Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
File:                     B-jeamdMH-qtmpzNPOoi3yYXTyI.mft (raw, json)
Hash identifier:          72QvtYHagdd9Mwdf38VPUQd+VQ1JTJgnVpskvxrBcZA=
Subject key identifier:   0C:94:F1:16:EB:8D:E9:60:FF:57:BE:D7:2D:0B:B4:D8:B3:0A:25:00
Authority key identifier: 07:E8:DE:6A:67:4C:1F:EA:AD:9A:9C:CD:3C:EA:22:DF:26:17:4F:22
Certificate issuer:       /CN=07e8de6a674c1feaad9a9ccd3cea22df26174f22
Certificate serial:       019745F932BE3207C522D4B093017577D1AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
Manifest number:          1576
Signing time:             Fri 06 Jun 2025 16:00:48 +0000
Manifest this update:     Fri 06 Jun 2025 16:00:48 +0000
Manifest next update:     Sat 07 Jun 2025 16:00:48 +0000
Files and hashes:         1: B-jeamdMH-qtmpzNPOoi3yYXTyI.crl (hash: nSEziCAmdf+kKg/r5SBSWRwcI008qtdLIZlR6PzWjY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:f9:32:be:32:07:c5:22:d4:b0:93:01:75:77:d1:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07e8de6a674c1feaad9a9ccd3cea22df26174f22
        Validity
            Not Before: Jun  6 16:00:48 2025 GMT
            Not After : Jun  7 16:00:48 2025 GMT
        Subject: CN=0c94f116eb8de960ff57bed72d0bb4d8b30a2500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:39:08:f7:21:79:50:68:09:de:55:24:cd:9d:
                    8e:1e:e4:45:57:74:0e:77:17:2c:40:b8:f3:c2:a2:
                    1c:20:50:4d:cf:34:db:9c:91:e7:8c:bc:70:03:e0:
                    5d:5f:0e:39:78:06:04:05:03:9f:f8:08:92:b9:9c:
                    10:ec:79:c6:b8:cb:70:86:95:3a:e2:c1:99:fa:6c:
                    5d:5a:87:69:72:05:93:b7:2e:7b:83:9d:49:bc:c6:
                    e2:7a:89:06:15:f1:ff:c5:45:36:25:04:b9:97:b9:
                    9b:2a:ef:27:70:0a:87:b6:0e:f3:78:f9:39:d1:19:
                    b8:1a:71:48:bd:ed:3f:c9:d5:25:98:be:76:34:ed:
                    53:4b:b6:41:0a:9f:3e:48:b7:2c:92:7b:d5:0c:f6:
                    23:73:52:1c:60:81:2a:20:fd:db:86:db:1a:5e:cb:
                    ed:d5:74:25:c1:16:f2:34:ac:a1:8b:27:a8:60:8e:
                    e1:d1:ab:29:e3:b8:c3:f1:52:39:60:d0:d9:29:0c:
                    d1:69:02:90:91:60:0e:94:d1:86:08:bc:54:70:f6:
                    00:4b:08:87:b1:4a:75:ea:54:7a:83:95:0c:3a:fd:
                    84:8c:d8:e7:a0:6c:c7:ba:86:1e:7b:d7:28:ef:c2:
                    b0:05:71:9c:5b:c3:30:11:d5:87:05:30:ee:e1:25:
                    76:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:94:F1:16:EB:8D:E9:60:FF:57:BE:D7:2D:0B:B4:D8:B3:0A:25:00
            X509v3 Authority Key Identifier:
