Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
File:                     iOr6__gbldzuV3JwV-1nEUozgZM.mft (raw, json)
Hash identifier:          Y4qncwnsTN2LrDDeskXD1vHIN+jsQZTCv6RGkwI8sZE=
Subject key identifier:   5E:7A:AF:B9:E4:DC:FE:F0:05:A2:6B:F1:24:E4:B5:42:83:63:78:D7
Authority key identifier: 88:EA:FA:FF:F8:1B:95:DC:EE:57:72:70:57:ED:67:11:4A:33:81:93
Certificate issuer:       /CN=88eafafff81b95dcee57727057ed67114a338193
Certificate serial:       01974DB28819014E670C7431F2BD78AE6275
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
Manifest number:          05A6
Signing time:             Sun 08 Jun 2025 04:00:35 +0000
Manifest this update:     Sun 08 Jun 2025 04:00:35 +0000
Manifest next update:     Mon 09 Jun 2025 04:00:35 +0000
Files and hashes:         1: iOr6__gbldzuV3JwV-1nEUozgZM.crl (hash: VVqhlD6QRlwZtNC9N92GpZrUv7vBGAj5ETY8e5D2kik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:b2:88:19:01:4e:67:0c:74:31:f2:bd:78:ae:62:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88eafafff81b95dcee57727057ed67114a338193
        Validity
            Not Before: Jun  8 04:00:35 2025 GMT
            Not After : Jun  9 04:00:35 2025 GMT
        Subject: CN=5e7aafb9e4dcfef005a26bf124e4b542836378d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:06:10:da:c2:67:14:4e:41:4a:a1:a4:32:df:
                    27:a8:a9:15:a8:49:ec:6c:3c:15:88:70:d6:d6:3e:
                    3a:83:f4:1b:0d:2a:88:5e:ed:e7:ce:81:98:4a:c3:
                    0d:a5:07:b7:78:a9:0a:00:11:27:00:32:ae:f0:2b:
                    54:d8:21:eb:8e:ac:a1:f2:1f:55:0f:b1:3e:fb:f2:
                    03:ea:67:be:bc:1d:49:d6:50:85:14:48:70:54:23:
                    a7:8b:b2:fb:4d:f1:1e:55:99:37:7d:67:ff:c5:d4:
                    5d:62:53:c7:f2:f1:59:98:76:ab:32:4e:dd:4d:41:
                    e3:3d:eb:94:9f:62:27:42:1b:e8:1d:02:56:0b:74:
                    c2:17:0e:08:41:bf:af:79:4d:05:29:3c:26:96:34:
                    f1:8d:ef:0a:83:e8:8e:c8:3f:58:a9:37:97:8d:71:
                    8e:57:f5:91:0a:72:25:3d:ea:93:77:2e:ca:c5:78:
                    ea:ed:93:4a:8d:97:42:ea:31:78:71:31:6e:22:53:
                    1e:6f:0a:2d:7c:e6:e5:7b:7b:f9:77:3b:51:46:b7:
                    6c:69:a6:8c:b4:ab:1e:61:3d:10:88:46:ea:9e:b2:
                    d0:39:49:b4:8b:30:4c:80:4a:72:e5:80:ba:e1:b6:
                    7b:05:59:43:77:34:3e:e3:64:f9:cb:68:97:53:f5:
                    e9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7A:AF:B9:E4:DC:FE:F0:05:A2:6B:F1:24:E4:B5:42:83:63:78:D7
            X509v3 Authority Key Identifier:
                keyid:88:EA:FA:FF:F8:1B:95:DC:EE:57:72:70:57:ED:67:11:4A:33:81:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:68:b0:cc:8f:29:66:89:65:7e:77:65:fc:8a:dd:3d:1d:18:
         de:02:72:81:0e:6a:1f:f9:0b:d1:46:7d:bf:93:9d:1e:8a:2a:
         e2:8e:11:af:28:cd:63:83:3a:60:27:69:85:20:95:10:90:32:
         30:76:d9:2d:50:28:34:5f:57:78:22:6a:c3:3f:e1:8c:c6:69:
         f5:e4:4f:9e:3a:a7:4b:4e:39:d9:80:7f:dd:81:e5:71:b1:1e:
         74:cc:37:6e:c5:87:bc:6a:3d:d2:dd:a9:0e:ab:bd:42:3b:40:
         d2:da:23:26:83:31:48:b1:8a:60:cf:0e:55:43:cc:ae:60:b4:
         c3:8d:72:38:58:e3:8f:3c:9b:77:05:92:32:ad:47:bc:fd:a8:
         08:d2:76:d5:52:75:95:b8:31:54:9f:18:3b:cb:a2:e9:a0:56:
         f2:d1:de:3e:da:e6:be:53:2a:d6:59:6b:b7:15:22:66:8d:a7:
         88:0a:c7:05:32:e0:8e:b2:63:02:a8:4e:ac:40:34:1e:c6:86:
         7d:a4:c1:19:44:27:44:27:c7:25:96:a3:31:4d:5b:cb:3f:a0:
         03:7a:9d:d9:0e:0e:e5:c4:44:16:ad:8e:d9:9f:39:21:83:4f:
         0d:34:18:29:a5:b2:28:52:41:b6:d9:1b:72:15:48:b7:8e:97:
         af:c1:15:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNsogZAU5nDHQx8r14rmJ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZWFmYWZmZjgxYjk1ZGNlZTU3NzI3MDU3ZWQ2NzExNGEz
MzgxOTMwHhcNMjUwNjA4MDQwMDM1WhcNMjUwNjA5MDQwMDM1WjAzMTEwLwYDVQQD
Eyg1ZTdhYWZiOWU0ZGNmZWYwMDVhMjZiZjEyNGU0YjU0MjgzNjM3OGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wYQ2sJnFE5BSqGkMt8nqKkVqEns
bDwViHDW1j46g/QbDSqIXu3nzoGYSsMNpQe3eKkKABEnADKu8CtU2CHrjqyh8h9V
D7E++/ID6me+vB1J1lCFFEhwVCOni7L7TfEeVZk3fWf/xdRdYlPH8vFZmHarMk7d
TUHjPeuUn2InQhvoHQJWC3TCFw4IQb+veU0FKTwmljTxje8Kg+iOyD9YqTeXjXGO
V/WRCnIlPeqTdy7KxXjq7ZNKjZdC6jF4cTFuIlMebwotfOble3v5dztRRrdsaaaM
tKseYT0QiEbqnrLQOUm0izBMgEpy5YC64bZ7BVlDdzQ+42T5y2iXU/XpBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF56r7nk3P7wBaJr8STktUKDY3jXMB8GA1UdIwQY
MBaAFIjq+v/4G5Xc7ldycFftZxFKM4GTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU9yNl9fZ2JsZHp1VjNKd1YtMW5FVW96Z1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9mOWVkNjQtNWNjMy00YTBkLWE3MGMt
MWEzODdhNDU2NTc5LzEvaU9yNl9fZ2JsZHp1VjNKd1YtMW5FVW96Z1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9mOWVkNjQtNWNjMy00YTBkLWE3MGMtMWEzODdhNDU2NTc5
LzEvaU9yNl9fZ2JsZHp1VjNKd1YtMW5FVW96Z1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqmiwzI8p
Zollfndl/IrdPR0Y3gJygQ5qH/kL0UZ9v5OdHooq4o4RryjNY4M6YCdphSCVEJAy
MHbZLVAoNF9XeCJqwz/hjMZp9eRPnjqnS0452YB/3YHlcbEedMw3bsWHvGo90t2p
Dqu9QjtA0tojJoMxSLGKYM8OVUPMrmC0w41yOFjjjzybdwWSMq1HvP2oCNJ21VJ1
lbgxVJ8YO8ui6aBW8tHePtrmvlMq1llrtxUiZo2niArHBTLgjrJjAqhOrEA0HsaG
faTBGUQnRCfHJZajMU1byz+gA3qd2Q4O5cREFq2O2Z85IYNPDTQYKaWyKFJBttkb
chVIt46Xr8EVNw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:26:40 2025 by rpki-client