Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft
File:                     MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft (raw, json)
Hash identifier:          8/8u2cQ4dlHB+34GqBVvLSFD6nZVifN3HwSxRn9ClqY=
Subject key identifier:   6A:1C:55:44:88:2E:68:B4:16:E6:F8:B0:FE:1F:CB:52:D9:7A:E4:9D
Authority key identifier: 30:4A:A2:58:22:4F:A3:C6:7B:AD:1F:2B:9F:9B:28:A6:5D:95:FE:AE
Certificate issuer:       /CN=304aa258224fa3c67bad1f2b9f9b28a65d95feae
Certificate serial:       01975FB8B9DC7722FC8D21BF3A39BD52B973
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MEqiWCJPo8Z7rR8rn5sopl2V_q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft
Manifest number:          1584
Signing time:             Wed 11 Jun 2025 16:00:31 +0000
Manifest this update:     Wed 11 Jun 2025 16:00:31 +0000
Manifest next update:     Thu 12 Jun 2025 16:00:31 +0000
Files and hashes:         1: MEqiWCJPo8Z7rR8rn5sopl2V_q4.crl (hash: 8rIWIo2cCsfmKJKYUq4VsRwSryN6kC6GEgHSnYY7mss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MEqiWCJPo8Z7rR8rn5sopl2V_q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 15:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:b8:b9:dc:77:22:fc:8d:21:bf:3a:39:bd:52:b9:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304aa258224fa3c67bad1f2b9f9b28a65d95feae
        Validity
            Not Before: Jun 11 16:00:31 2025 GMT
            Not After : Jun 12 16:00:31 2025 GMT
        Subject: CN=6a1c5544882e68b416e6f8b0fe1fcb52d97ae49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8c:5f:18:32:7d:45:ce:da:7b:bb:b4:26:67:
                    f5:21:6d:30:89:0d:02:e1:58:c1:70:f8:94:6d:f6:
                    4a:d5:99:81:28:8a:d4:34:b3:09:51:29:0d:5d:ea:
                    9f:6e:fa:63:7e:3c:c1:34:8d:48:63:90:73:a7:16:
                    2a:0c:d4:da:36:0b:2b:27:77:23:a7:61:c2:55:8d:
                    3d:72:3a:c7:1a:af:7c:28:7f:c2:66:70:cc:9a:d0:
                    d1:70:0c:7c:bd:50:01:77:04:1c:66:e3:cd:1d:56:
                    74:71:73:cc:52:6f:88:fa:b8:c4:9a:9e:6c:2c:43:
                    d3:98:5d:b7:6d:ce:01:b9:0e:aa:2b:e8:ae:ce:1d:
                    7c:ac:18:c3:0f:e3:07:1d:9f:96:b8:df:77:0d:47:
                    09:d8:34:cb:5a:73:e7:c8:7a:14:40:25:16:dd:64:
                    42:02:9e:4d:bf:1c:73:67:b7:cc:53:93:99:6d:a5:
                    57:df:1f:92:44:e0:7f:6f:cf:29:7c:21:5d:ae:92:
                    97:da:b7:1d:ab:b7:e0:e4:6a:73:5e:5c:f0:68:76:
                    18:82:15:ab:39:93:57:8c:97:c5:a5:26:40:18:3e:
                    5b:33:1f:e4:90:e9:1f:b3:09:e6:bf:ec:07:03:84:
                    e8:05:18:a3:6a:96:a8:a6:fa:4b:5d:55:c5:ef:f7:
                    32:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1C:55:44:88:2E:68:B4:16:E6:F8:B0:FE:1F:CB:52:D9:7A:E4:9D
            X509v3 Authority Key Identifier:
