Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft
File:                     6zN-rWubk90NdYq_nXswMHKpnrk.mft (raw, json)
Hash identifier:          bX01p6lxkdyJdHvU2KSJ9KMFrDjp2QQ0NrawybXjkoA=
Subject key identifier:   AA:FE:05:B2:4D:08:6F:C2:1C:09:40:9E:B9:43:0F:7C:8E:9D:10:BB
Authority key identifier: EB:33:7E:AD:6B:9B:93:DD:0D:75:8A:BF:9D:7B:30:30:72:A9:9E:B9
Certificate issuer:       /CN=eb337ead6b9b93dd0d758abf9d7b303072a99eb9
Certificate serial:       0197462FD82792293F4F8DC59487D30FC2FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft
Manifest number:          157B
Signing time:             Fri 06 Jun 2025 17:00:29 +0000
Manifest this update:     Fri 06 Jun 2025 17:00:29 +0000
Manifest next update:     Sat 07 Jun 2025 17:00:29 +0000
Files and hashes:         1: 6zN-rWubk90NdYq_nXswMHKpnrk.crl (hash: MvBHWe2nF6RelLrPOzMRN/mp6idyf8r9iWDLCrilbyQ=)
                          2: qKIz6NW658QiWYOFcDWwBberXPk.roa (hash: XrH4aIQQINYqHfRuibGZ0Zr0PYKUQ4mNWHvnArdnsa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:2f:d8:27:92:29:3f:4f:8d:c5:94:87:d3:0f:c2:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb337ead6b9b93dd0d758abf9d7b303072a99eb9
        Validity
            Not Before: Jun  6 17:00:29 2025 GMT
            Not After : Jun  7 17:00:29 2025 GMT
        Subject: CN=aafe05b24d086fc21c09409eb9430f7c8e9d10bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:b3:4f:16:90:7e:47:93:77:c2:59:e3:93:8f:
                    68:cc:66:d9:56:fb:d6:9a:9d:74:42:8c:7f:cf:1c:
                    c2:3d:b7:1c:c3:96:10:0b:62:58:1d:88:ec:ab:fe:
                    27:50:44:c6:62:91:25:b8:49:59:a7:ac:ae:f7:b2:
                    9b:64:55:47:70:1d:f6:cd:61:53:48:20:63:30:0f:
                    c5:33:60:86:92:d4:20:0d:55:c6:7a:6f:4b:b9:af:
                    1a:e3:f7:0c:5e:bb:18:d9:c8:e8:d6:1a:a0:7c:83:
                    71:af:87:7b:47:c2:b7:57:42:19:bf:b2:c8:e0:50:
                    1c:6e:ed:2d:f8:ff:f8:3c:4e:3e:ba:37:39:cb:f1:
                    4e:c1:9d:92:c2:08:75:3f:84:0e:57:db:86:17:b1:
                    70:da:ca:1f:56:9d:03:d3:bc:53:a3:8f:2b:4d:8d:
                    9e:9b:1b:08:7e:18:5f:58:a0:17:6e:19:69:5c:25:
                    ad:0d:d2:1b:52:55:da:53:d6:42:af:31:92:a5:af:
                    62:f5:74:38:d9:10:08:b1:77:80:06:1c:0c:22:38:
                    ab:0b:3b:c4:22:29:ed:6e:f6:7c:c1:f8:19:cb:e6:
                    bb:ca:f9:7b:75:34:30:de:e7:c7:d0:f3:12:36:8a:
                    c4:4b:15:56:42:70:b7:2b:ff:24:d4:f8:7e:0a:66:
                    b8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FE:05:B2:4D:08:6F:C2:1C:09:40:9E:B9:43:0F:7C:8E:9D:10:BB
            X509v3 Authority Key Identifier:
