Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
File:                     bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft (raw, json)
Hash identifier:          L7tW7W+682Xi19Fbi+r5Fz2tzLSKFEfQU5SSEzy1LTo=
Subject key identifier:   94:31:FC:03:F5:73:A2:05:17:DD:2D:5B:C4:9D:1A:73:3C:8F:FF:05
Authority key identifier: 6C:29:24:4A:C4:02:67:EE:C4:7A:91:70:8F:89:CF:53:66:EA:A8:D7
Certificate issuer:       /CN=6c29244ac40267eec47a91708f89cf5366eaa8d7
Certificate serial:       019611A0F6419A41DBE21411D05D764082C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
Manifest number:          0D6F
Signing time:             Mon 07 Apr 2025 19:01:23 +0000
Manifest this update:     Mon 07 Apr 2025 19:01:23 +0000
Manifest next update:     Tue 08 Apr 2025 19:01:23 +0000
Files and hashes:         1: bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl (hash: QVJZTOdwmeyJDyhfx8hvBq+XrjvX7sm7mdmrgpbD3ro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:11:a0:f6:41:9a:41:db:e2:14:11:d0:5d:76:40:82:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c29244ac40267eec47a91708f89cf5366eaa8d7
        Validity
            Not Before: Apr  7 19:01:23 2025 GMT
            Not After : Apr  8 19:01:23 2025 GMT
        Subject: CN=9431fc03f573a20517dd2d5bc49d1a733c8fff05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:eb:66:04:9e:60:e5:8e:90:a5:43:f7:be:57:
                    77:7d:67:f2:8f:18:a4:dd:00:74:51:92:d6:08:17:
                    21:86:30:a6:ae:35:40:d7:ba:c8:8e:58:b5:0d:e4:
                    d7:68:00:ac:bd:e6:cd:1a:eb:be:9f:dc:46:e2:9b:
                    75:d8:61:40:61:9b:62:14:61:88:f3:6a:f7:12:b9:
                    3f:e3:ea:84:ed:fa:c7:b7:c2:b9:e0:fb:e5:e8:07:
                    d9:9f:85:0b:78:7a:f7:fe:24:6a:47:9a:7d:96:04:
                    c2:16:40:b2:73:63:69:c9:2b:83:e1:0b:91:48:a9:
                    0a:c2:56:f9:b8:f6:4d:c5:eb:86:45:25:f8:e8:f7:
                    69:c5:f6:8b:7b:42:14:bc:09:01:cb:6a:04:7b:4a:
                    5b:5a:38:52:05:3f:af:50:04:9e:f4:f6:4e:20:cf:
                    c2:32:1c:7e:12:2d:a2:24:c7:59:b7:53:54:35:fc:
                    47:60:b4:f5:6c:a0:5b:07:88:d6:84:07:3c:6c:23:
                    18:a3:d1:50:8d:4a:7a:85:ad:a5:e7:35:17:46:d7:
                    5c:b0:1f:07:88:47:44:e6:39:56:49:c3:93:06:d4:
                    08:f7:94:4d:54:b2:27:1d:7c:51:c0:4b:10:0b:87:
                    87:a6:b9:de:8d:27:83:fa:8d:81:37:3d:6c:d7:7a:
                    2d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:31:FC:03:F5:73:A2:05:17:DD:2D:5B:C4:9D:1A:73:3C:8F:FF:05
            X509v3 Authority Key Identifier:
