Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
File:                     54z133frZmwE77frs8o0BK3sNPs.mft (raw, json)
Hash identifier:          eaXbF4ZrRBj3L0sfwGzVVVmuSkEGzdw3U9A41g/CHww=
Subject key identifier:   FC:6C:87:0D:1C:50:77:A1:3F:C7:7D:E1:C8:52:CC:B2:7D:86:AC:18
Authority key identifier: E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB
Certificate issuer:       /CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
Certificate serial:       0197684E426D0EFF00E5373B0B0507D88618
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
Manifest number:          0C6C
Signing time:             Fri 13 Jun 2025 08:00:48 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:48 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:48 +0000
Files and hashes:         1: 54z133frZmwE77frs8o0BK3sNPs.crl (hash: uvjRTi8e1eESeBF72z33kcpJ3fDTCuClgcL8DgINPx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:42:6d:0e:ff:00:e5:37:3b:0b:05:07:d8:86:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
        Validity
            Not Before: Jun 13 08:00:48 2025 GMT
            Not After : Jun 14 08:00:48 2025 GMT
        Subject: CN=fc6c870d1c5077a13fc77de1c852ccb27d86ac18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d0:94:b1:d8:f9:9f:50:d0:e5:d4:55:28:b7:
                    a9:cb:d9:88:ea:3b:92:be:4f:df:36:a7:76:29:7e:
                    e1:87:b0:dc:2c:a5:e0:37:5b:0b:79:a4:9e:d8:4a:
                    ba:20:3d:1a:68:fd:f9:e6:37:a3:a4:01:77:45:01:
                    02:bc:84:0d:76:f3:b3:af:57:3a:17:05:a6:ce:2e:
                    21:26:0c:88:eb:35:39:f8:6d:5a:7b:74:aa:73:8e:
                    81:4f:00:18:79:ad:7e:b4:36:62:b4:f5:8a:25:d5:
                    7d:ca:b2:5a:68:9d:31:24:b1:e9:3d:ee:b6:ec:b9:
                    25:d8:34:5a:f7:52:b7:dc:fc:87:31:dc:a2:0e:69:
                    66:2d:7b:a7:0e:16:ff:c1:4b:a0:3e:c8:87:fe:87:
                    74:cf:7d:b3:76:0f:44:6b:89:6e:cb:7b:ad:0c:3d:
                    52:06:c7:32:64:17:fa:8c:a4:c7:3a:2a:8a:5a:5a:
                    36:56:06:b7:01:3d:10:e1:0d:ef:a3:a8:ce:0c:ef:
                    af:a8:5a:9c:6e:db:05:f7:2d:e4:ff:c1:7d:db:05:
                    c7:a4:f9:37:c4:b8:d8:eb:59:6c:22:b7:21:9a:40:
                    77:0c:27:ef:f8:fb:10:69:f4:97:dc:17:de:38:70:
                    28:22:f0:7a:dc:00:85:de:68:30:f1:94:c5:0e:2e:
                    98:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6C:87:0D:1C:50:77:A1:3F:C7:7D:E1:C8:52:CC:B2:7D:86:AC:18
            X509v3 Authority Key Identifier:
                keyid:E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:03:7f:21:49:69:a1:c7:00:81:83:5c:d6:19:a2:f6:40:bf:
         4e:bf:a2:6c:41:cf:d8:9b:a8:a8:6f:4f:d5:12:2f:c3:fb:60:
         08:b0:b4:82:eb:f3:8d:93:00:b9:d9:02:70:52:e6:9b:f1:fe:
         82:e1:1c:09:df:b6:ad:c8:3b:ec:ea:cd:15:af:7e:94:1d:16:
         35:12:09:da:5f:b5:87:02:2a:1d:e5:32:64:9a:45:07:96:09:
         1d:94:00:20:2d:b9:ab:03:a2:54:2e:d3:5f:82:a1:bf:04:33:
         6e:67:6d:ec:03:5e:f2:68:33:ca:b4:d1:6e:8e:cf:94:6f:f7:
         0f:77:ae:eb:2e:e6:57:2d:02:01:06:68:53:b3:b8:eb:54:83:
         c3:32:ce:ea:09:c6:98:a3:37:c1:a7:45:bc:f6:32:f2:e3:85:
         ca:88:98:7d:20:78:aa:15:c2:07:0a:cc:93:d7:0c:f3:d9:57:
         9c:6d:5e:c5:69:60:bd:41:d5:c1:a3:77:f1:8e:f7:8b:b4:18:
         ae:d9:d1:7e:85:26:22:49:31:71:34:15:19:1c:5e:77:5e:da:
         d6:3d:a6:0b:6d:65:b7:c1:4a:ab:b3:0f:a1:19:41:29:19:93:
         fd:c1:54:20:6b:0c:66:e3:e3:d5:85:3c:6c:12:28:99:9a:18:
         04:56:b5:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdoTkJtDv8A5Tc7CwUH2IYYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OGNmNWRmNzdlYjY2NmMwNGVmYjdlYmIzY2EzNDA0YWRl
YzM0ZmIwHhcNMjUwNjEzMDgwMDQ4WhcNMjUwNjE0MDgwMDQ4WjAzMTEwLwYDVQQD
EyhmYzZjODcwZDFjNTA3N2ExM2ZjNzdkZTFjODUyY2NiMjdkODZhYzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotCUsdj5n1DQ5dRVKLepy9mI6juS
vk/fNqd2KX7hh7DcLKXgN1sLeaSe2Eq6ID0aaP355jejpAF3RQECvIQNdvOzr1c6
FwWmzi4hJgyI6zU5+G1ae3Sqc46BTwAYea1+tDZitPWKJdV9yrJaaJ0xJLHpPe62
7Lkl2DRa91K33PyHMdyiDmlmLXunDhb/wUugPsiH/od0z32zdg9Ea4luy3utDD1S
BscyZBf6jKTHOiqKWlo2Vga3AT0Q4Q3vo6jODO+vqFqcbtsF9y3k/8F92wXHpPk3
xLjY61lsIrchmkB3DCfv+PsQafSX3BfeOHAoIvB63ACF3mgw8ZTFDi6Y+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxshw0cUHehP8d94chSzLJ9hqwYMB8GA1UdIwQY
MBaAFOeM9d9362ZsBO+367PKNASt7DT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTR6MTMzZnJabXdFNzdmcnM4bzBCSzNzTlBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYzdiZDQtNWI4ZS00OWNlLTk0Yjkt
MjExYjQzOTQ3MDA3LzEvNTR6MTMzZnJabXdFNzdmcnM4bzBCSzNzTlBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9kYzdiZDQtNWI4ZS00OWNlLTk0YjktMjExYjQzOTQ3MDA3
LzEvNTR6MTMzZnJabXdFNzdmcnM4bzBCSzNzTlBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQN/IUlp
occAgYNc1hmi9kC/Tr+ibEHP2JuoqG9P1RIvw/tgCLC0guvzjZMAudkCcFLmm/H+
guEcCd+2rcg77OrNFa9+lB0WNRIJ2l+1hwIqHeUyZJpFB5YJHZQAIC25qwOiVC7T
X4KhvwQzbmdt7ANe8mgzyrTRbo7PlG/3D3eu6y7mVy0CAQZoU7O461SDwzLO6gnG
mKM3wadFvPYy8uOFyoiYfSB4qhXCBwrMk9cM89lXnG1exWlgvUHVwaN38Y73i7QY
rtnRfoUmIkkxcTQVGRxed17a1j2mC21lt8FKq7MPoRlBKRmT/cFUIGsMZuPj1YU8
bBIomZoYBFa1Wg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 14:56:16 2025 by rpki-client