                keyid:EB:33:7E:AD:6B:9B:93:DD:0D:75:8A:BF:9D:7B:30:30:72:A9:9E:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:fe:cb:30:8d:c9:74:d7:f0:bf:81:1c:8e:f7:ea:e7:a5:5f:
         77:00:2a:94:f1:47:b8:5d:bd:03:fa:d8:60:80:cc:5d:00:cf:
         0a:3d:b5:23:6e:5a:7d:63:41:db:81:77:3d:a0:a5:5d:c1:17:
         79:01:fe:1e:b7:9c:c0:f8:29:dc:0d:6f:04:35:82:db:cf:c4:
         21:84:9c:76:91:04:cd:1b:d7:df:30:ba:63:46:96:ea:39:67:
         51:c3:13:4a:94:52:26:cb:b5:86:e0:5b:4d:ed:02:49:c3:b7:
         18:96:8c:24:08:41:7d:03:ed:60:ff:6f:4b:12:0e:27:d7:52:
         0a:c6:fc:91:69:56:09:81:fb:fe:71:e4:16:87:66:98:2a:3a:
         cd:d5:55:20:4a:3f:e6:98:53:d2:b2:74:f1:08:92:f4:3b:c7:
         ea:0a:3d:7a:ed:0f:9b:33:79:ff:b5:a8:8b:ad:3d:97:58:dc:
         72:e2:53:bc:12:7f:f7:34:ec:92:72:e6:77:bb:b0:3e:0b:85:
         07:af:4e:86:d5:58:12:d5:0a:d9:0d:da:05:be:4e:2c:5c:2c:
         7c:5d:a9:3e:fc:52:9e:f7:c3:42:e6:bf:94:02:75:2a:7d:86:
         cb:b0:ba:96:91:08:e9:ea:b6:81:1f:46:a7:6e:34:ae:7c:b6:
         67:83:6a:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGL9gnkik/T43FlIfTD8L+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMzM3ZWFkNmI5YjkzZGQwZDc1OGFiZjlkN2IzMDMwNzJh
OTllYjkwHhcNMjUwNjA2MTcwMDI5WhcNMjUwNjA3MTcwMDI5WjAzMTEwLwYDVQQD
EyhhYWZlMDViMjRkMDg2ZmMyMWMwOTQwOWViOTQzMGY3YzhlOWQxMGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+rNPFpB+R5N3wlnjk49ozGbZVvvW
mp10Qox/zxzCPbccw5YQC2JYHYjsq/4nUETGYpEluElZp6yu97KbZFVHcB32zWFT
SCBjMA/FM2CGktQgDVXGem9Lua8a4/cMXrsY2cjo1hqgfINxr4d7R8K3V0IZv7LI
4FAcbu0t+P/4PE4+ujc5y/FOwZ2Swgh1P4QOV9uGF7Fw2sofVp0D07xTo48rTY2e
mxsIfhhfWKAXbhlpXCWtDdIbUlXaU9ZCrzGSpa9i9XQ42RAIsXeABhwMIjirCzvE
IintbvZ8wfgZy+a7yvl7dTQw3ufH0PMSNorESxVWQnC3K/8k1Ph+Cma45wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKr+BbJNCG/CHAlAnrlDD3yOnRC7MB8GA1UdIwQY
MBaAFOszfq1rm5PdDXWKv517MDByqZ65MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnpOLXJXdWJrOTBOZFlxX25Yc3dNSEtwbnJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iOGMzMGMtODJkOS00NmJiLWJiMDct
OWNhMTAwNDI4ZjEwLzEvNnpOLXJXdWJrOTBOZFlxX25Yc3dNSEtwbnJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9iOGMzMGMtODJkOS00NmJiLWJiMDctOWNhMTAwNDI4ZjEw
LzEvNnpOLXJXdWJrOTBOZFlxX25Yc3dNSEtwbnJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUv7LMI3J
dNfwv4Ecjvfq56VfdwAqlPFHuF29A/rYYIDMXQDPCj21I25afWNB24F3PaClXcEX
eQH+HrecwPgp3A1vBDWC28/EIYScdpEEzRvX3zC6Y0aW6jlnUcMTSpRSJsu1huBb
Te0CScO3GJaMJAhBfQPtYP9vSxIOJ9dSCsb8kWlWCYH7/nHkFodmmCo6zdVVIEo/
5phT0rJ08QiS9DvH6go9eu0PmzN5/7Woi609l1jccuJTvBJ/9zTsknLmd7uwPguF
B69OhtVYEtUK2Q3aBb5OLFwsfF2pPvxSnvfDQua/lAJ1Kn2Gy7C6lpEI6eq2gR9G
p240rny2Z4NqDw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:18 2025 by rpki-client