                keyid:30:4A:A2:58:22:4F:A3:C6:7B:AD:1F:2B:9F:9B:28:A6:5D:95:FE:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEqiWCJPo8Z7rR8rn5sopl2V_q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:9a:9c:6e:ea:b4:be:a1:17:0c:38:bb:dd:a5:8d:d3:18:0e:
         ce:c0:ea:cf:18:fb:7a:f3:6c:0c:01:e6:ac:4b:48:0b:eb:7c:
         75:75:28:58:28:99:d9:8c:47:40:68:3d:b0:00:82:cf:45:2e:
         dd:79:79:6d:c4:12:a6:a3:3f:3f:f5:2b:7d:38:47:df:51:7e:
         8a:67:10:a7:6d:6d:d5:13:48:4b:78:cb:ee:c3:1e:cc:b3:67:
         82:ce:1b:75:d7:cd:27:41:d6:02:77:0d:60:cd:1f:1f:06:5d:
         85:96:7d:a7:fc:03:7b:57:bf:94:82:82:5d:2a:fa:b2:ea:f7:
         22:5f:3a:d1:80:ac:3f:f4:05:5e:34:e0:e0:67:c8:4d:8e:c0:
         42:c2:29:29:2d:ca:df:ec:a0:85:3a:70:e7:c4:83:19:d7:df:
         98:48:61:81:92:66:fd:8d:73:db:bb:f6:3c:cd:8d:66:83:99:
         7f:8b:63:f0:eb:52:67:c8:3a:fb:9a:d3:31:10:24:c1:00:a4:
         18:11:1b:c0:c2:09:b0:d7:4a:c2:d4:d4:c1:85:9f:d8:17:d5:
         62:cf:e8:f3:04:fc:eb:9b:ab:bb:9b:76:ce:d4:4c:09:18:40:
         11:e8:e4:3a:8c:3d:d5:ab:87:68:3b:ff:00:f7:a4:6e:be:ef:
         21:83:8b:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdfuLncdyL8jSG/Ojm9UrlzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNGFhMjU4MjI0ZmEzYzY3YmFkMWYyYjlmOWIyOGE2NWQ5
NWZlYWUwHhcNMjUwNjExMTYwMDMxWhcNMjUwNjEyMTYwMDMxWjAzMTEwLwYDVQQD
Eyg2YTFjNTU0NDg4MmU2OGI0MTZlNmY4YjBmZTFmY2I1MmQ5N2FlNDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIxfGDJ9Rc7ae7u0Jmf1IW0wiQ0C
4VjBcPiUbfZK1ZmBKIrUNLMJUSkNXeqfbvpjfjzBNI1IY5BzpxYqDNTaNgsrJ3cj
p2HCVY09cjrHGq98KH/CZnDMmtDRcAx8vVABdwQcZuPNHVZ0cXPMUm+I+rjEmp5s
LEPTmF23bc4BuQ6qK+iuzh18rBjDD+MHHZ+WuN93DUcJ2DTLWnPnyHoUQCUW3WRC
Ap5NvxxzZ7fMU5OZbaVX3x+SROB/b88pfCFdrpKX2rcdq7fg5GpzXlzwaHYYghWr
OZNXjJfFpSZAGD5bMx/kkOkfswnmv+wHA4ToBRijapaopvpLXVXF7/cyXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGocVUSILmi0Fub4sP4fy1LZeuSdMB8GA1UdIwQY
MBaAFDBKolgiT6PGe60fK5+bKKZdlf6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUVxaVdDSlBvOFo3clI4cm41c29wbDJWX3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81NWViZGMtOGYzOC00YTA3LWIwNDgt
OTNiYmIxYmEzMTZkLzEvTUVxaVdDSlBvOFo3clI4cm41c29wbDJWX3E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi81NWViZGMtOGYzOC00YTA3LWIwNDgtOTNiYmIxYmEzMTZk
LzEvTUVxaVdDSlBvOFo3clI4cm41c29wbDJWX3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpqcbuq0
vqEXDDi73aWN0xgOzsDqzxj7evNsDAHmrEtIC+t8dXUoWCiZ2YxHQGg9sACCz0Uu
3Xl5bcQSpqM/P/UrfThH31F+imcQp21t1RNIS3jL7sMezLNngs4bddfNJ0HWAncN
YM0fHwZdhZZ9p/wDe1e/lIKCXSr6sur3Il860YCsP/QFXjTg4GfITY7AQsIpKS3K
3+yghTpw58SDGdffmEhhgZJm/Y1z27v2PM2NZoOZf4tj8OtSZ8g6+5rTMRAkwQCk
GBEbwMIJsNdKwtTUwYWf2BfVYs/o8wT865uru5t2ztRMCRhAEejkOow91auHaDv/
APekbr7vIYOL8A==
-----END CERTIFICATE-----
Generated at Wed Jun 11 20:31:49 2025 by rpki-client