                keyid:6C:29:24:4A:C4:02:67:EE:C4:7A:91:70:8F:89:CF:53:66:EA:A8:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:fc:9f:b1:51:87:09:a3:54:f0:4d:97:1c:09:66:e5:e2:28:
         b1:81:af:1b:ba:5c:94:66:a2:40:c2:a8:fc:26:08:2c:b7:b0:
         d4:25:cf:50:47:dc:bf:c6:51:dd:87:39:46:2f:f1:6c:10:0b:
         7e:cc:d5:c6:66:be:c4:0e:46:07:d2:e6:0a:dc:62:f5:10:ba:
         1d:91:f9:a1:ac:81:ee:91:62:3d:df:91:7b:e5:0c:f3:21:56:
         6f:70:4a:a6:5a:7b:3e:d3:e3:d7:e2:a0:19:cf:60:d2:0a:2f:
         c6:dc:4b:02:a0:23:43:76:69:32:ed:ca:0d:dd:06:01:25:4e:
         e4:cc:aa:7a:5c:e3:71:c6:f5:1e:82:13:91:ff:77:58:7e:6f:
         2b:df:96:c3:7a:f6:44:b5:b5:63:46:78:cc:29:87:9d:47:5a:
         2d:d8:2e:b2:d0:85:f2:98:7b:e3:03:4e:85:fb:49:c6:88:91:
         74:80:11:57:eb:88:93:92:09:a8:92:8c:23:46:9c:c7:fb:38:
         cd:17:c1:2d:c5:76:93:c4:5d:2d:b6:93:4b:fe:e6:8f:c1:b7:
         31:7b:9b:1d:80:34:6b:53:00:4a:6e:9f:c5:06:a8:15:47:6a:
         7f:18:86:25:ba:f3:f9:9f:b7:eb:35:9c:95:d2:4a:f0:29:c5:
         46:8a:5a:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYRoPZBmkHb4hQR0F12QILGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMjkyNDRhYzQwMjY3ZWVjNDdhOTE3MDhmODljZjUzNjZl
YWE4ZDcwHhcNMjUwNDA3MTkwMTIzWhcNMjUwNDA4MTkwMTIzWjAzMTEwLwYDVQQD
Eyg5NDMxZmMwM2Y1NzNhMjA1MTdkZDJkNWJjNDlkMWE3MzNjOGZmZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+tmBJ5g5Y6QpUP3vld3fWfyjxik
3QB0UZLWCBchhjCmrjVA17rIjli1DeTXaACsvebNGuu+n9xG4pt12GFAYZtiFGGI
82r3Erk/4+qE7frHt8K54Pvl6AfZn4ULeHr3/iRqR5p9lgTCFkCyc2NpySuD4QuR
SKkKwlb5uPZNxeuGRSX46PdpxfaLe0IUvAkBy2oEe0pbWjhSBT+vUASe9PZOIM/C
Mhx+Ei2iJMdZt1NUNfxHYLT1bKBbB4jWhAc8bCMYo9FQjUp6ha2l5zUXRtdcsB8H
iEdE5jlWScOTBtQI95RNVLInHXxRwEsQC4eHprnejSeD+o2BNz1s13otDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQx/AP1c6IFF90tW8SdGnM8j/8FMB8GA1UdIwQY
MBaAFGwpJErEAmfuxHqRcI+Jz1Nm6qjXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkNra1NzUUNaLTdFZXBGd2o0blBVMmJxcU5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8xZjRlN2UtYzQyZi00NGYyLWJiZWUt
ZTM2OTY2YmEwMDVjLzEvYkNra1NzUUNaLTdFZXBGd2o0blBVMmJxcU5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8xZjRlN2UtYzQyZi00NGYyLWJiZWUtZTM2OTY2YmEwMDVj
LzEvYkNra1NzUUNaLTdFZXBGd2o0blBVMmJxcU5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABfyfsVGH
CaNU8E2XHAlm5eIosYGvG7pclGaiQMKo/CYILLew1CXPUEfcv8ZR3Yc5Ri/xbBAL
fszVxma+xA5GB9LmCtxi9RC6HZH5oayB7pFiPd+Re+UM8yFWb3BKplp7PtPj1+Kg
Gc9g0govxtxLAqAjQ3ZpMu3KDd0GASVO5Myqelzjccb1HoITkf93WH5vK9+Ww3r2
RLW1Y0Z4zCmHnUdaLdgustCF8ph74wNOhftJxoiRdIARV+uIk5IJqJKMI0acx/s4
zRfBLcV2k8RdLbaTS/7mj8G3MXubHYA0a1MASm6fxQaoFUdqfxiGJbrz+Z+36zWc
ldJK8CnFRopajQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:30 2025 by rpki-client