Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft
File:                     6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft (raw, json)
Hash identifier:          87p+CegAezxw+tx7Pv+SOQe98RX+tczdbrn1osrb98I=
Subject key identifier:   BB:03:6F:4F:AE:31:03:D6:26:F9:EB:98:26:77:08:92:17:77:E6:92
Authority key identifier: E8:96:4E:4E:8F:FE:31:F6:92:F7:13:18:C2:B7:28:20:28:D0:F3:A4
Certificate issuer:       /CN=e8964e4e8ffe31f692f71318c2b7282028d0f3a4
Certificate serial:       019746D48CC61CF9AA8ED0E87A455EEBF3CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft
Manifest number:          1082
Signing time:             Fri 06 Jun 2025 20:00:24 +0000
Manifest this update:     Fri 06 Jun 2025 20:00:24 +0000
Manifest next update:     Sat 07 Jun 2025 20:00:24 +0000
Files and hashes:         1: 6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl (hash: 2WYmj19rb07lzDxFUqn1hJNfh389yXFtMDn9nbvlayk=)
                          2: zzkHgU3pPK_renmca_tjyEqX_S4.roa (hash: ANmTP8T5HJ5lr31OcBilkarY0aetBNgPCtaIRztJMUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:d4:8c:c6:1c:f9:aa:8e:d0:e8:7a:45:5e:eb:f3:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8964e4e8ffe31f692f71318c2b7282028d0f3a4
        Validity
            Not Before: Jun  6 20:00:24 2025 GMT
            Not After : Jun  7 20:00:24 2025 GMT
        Subject: CN=bb036f4fae3103d626f9eb98267708921777e692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ab:b2:32:47:81:e5:86:b7:d4:c4:6f:52:19:
                    9c:7f:24:d6:aa:06:46:05:5c:e9:16:c0:1a:69:de:
                    3a:31:2e:b2:9a:30:57:d4:e6:8c:0f:63:ad:6f:cf:
                    35:c3:50:93:b2:be:30:f3:31:3c:24:c8:80:ec:25:
                    fc:d6:f5:3b:2f:3d:9a:4a:8e:52:7e:b0:86:ed:27:
                    17:64:f4:2b:60:15:d1:76:cf:87:36:f0:8c:95:97:
                    6e:b1:24:d7:b7:28:20:f7:c6:4c:1f:3f:61:93:e8:
                    d0:3e:cd:ac:bf:52:e9:bc:ce:59:39:89:76:1b:ac:
                    99:a1:3b:e2:fd:cf:c8:1c:e2:36:63:68:5e:83:36:
                    22:99:4b:8a:9f:eb:a9:28:ba:ee:f9:64:6d:40:b1:
                    07:f8:a7:dd:14:1a:54:d2:6e:41:c1:1f:dc:9c:c0:
                    ec:72:84:c9:95:a8:cf:cb:88:88:79:ee:ab:b1:68:
                    5c:5e:a0:d4:28:34:69:37:04:68:f2:ed:f9:14:b0:
                    1d:82:d0:b2:db:5a:aa:34:ee:fc:a7:25:d2:29:30:
                    88:45:49:90:90:d9:05:a9:7b:0d:fa:c7:5b:2b:26:
                    ee:dc:37:bf:c1:27:81:75:e6:39:b2:78:bb:5f:12:
                    be:46:73:db:96:54:c9:a2:6e:2a:e2:da:33:29:c6:
                    bd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:03:6F:4F:AE:31:03:D6:26:F9:EB:98:26:77:08:92:17:77:E6:92
            X509v3 Authority Key Identifier:
                keyid:E8:96:4E:4E:8F:FE:31:F6:92:F7:13:18:C2:B7:28:20:28:D0:F3:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:5a:59:52:68:ab:ae:63:44:73:d6:be:d4:6b:c2:56:5b:58:
         f5:2e:f2:b2:7a:41:42:22:e5:f4:e1:fc:e2:87:bf:14:e8:19:
         88:48:71:0c:b9:3b:4f:6e:ed:c3:81:91:b7:87:ac:1c:83:29:
         b3:a2:2c:7f:21:a5:3f:9b:3d:36:6e:45:69:9b:98:35:63:27:
         96:de:37:26:7d:42:1e:c3:e4:32:3a:bf:ae:1a:da:c6:ad:6b:
         5b:0f:79:d2:e5:f8:09:d1:ec:3d:b4:4b:00:a2:fb:2f:b5:8e:
         a0:6b:bb:81:1f:09:bf:05:d5:02:14:47:66:f3:59:9b:6a:7a:
         ad:bd:b7:a3:2b:14:9c:7f:2a:d2:dd:bc:26:d4:d7:d2:d6:89:
         24:07:3b:2d:50:1f:c3:5a:fb:ec:0d:f9:2c:20:de:60:cc:8c:
         39:e6:67:9f:64:ec:01:2e:6a:42:52:3c:dd:44:e8:6c:3d:61:
         03:27:b2:d2:fa:88:2d:07:dc:81:c9:d8:c7:31:eb:9b:e7:b0:
         2b:70:96:6f:d0:8f:7d:0a:c8:65:05:91:96:5e:26:5e:75:10:
         af:7b:28:34:52:57:e9:16:b7:45:01:70:50:be:7f:a2:28:4e:
         e4:4a:2d:35:eb:93:4c:cc:23:e1:63:91:69:26:5e:8d:20:a9:
         41:ad:b2:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdG1IzGHPmqjtDoekVe6/PKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4OTY0ZTRlOGZmZTMxZjY5MmY3MTMxOGMyYjcyODIwMjhk
MGYzYTQwHhcNMjUwNjA2MjAwMDI0WhcNMjUwNjA3MjAwMDI0WjAzMTEwLwYDVQQD
EyhiYjAzNmY0ZmFlMzEwM2Q2MjZmOWViOTgyNjc3MDg5MjE3NzdlNjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKuyMkeB5Ya31MRvUhmcfyTWqgZG
BVzpFsAaad46MS6ymjBX1OaMD2Otb881w1CTsr4w8zE8JMiA7CX81vU7Lz2aSo5S
frCG7ScXZPQrYBXRds+HNvCMlZdusSTXtygg98ZMHz9hk+jQPs2sv1LpvM5ZOYl2
G6yZoTvi/c/IHOI2Y2hegzYimUuKn+upKLru+WRtQLEH+KfdFBpU0m5BwR/cnMDs
coTJlajPy4iIee6rsWhcXqDUKDRpNwRo8u35FLAdgtCy21qqNO78pyXSKTCIRUmQ
kNkFqXsN+sdbKybu3De/wSeBdeY5sni7XxK+RnPbllTJom4q4tozKca9gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsDb0+uMQPWJvnrmCZ3CJIXd+aSMB8GA1UdIwQY
MBaAFOiWTk6P/jH2kvcTGMK3KCAo0POkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkpaT1RvXy1NZmFTOXhNWXdyY29JQ2pRODZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8xMzFhNzctYzhjOC00YmI3LTlhZWUt
NWE2NjU2NTVlYjU3LzEvNkpaT1RvXy1NZmFTOXhNWXdyY29JQ2pRODZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8xMzFhNzctYzhjOC00YmI3LTlhZWUtNWE2NjU2NTVlYjU3
LzEvNkpaT1RvXy1NZmFTOXhNWXdyY29JQ2pRODZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFpZUmir
rmNEc9a+1GvCVltY9S7ysnpBQiLl9OH84oe/FOgZiEhxDLk7T27tw4GRt4esHIMp
s6IsfyGlP5s9Nm5FaZuYNWMnlt43Jn1CHsPkMjq/rhraxq1rWw950uX4CdHsPbRL
AKL7L7WOoGu7gR8JvwXVAhRHZvNZm2p6rb23oysUnH8q0t28JtTX0taJJAc7LVAf
w1r77A35LCDeYMyMOeZnn2TsAS5qQlI83UTobD1hAyey0vqILQfcgcnYxzHrm+ew
K3CWb9CPfQrIZQWRll4mXnUQr3soNFJX6Ra3RQFwUL5/oihO5EotNeuTTMwj4WOR
aSZejSCpQa2y+g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 02:36:51 2025 by rpki-client