Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
File:                     54z133frZmwE77frs8o0BK3sNPs.mft (raw, json)
Hash identifier:          DJuAaYKYvlRwWzK85MHkn+vjY/1SUvPuiNqo88UK0Qo=
Subject key identifier:   69:C9:AB:DC:B6:BC:3D:A5:2C:54:C3:19:42:9D:B2:51:22:94:67:86
Authority key identifier: E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB
Certificate issuer:       /CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
Certificate serial:       0197665FD3BE3020A39C661AE00CCBD2F591
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
Manifest number:          0C6B
Signing time:             Thu 12 Jun 2025 23:00:45 +0000
Manifest this update:     Thu 12 Jun 2025 23:00:45 +0000
Manifest next update:     Fri 13 Jun 2025 23:00:45 +0000
Files and hashes:         1: 54z133frZmwE77frs8o0BK3sNPs.crl (hash: ka1jd/PMaegPjcRB9wa2OglYzdabtcsEVlFZre2D+Sg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:66:5f:d3:be:30:20:a3:9c:66:1a:e0:0c:cb:d2:f5:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
        Validity
            Not Before: Jun 12 23:00:45 2025 GMT
            Not After : Jun 13 23:00:45 2025 GMT
        Subject: CN=69c9abdcb6bc3da52c54c319429db25122946786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:95:33:21:05:ae:92:69:5f:90:e5:d7:da:a1:
                    bb:a3:f0:a9:9c:4e:a0:db:0a:0e:55:30:38:3c:62:
                    0e:3e:75:69:da:de:f7:12:35:6c:85:6a:20:fe:70:
                    85:14:c2:8b:0b:a8:7e:d3:b7:e7:64:dc:a9:c6:85:
                    c8:e8:1c:32:f6:5f:ba:a0:33:14:12:9c:7c:18:05:
                    7c:fd:bb:81:78:ee:68:02:5e:67:60:0f:60:f2:ef:
                    38:bd:2e:f8:13:43:f1:a2:d9:2d:71:0b:cf:5f:5e:
                    39:8c:34:c2:91:4e:d8:01:8d:12:37:40:4e:c3:2a:
                    e0:f1:d8:e2:b7:b9:16:96:c0:9d:d9:f7:27:f6:81:
                    72:2d:69:f9:91:ae:32:0a:db:19:8e:95:9b:79:a5:
                    98:58:94:8d:90:11:13:d7:f1:33:d6:bd:25:9f:0f:
                    cc:16:c8:93:76:e5:2c:e7:e4:18:80:4c:7e:b0:da:
                    ba:8d:7c:c4:a8:1c:28:38:cd:ac:10:30:2a:1c:b6:
                    29:98:43:19:3e:55:91:50:ed:a1:01:ca:32:01:53:
                    40:c5:2b:db:82:9c:2b:a6:f4:ca:30:46:ac:81:2f:
                    04:87:cb:6e:2e:c8:d5:2f:40:91:9e:6e:aa:b2:49:
                    15:57:ff:d8:d3:a1:17:bd:b9:d5:90:c0:9d:58:6e:
                    d5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C9:AB:DC:B6:BC:3D:A5:2C:54:C3:19:42:9D:B2:51:22:94:67:86
            X509v3 Authority Key Identifier:
                keyid:E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:35:d1:f1:62:18:61:35:82:4f:a1:8e:d7:90:f4:f5:f6:ec:
         ff:51:15:67:ce:41:82:44:e6:bc:e4:7e:0f:7e:13:84:4f:32:
         89:1b:38:13:72:f4:83:3e:46:4d:bc:16:2e:31:65:ea:a0:cf:
         44:f0:62:3f:8b:c7:2b:1a:22:09:e3:4f:fc:3c:11:68:99:f0:
         68:36:67:f1:90:2f:47:00:36:4c:f3:2b:aa:67:18:28:66:dd:
         81:67:ff:b3:36:60:41:38:3a:3a:4e:f6:f4:3e:8f:8e:2e:87:
         18:d7:66:92:38:d2:63:97:05:c3:34:4f:12:e4:28:ee:cd:a4:
         ee:c0:95:af:e7:6e:9e:34:f4:48:e6:b7:0b:ba:24:1a:d6:c7:
         73:c7:24:85:67:24:da:78:0b:0c:05:5e:73:56:10:00:25:57:
         24:c3:06:03:11:6f:a1:4c:f6:09:10:a3:0a:7e:39:9b:fd:b8:
         82:23:d0:7c:8a:52:f1:31:08:c3:6d:aa:7a:41:01:b0:68:f9:
         e7:17:eb:fa:bd:b0:27:05:30:73:a0:c4:41:e8:78:a6:31:f0:
         93:15:cb:4b:62:89:c0:b7:ae:f0:8e:e0:d8:9d:2f:4f:54:3f:
         5e:58:52:c4:b6:86:56:b9:c8:1b:8d:e6:7a:27:91:aa:66:ed:
         a5:8b:0b:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdmX9O+MCCjnGYa4AzL0vWRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OGNmNWRmNzdlYjY2NmMwNGVmYjdlYmIzY2EzNDA0YWRl
YzM0ZmIwHhcNMjUwNjEyMjMwMDQ1WhcNMjUwNjEzMjMwMDQ1WjAzMTEwLwYDVQQD
Eyg2OWM5YWJkY2I2YmMzZGE1MmM1NGMzMTk0MjlkYjI1MTIyOTQ2Nzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZUzIQWukmlfkOXX2qG7o/CpnE6g
2woOVTA4PGIOPnVp2t73EjVshWog/nCFFMKLC6h+07fnZNypxoXI6Bwy9l+6oDMU
Epx8GAV8/buBeO5oAl5nYA9g8u84vS74E0PxotktcQvPX145jDTCkU7YAY0SN0BO
wyrg8djit7kWlsCd2fcn9oFyLWn5ka4yCtsZjpWbeaWYWJSNkBET1/Ez1r0lnw/M
FsiTduUs5+QYgEx+sNq6jXzEqBwoOM2sEDAqHLYpmEMZPlWRUO2hAcoyAVNAxSvb
gpwrpvTKMEasgS8Eh8tuLsjVL0CRnm6qskkVV//Y06EXvbnVkMCdWG7VEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnJq9y2vD2lLFTDGUKdslEilGeGMB8GA1UdIwQY
MBaAFOeM9d9362ZsBO+367PKNASt7DT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTR6MTMzZnJabXdFNzdmcnM4bzBCSzNzTlBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYzdiZDQtNWI4ZS00OWNlLTk0Yjkt
MjExYjQzOTQ3MDA3LzEvNTR6MTMzZnJabXdFNzdmcnM4bzBCSzNzTlBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9kYzdiZDQtNWI4ZS00OWNlLTk0YjktMjExYjQzOTQ3MDA3
LzEvNTR6MTMzZnJabXdFNzdmcnM4bzBCSzNzTlBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDXR8WIY
YTWCT6GO15D09fbs/1EVZ85BgkTmvOR+D34ThE8yiRs4E3L0gz5GTbwWLjFl6qDP
RPBiP4vHKxoiCeNP/DwRaJnwaDZn8ZAvRwA2TPMrqmcYKGbdgWf/szZgQTg6Ok72
9D6Pji6HGNdmkjjSY5cFwzRPEuQo7s2k7sCVr+dunjT0SOa3C7okGtbHc8ckhWck
2ngLDAVec1YQACVXJMMGAxFvoUz2CRCjCn45m/24giPQfIpS8TEIw22qekEBsGj5
5xfr+r2wJwUwc6DEQeh4pjHwkxXLS2KJwLeu8I7g2J0vT1Q/XlhSxLaGVrnIG43m
eieRqmbtpYsLSA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 07:49:07 2025 by rpki-client