Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
File:                     g06Y-uclpT43QqjU7ehT9P9juRM.mft (raw, json)
Hash identifier:          69RX+ILHlTztIcWR/UIBwnHCSCrq+dkQ8Cduwo/utoY=
Subject key identifier:   DF:7F:C2:DD:FE:63:D5:64:A1:EC:21:7C:A5:D9:92:6C:E3:03:DF:21
Authority key identifier: 83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13
Certificate issuer:       /CN=834e98fae725a53e3742a8d4ede853f4ff63b913
Certificate serial:       01976F2BF29E983B575AD1EE4F53E4807209
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
Manifest number:          0342
Signing time:             Sat 14 Jun 2025 16:00:40 +0000
Manifest this update:     Sat 14 Jun 2025 16:00:40 +0000
Manifest next update:     Sun 15 Jun 2025 16:00:40 +0000
Files and hashes:         1: g06Y-uclpT43QqjU7ehT9P9juRM.crl (hash: IqFc6sf3QDtxQsgtcrlTXIjkrLEXE/wHF4ExDp2ZN/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2b:f2:9e:98:3b:57:5a:d1:ee:4f:53:e4:80:72:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834e98fae725a53e3742a8d4ede853f4ff63b913
        Validity
            Not Before: Jun 14 16:00:40 2025 GMT
            Not After : Jun 15 16:00:40 2025 GMT
        Subject: CN=df7fc2ddfe63d564a1ec217ca5d9926ce303df21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7e:cb:9e:aa:31:d9:d3:78:1b:d3:6f:6c:f9:
                    7f:d7:81:d3:0b:8c:7f:9d:6a:83:bb:9a:c1:16:d8:
                    a4:c8:cc:80:84:7f:f3:bf:27:ef:d6:68:21:c1:6b:
                    fd:1f:d8:97:0d:75:9d:3e:a6:1c:0d:4b:63:b9:da:
                    65:af:25:cd:19:83:65:dd:1e:59:f1:a5:39:c7:ab:
                    a3:c8:ed:2b:f6:a9:51:61:87:aa:88:98:47:56:33:
                    36:f0:54:10:55:f8:1b:92:95:9f:9e:a7:33:fe:62:
                    c2:c3:1d:0b:09:2e:eb:e3:be:8e:68:a1:99:47:44:
                    c5:1d:aa:fc:f9:cb:f0:e7:57:c7:45:ec:ac:76:30:
                    7e:d1:a1:92:be:95:b9:a0:9a:dd:1d:b3:03:29:f2:
                    18:03:f8:ac:a5:b0:0a:79:36:69:a2:0b:60:4a:99:
                    d4:ff:e3:a5:db:56:68:96:1a:c9:d4:5f:01:12:a4:
                    18:29:35:19:40:f6:2d:16:98:e0:39:80:cf:68:83:
                    59:a8:1f:92:86:4a:7b:23:05:01:c4:e5:4e:57:b9:
                    be:5c:ac:fa:7b:bf:c2:c9:ee:ef:62:d0:d9:5d:ef:
                    f9:3b:ed:e4:36:f2:bd:61:9e:9f:c0:87:83:c0:db:
                    07:c6:05:74:ec:8f:23:ee:ad:33:51:60:97:09:49:
                    cb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7F:C2:DD:FE:63:D5:64:A1:EC:21:7C:A5:D9:92:6C:E3:03:DF:21
            X509v3 Authority Key Identifier:
                keyid:83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:c4:a1:43:60:64:a5:61:65:c7:76:80:30:62:82:85:19:64:
         70:01:d6:a1:53:6e:fa:0c:33:99:59:ba:9b:42:55:38:68:60:
         ed:db:ca:16:d6:04:74:ec:ac:3e:02:14:6b:ff:b1:f4:59:2e:
         2e:45:01:14:e0:aa:c4:11:6c:b5:45:5e:c0:f6:59:39:f7:d9:
         a2:0b:64:5d:7a:31:bd:46:8c:f9:28:04:a8:fb:52:3c:77:aa:
         a3:4d:9b:0a:91:68:9e:a7:cd:da:fb:d5:c5:b8:af:90:78:e5:
         35:25:39:a6:f6:05:70:4e:8b:7b:1a:4a:b8:e2:ff:8e:a1:dc:
         d3:16:ea:e6:c4:06:c3:0e:1d:f9:b7:2b:03:b5:d3:47:b5:2f:
         fa:86:56:01:6a:e6:b5:01:f6:1f:db:18:18:33:30:8a:78:a7:
         4f:40:a5:41:19:e8:76:4b:2e:dd:f9:e1:11:06:e6:e0:fa:0d:
         51:56:d8:7b:cd:4d:7a:34:4d:e7:af:91:ba:37:b5:33:25:0c:
         62:4d:62:b4:80:d0:4f:64:47:fc:af:7c:60:15:12:6f:1b:0d:
         f3:14:63:d0:21:ae:a3:2b:64:df:1c:dd:02:61:fa:09:22:2b:
         0d:6c:f3:b6:1c:c4:0b:e2:4d:80:89:8d:c9:17:37:2d:24:d5:
         4e:fd:4d:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvK/KemDtXWtHuT1PkgHIJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNGU5OGZhZTcyNWE1M2UzNzQyYThkNGVkZTg1M2Y0ZmY2
M2I5MTMwHhcNMjUwNjE0MTYwMDQwWhcNMjUwNjE1MTYwMDQwWjAzMTEwLwYDVQQD
EyhkZjdmYzJkZGZlNjNkNTY0YTFlYzIxN2NhNWQ5OTI2Y2UzMDNkZjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH7Lnqox2dN4G9NvbPl/14HTC4x/
nWqDu5rBFtikyMyAhH/zvyfv1mghwWv9H9iXDXWdPqYcDUtjudplryXNGYNl3R5Z
8aU5x6ujyO0r9qlRYYeqiJhHVjM28FQQVfgbkpWfnqcz/mLCwx0LCS7r476OaKGZ
R0TFHar8+cvw51fHReysdjB+0aGSvpW5oJrdHbMDKfIYA/ispbAKeTZpogtgSpnU
/+Ol21ZolhrJ1F8BEqQYKTUZQPYtFpjgOYDPaINZqB+Shkp7IwUBxOVOV7m+XKz6
e7/Cye7vYtDZXe/5O+3kNvK9YZ6fwIeDwNsHxgV07I8j7q0zUWCXCUnLeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9/wt3+Y9VkoewhfKXZkmzjA98hMB8GA1UdIwQY
MBaAFINOmPrnJaU+N0Ko1O3oU/T/Y7kTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzA2WS11Y2xwVDQzUXFqVTdlaFQ5UDlqdVJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny81NzY5MzMtOGE1Yi00ZGNiLWFjMWYt
MWE1MjliMmY1ZDk3LzEvZzA2WS11Y2xwVDQzUXFqVTdlaFQ5UDlqdVJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny81NzY5MzMtOGE1Yi00ZGNiLWFjMWYtMWE1MjliMmY1ZDk3
LzEvZzA2WS11Y2xwVDQzUXFqVTdlaFQ5UDlqdVJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArcShQ2Bk
pWFlx3aAMGKChRlkcAHWoVNu+gwzmVm6m0JVOGhg7dvKFtYEdOysPgIUa/+x9Fku
LkUBFOCqxBFstUVewPZZOffZogtkXXoxvUaM+SgEqPtSPHeqo02bCpFonqfN2vvV
xbivkHjlNSU5pvYFcE6LexpKuOL/jqHc0xbq5sQGww4d+bcrA7XTR7Uv+oZWAWrm
tQH2H9sYGDMwininT0ClQRnodksu3fnhEQbm4PoNUVbYe81NejRN56+Ruje1MyUM
Yk1itIDQT2RH/K98YBUSbxsN8xRj0CGuoytk3xzdAmH6CSIrDWzzthzEC+JNgImN
yRc3LSTVTv1NBA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 21:06:33 2025 by rpki-client