                keyid:07:E8:DE:6A:67:4C:1F:EA:AD:9A:9C:CD:3C:EA:22:DF:26:17:4F:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:6d:8a:6d:8f:29:01:97:39:3f:81:2d:33:f7:3e:a0:76:0f:
         02:89:fc:b9:7a:66:22:39:0a:fc:28:f0:ac:a3:1a:c0:3f:0c:
         5d:c4:30:fd:56:6b:ac:a4:7c:cc:63:07:bd:fe:15:19:d0:23:
         35:1a:00:a3:7e:3a:ff:de:6c:bb:67:a5:f5:09:92:4c:e1:fe:
         ce:a1:e3:40:62:8c:ef:a9:55:7a:34:fe:f0:48:48:fd:83:46:
         35:ef:2d:05:99:0f:8a:93:04:87:20:70:8e:b5:11:d3:56:c4:
         b0:58:fd:36:b2:bf:89:80:22:bf:f5:c2:e8:ad:6b:03:4e:d3:
         90:83:12:6e:0a:20:0e:2a:9b:a1:13:5e:ce:47:f1:80:fe:88:
         cc:00:4b:61:db:70:70:58:07:eb:41:84:d1:89:69:6d:e1:73:
         d7:a8:70:87:51:8a:de:85:7a:71:53:7d:fd:e8:fd:7a:ce:fa:
         d2:99:a9:da:3b:ee:8f:27:1e:29:0b:33:50:64:41:c2:78:46:
         ae:7b:39:69:af:e2:c9:3e:a4:c7:88:6b:e6:5e:7d:b5:5d:97:
         19:81:64:b2:35:40:f4:07:a3:65:b0:df:83:73:35:c8:d2:d0:
         db:ca:cb:ed:1b:02:e7:c1:a5:b4:d6:e1:62:25:1d:3f:f8:3b:
         ac:cd:ff:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdF+TK+MgfFItSwkwF1d9GvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZThkZTZhNjc0YzFmZWFhZDlhOWNjZDNjZWEyMmRmMjYx
NzRmMjIwHhcNMjUwNjA2MTYwMDQ4WhcNMjUwNjA3MTYwMDQ4WjAzMTEwLwYDVQQD
EygwYzk0ZjExNmViOGRlOTYwZmY1N2JlZDcyZDBiYjRkOGIzMGEyNTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDkI9yF5UGgJ3lUkzZ2OHuRFV3QO
dxcsQLjzwqIcIFBNzzTbnJHnjLxwA+BdXw45eAYEBQOf+AiSuZwQ7HnGuMtwhpU6
4sGZ+mxdWodpcgWTty57g51JvMbieokGFfH/xUU2JQS5l7mbKu8ncAqHtg7zePk5
0Rm4GnFIve0/ydUlmL52NO1TS7ZBCp8+SLcsknvVDPYjc1IcYIEqIP3bhtsaXsvt
1XQlwRbyNKyhiyeoYI7h0asp47jD8VI5YNDZKQzRaQKQkWAOlNGGCLxUcPYASwiH
sUp16lR6g5UMOv2EjNjnoGzHuoYee9co78KwBXGcW8MwEdWHBTDu4SV2QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyU8Rbrjelg/1e+1y0LtNizCiUAMB8GA1UdIwQY
MBaAFAfo3mpnTB/qrZqczTzqIt8mF08iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQi1qZWFtZE1ILXF0bXB6TlBPb2kzeVlYVHlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81MDcxNmItOTdlYy00NDM2LWJkZGQt
OWJlYTcxNzFiZThhLzEvQi1qZWFtZE1ILXF0bXB6TlBPb2kzeVlYVHlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81MDcxNmItOTdlYy00NDM2LWJkZGQtOWJlYTcxNzFiZThh
LzEvQi1qZWFtZE1ILXF0bXB6TlBPb2kzeVlYVHlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeG2KbY8p
AZc5P4EtM/c+oHYPAon8uXpmIjkK/CjwrKMawD8MXcQw/VZrrKR8zGMHvf4VGdAj
NRoAo346/95su2el9QmSTOH+zqHjQGKM76lVejT+8EhI/YNGNe8tBZkPipMEhyBw
jrUR01bEsFj9NrK/iYAiv/XC6K1rA07TkIMSbgogDiqboRNezkfxgP6IzABLYdtw
cFgH60GE0YlpbeFz16hwh1GK3oV6cVN9/ej9es760pmp2jvujyceKQszUGRBwnhG
rns5aa/iyT6kx4hr5l59tV2XGYFksjVA9AejZbDfg3M1yNLQ28rL7RsC58GltNbh
YiUdP/g7rM3/UQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:37 2025 by rpki-client