847364113f9b177dd7e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:74:e0:e3:1f:78:eb:05:2e:98:46:5a:70:f3:
                    2a:19:7c:36:0c:aa:28:48:ae:17:97:eb:f6:19:c0:
                    49:7e:27:9e:90:41:12:17:d5:2d:ca:29:ea:da:5b:
                    02:84:43:50:5b:b9:ea:e7:31:f9:4e:d7:08:ce:86:
                    2b:a1:5c:52:71:ea:02:49:d2:31:d7:2b:ab:c3:fa:
                    57:fb:04:e1:3b:f0:c8:c2:d3:ba:7c:5a:3d:64:77:
                    7e:85:90:f6:a6:c2:79:9e:ca:f9:60:be:45:46:74:
                    e7:69:55:ed:74:e1:40:21:e4:2d:f2:83:2a:99:ea:
                    2e:99:12:e7:ba:8e:b8:07:d7:8e:4d:34:73:96:1c:
                    70:59:6f:da:83:f3:c2:79:41:44:bb:69:4a:0f:93:
                    45:87:41:6e:c5:e9:f3:5b:ec:05:29:19:7f:9c:50:
                    d3:bd:fc:06:77:73:e1:65:4e:a1:b7:ff:11:2e:4f:
                    78:80:32:8a:98:2e:0b:4b:7f:c8:ca:e3:01:57:76:
                    a6:05:ec:af:37:10:1b:7a:29:cd:fe:6f:17:7f:9d:
                    81:42:db:56:89:8f:ac:8b:33:7d:ff:95:5b:d8:d1:
                    e9:b4:91:17:59:74:5d:d3:c9:05:64:33:70:6d:5f:
                    09:42:23:e4:d9:f8:b6:04:6e:e7:49:1e:be:52:7b:
                    88:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CC:0F:D0:34:65:CA:FB:81:B8:47:36:41:13:F9:B1:77:DD:7E:90
            X509v3 Authority Key Identifier:
                keyid:4A:A2:FA:6F:67:70:F7:2D:80:84:BC:6C:18:30:58:B8:0E:83:8D:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e0:22:f8:2f:a3:8c:de:1f:1f:bd:e3:7c:96:99:9e:47:99:
         17:25:17:d5:5a:ee:a5:7e:89:51:10:f7:37:37:07:d4:ff:28:
         2e:d9:d2:73:42:61:ed:13:73:6d:fd:b6:b0:70:a0:9b:26:e0:
         ee:57:dd:c4:93:a2:18:b1:56:e3:34:6f:14:61:49:4f:bf:17:
         58:eb:33:0d:f2:76:30:4c:d8:64:84:16:e5:4f:e4:b4:f6:95:
         0a:37:5e:c0:04:03:a3:71:a8:a4:a3:09:cc:4d:b2:05:1a:da:
         f6:ce:90:01:78:6e:f7:83:23:e3:39:f5:54:b2:d5:81:b9:33:
         75:60:a7:3d:32:c5:5e:78:ea:f1:0b:38:92:c0:6e:5f:14:d4:
         f5:bc:39:79:44:58:f4:07:74:79:3a:40:e7:5b:e6:9c:9d:19:
         ef:39:94:44:d3:b9:a2:37:6b:b9:fd:7c:ac:a7:54:e7:b0:e5:
         c6:33:b9:a3:34:1d:d3:8b:db:5d:91:0d:1e:fa:08:8e:f0:21:
         b7:a0:3f:fe:61:1d:29:04:af:4b:2e:74:dc:f4:3f:35:36:e3:
         0e:eb:60:82:35:89:6f:b1:4e:f2:ec:bb:91:45:12:86:22:99:
         4a:4d:d6:25:e6:27:22:95:32:1e:5c:0c:9f:dd:22:88:37:71:
         d0:63:fd:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHsPLMOAXsOzAxpEtcUBTrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYTJmYTZmNjc3MGY3MmQ4MDg0YmM2YzE4MzA1OGI4MGU4
MzhkNzMwHhcNMjUwNjA3MDAwMTA4WhcNMjUwNjA4MDAwMTA4WjAzMTEwLwYDVQQD
Eyg1MGNjMGZkMDM0NjVjYWZiODFiODQ3MzY0MTEzZjliMTc3ZGQ3ZTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnTg4x946wUumEZacPMqGXw2DKoo
SK4Xl+v2GcBJfieekEESF9Utyinq2lsChENQW7nq5zH5TtcIzoYroVxSceoCSdIx
1yurw/pX+wThO/DIwtO6fFo9ZHd+hZD2psJ5nsr5YL5FRnTnaVXtdOFAIeQt8oMq
meoumRLnuo64B9eOTTRzlhxwWW/ag/PCeUFEu2lKD5NFh0FuxenzW+wFKRl/nFDT
vfwGd3PhZU6ht/8RLk94gDKKmC4LS3/IyuMBV3amBeyvNxAbeinN/m8Xf52BQttW
iY+sizN9/5Vb2NHptJEXWXRd08kFZDNwbV8JQiPk2fi2BG7nSR6+UnuIDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDMD9A0Zcr7gbhHNkET+bF33X6QMB8GA1UdIwQY
MBaAFEqi+m9ncPctgIS8bBgwWLgOg41zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3FMNmIyZHc5eTJBaEx4c0dEQll1QTZEalhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yOTdiZDgtYmVhZi00NjA5LTljNjAt
NzQ3NGY5MTZkYjQ3LzEvU3FMNmIyZHc5eTJBaEx4c0dEQll1QTZEalhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yOTdiZDgtYmVhZi00NjA5LTljNjAtNzQ3NGY5MTZkYjQ3
LzEvU3FMNmIyZHc5eTJBaEx4c0dEQll1QTZEalhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbeAi+C+j
jN4fH73jfJaZnkeZFyUX1VrupX6JURD3NzcH1P8oLtnSc0Jh7RNzbf22sHCgmybg
7lfdxJOiGLFW4zRvFGFJT78XWOszDfJ2MEzYZIQW5U/ktPaVCjdewAQDo3GopKMJ
zE2yBRra9s6QAXhu94Mj4zn1VLLVgbkzdWCnPTLFXnjq8Qs4ksBuXxTU9bw5eURY
9Ad0eTpA51vmnJ0Z7zmURNO5ojdruf18rKdU57DlxjO5ozQd04vbXZENHvoIjvAh
t6A//mEdKQSvSy503PQ/NTbjDutggjWJb7FO8uy7kUUShiKZSk3WJeYnIpUyHlwM
n90iiDdx0GP9Mw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:53:06 2025 by rpki-client