Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
File:                     6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft (raw, json)
Hash identifier:          P5H8gVTvNuvf+TYr9OgPr2OnX66fL/xzc1Bw4jMi7Ro=
Subject key identifier:   23:6F:56:5D:C2:C0:60:FA:2A:32:9F:0B:C1:1D:D9:51:EF:0D:FB:E6
Authority key identifier: EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9
Certificate issuer:       /CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
Certificate serial:       019643D6DE3D140DE84FB49A84BC73AD7451
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
Manifest number:          14F3
Signing time:             Thu 17 Apr 2025 13:01:17 +0000
Manifest this update:     Thu 17 Apr 2025 13:01:17 +0000
Manifest next update:     Fri 18 Apr 2025 13:01:17 +0000
Files and hashes:         1: 6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl (hash: +tk4i2IospWYa7DWj2eR6HgoLFjd9q78ZXWdo1An5EM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 13:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:43:d6:de:3d:14:0d:e8:4f:b4:9a:84:bc:73:ad:74:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
        Validity
            Not Before: Apr 17 13:01:17 2025 GMT
            Not After : Apr 18 13:01:17 2025 GMT
        Subject: CN=236f565dc2c060fa2a329f0bc11dd951ef0dfbe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:8e:75:fb:1a:83:64:02:bc:7c:2a:e3:ad:6a:
                    86:e2:33:e2:a2:9d:45:e0:d8:90:7f:ed:1a:16:88:
                    7b:4c:fb:3a:4c:aa:a5:b4:d5:e6:cb:01:2a:1e:15:
                    96:aa:fc:f1:4d:32:43:a3:d8:b2:69:23:6a:6d:e5:
                    0b:af:04:b0:49:17:03:1f:9b:31:4f:71:be:3e:32:
                    ae:03:30:a0:53:cc:85:c8:d5:e6:e2:12:f6:83:4e:
                    8f:3c:ee:ba:a9:d0:dd:4c:8e:c8:1a:bc:fb:e8:f0:
                    3a:c1:50:86:6b:00:c3:a3:d2:c0:51:dc:6d:32:15:
                    df:d9:8a:a2:e2:42:42:76:17:b0:80:f5:6e:49:e1:
                    10:d9:15:77:82:45:06:f8:99:3a:a4:0c:9a:57:b5:
                    9f:6c:35:c9:9e:a7:48:52:b5:89:e5:0d:fa:01:b4:
                    b9:ca:ba:7d:4f:a0:16:7f:a1:61:1a:3e:99:bd:4b:
                    26:79:0c:04:90:4d:85:f7:17:be:4a:52:89:7a:b9:
                    67:5d:92:94:da:de:11:5c:ec:e7:37:62:40:78:ac:
                    a5:4a:e0:07:ea:79:c6:40:3f:b7:10:6e:e7:6b:47:
                    a7:12:75:e3:30:7c:13:48:44:3c:e7:ee:56:be:45:
                    2b:eb:63:1d:53:78:b8:4c:eb:d4:66:fb:53:e4:c0:
                    b6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6F:56:5D:C2:C0:60:FA:2A:32:9F:0B:C1:1D:D9:51:EF:0D:FB:E6
            X509v3 Authority Key Identifier:
                keyid:EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:1f:45:34:4b:f2:ba:3b:48:7d:9c:95:39:f2:78:13:06:cd:
         7a:94:e9:6b:89:e4:52:4c:06:80:de:76:f8:45:5a:c9:f8:56:
         da:00:8c:21:8b:0b:6c:ee:3d:71:d0:2d:ee:43:4b:13:c6:14:
         1e:73:4f:b3:75:c3:ec:88:cb:2e:8a:27:43:1a:80:14:a4:3a:
         14:77:48:e5:4c:00:97:19:63:e5:07:1e:37:a0:b3:ac:de:59:
         31:71:77:6e:68:0d:73:e0:c3:2d:45:6e:c8:6b:6b:a2:8d:fc:
         a1:17:7d:45:36:18:90:83:f2:8c:d0:bf:fd:c9:95:f0:06:54:
         a3:15:11:82:db:2c:a0:13:de:ca:a9:50:d8:41:b6:ce:d7:a7:
         d8:b8:42:d4:3c:e8:eb:3d:cf:27:0c:1a:16:ca:a1:a6:f6:6e:
         ec:30:0e:50:dc:4b:2b:62:93:72:a3:10:b1:5a:d0:89:c7:58:
         a2:2c:bc:f3:9a:79:22:1d:ae:dc:b5:5b:37:74:a5:8b:ca:49:
         38:2a:cf:62:88:60:3a:0a:07:8c:f6:96:01:48:ae:9b:ac:21:
         cb:3e:36:bb:ee:8c:0c:20:e2:b4:81:f2:40:19:0c:0b:68:1f:
         13:27:7a:4f:e4:55:f6:32:e7:77:e0:23:1d:97:5b:8b:f2:0e:
         87:f2:bd:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZD1t49FA3oT7SahLxzrXRRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMWJjMmVhNjI1MjM4YmI0ZTI4MjFhMThiZDVlZWVhM2E2
OGE3ZjkwHhcNMjUwNDE3MTMwMTE3WhcNMjUwNDE4MTMwMTE3WjAzMTEwLwYDVQQD
EygyMzZmNTY1ZGMyYzA2MGZhMmEzMjlmMGJjMTFkZDk1MWVmMGRmYmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8451+xqDZAK8fCrjrWqG4jPiop1F
4NiQf+0aFoh7TPs6TKqltNXmywEqHhWWqvzxTTJDo9iyaSNqbeULrwSwSRcDH5sx
T3G+PjKuAzCgU8yFyNXm4hL2g06PPO66qdDdTI7IGrz76PA6wVCGawDDo9LAUdxt
MhXf2Yqi4kJCdhewgPVuSeEQ2RV3gkUG+Jk6pAyaV7WfbDXJnqdIUrWJ5Q36AbS5
yrp9T6AWf6FhGj6ZvUsmeQwEkE2F9xe+SlKJerlnXZKU2t4RXOznN2JAeKylSuAH
6nnGQD+3EG7na0enEnXjMHwTSEQ85+5WvkUr62MdU3i4TOvUZvtT5MC21QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNvVl3CwGD6KjKfC8Ed2VHvDfvmMB8GA1UdIwQY
MBaAFOsbwupiUji7TighoYvV7uo6aKf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnh2QzZtSlNPTHRPS0NHaGk5WHU2anBvcF9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8xM2Y1M2MtMmFhMi00N2M2LTg4Y2Et
NTg5MjIyNzJiYjE3LzEvNnh2QzZtSlNPTHRPS0NHaGk5WHU2anBvcF9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8xM2Y1M2MtMmFhMi00N2M2LTg4Y2EtNTg5MjIyNzJiYjE3
LzEvNnh2QzZtSlNPTHRPS0NHaGk5WHU2anBvcF9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnx9FNEvy
ujtIfZyVOfJ4EwbNepTpa4nkUkwGgN52+EVayfhW2gCMIYsLbO49cdAt7kNLE8YU
HnNPs3XD7IjLLoonQxqAFKQ6FHdI5UwAlxlj5QceN6CzrN5ZMXF3bmgNc+DDLUVu
yGtroo38oRd9RTYYkIPyjNC//cmV8AZUoxURgtssoBPeyqlQ2EG2zten2LhC1Dzo
6z3PJwwaFsqhpvZu7DAOUNxLK2KTcqMQsVrQicdYoiy885p5Ih2u3LVbN3Sli8pJ
OCrPYohgOgoHjPaWAUium6whyz42u+6MDCDitIHyQBkMC2gfEyd6T+RV9jLnd+Aj
HZdbi/IOh/K9OA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:28 2025 by rpki-client