Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
File:                     5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft (raw, json)
Hash identifier:          YSyN34H3F/2SS78TfTj8GA7LA95babFBlSGjU5MF1gw=
Subject key identifier:   16:36:6A:83:1E:ED:C7:E9:C7:79:A8:3A:CC:5E:0D:E8:E5:DF:FE:35
Authority key identifier: E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06
Certificate issuer:       /CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
Certificate serial:       0197499F118457D2C78DE892698BB4432F17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
Manifest number:          0C5C
Signing time:             Sat 07 Jun 2025 09:00:50 +0000
Manifest this update:     Sat 07 Jun 2025 09:00:50 +0000
Manifest next update:     Sun 08 Jun 2025 09:00:50 +0000
Files and hashes:         1: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl (hash: FJvM2QRBlKS9Tcag8mVdkpV3CIjVtW2WMwoYN9zntts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:11:84:57:d2:c7:8d:e8:92:69:8b:b4:43:2f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
        Validity
            Not Before: Jun  7 09:00:50 2025 GMT
            Not After : Jun  8 09:00:50 2025 GMT
        Subject: CN=16366a831eedc7e9c779a83acc5e0de8e5dffe35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9f:fd:fa:9e:9a:07:ef:81:84:76:eb:c9:bd:
                    b8:28:3c:2a:a2:7a:07:bd:11:76:da:cb:e2:b9:a7:
                    da:0e:7f:42:32:5c:60:7f:6d:89:ad:04:c3:0a:57:
                    3d:32:13:53:c2:75:b9:43:db:b4:da:3f:81:b9:f4:
                    36:5e:8d:ba:dd:6c:aa:4b:10:49:82:a2:8f:99:6c:
                    06:8d:0f:71:5f:61:5b:93:bc:8c:c7:a3:a1:1f:45:
                    c5:28:46:a0:c8:aa:ec:29:ec:d3:f8:21:7e:e3:c1:
                    26:14:85:5c:b0:5d:fd:63:71:c2:f8:25:07:f5:88:
                    20:e9:1a:56:d5:76:e2:8d:65:3b:cc:99:72:42:4c:
                    4a:76:8a:5b:03:81:ac:cc:e9:78:d0:65:35:95:b4:
                    fc:49:d7:22:57:bc:18:0f:b3:a6:04:07:83:45:2f:
                    9d:0f:57:81:73:76:f2:bb:59:47:06:18:ea:bd:f8:
                    f5:6b:4e:d0:8c:45:51:88:4d:2a:6a:a2:5c:b1:4f:
                    14:47:b0:b9:e3:98:13:f4:29:a3:f8:81:62:4b:94:
                    35:2a:77:8b:a8:12:5e:79:c3:b4:19:f5:b0:86:83:
                    3e:17:b0:4b:ca:1c:17:4d:9b:5f:f7:a4:32:b5:81:
                    25:eb:23:22:71:6c:b7:07:32:ba:fa:3b:7c:d0:37:
                    da:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:36:6A:83:1E:ED:C7:E9:C7:79:A8:3A:CC:5E:0D:E8:E5:DF:FE:35
            X509v3 Authority Key Identifier:
                keyid:E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f8:87:4a:7c:09:d4:c6:ff:ac:47:75:1a:89:d2:a2:90:f0:
         45:29:27:34:bd:a4:2b:8d:a9:b3:52:c9:7f:56:dc:ea:3b:08:
         ef:77:92:1b:c8:92:08:9b:c0:8f:ae:22:ad:54:d8:78:86:8a:
         1a:1a:a4:2f:8a:7d:30:00:91:58:cd:ae:fa:3f:0e:a5:c3:7b:
         7e:b8:4d:4a:b5:42:91:ef:87:0c:ed:6b:94:80:ca:2f:36:73:
         5b:f2:28:9a:cc:11:15:6f:4b:20:fc:ea:95:fd:cf:6b:60:c6:
         3a:5a:0c:d2:0a:bc:44:43:f2:ca:88:aa:55:44:a1:07:b1:7b:
         bf:9d:ff:2d:36:e3:65:5f:43:a9:ea:57:30:39:cd:b5:a4:54:
         3a:8a:0b:3e:a4:f4:ae:ab:95:53:52:06:53:de:8d:c0:a0:87:
         5e:f1:f0:18:e4:ec:0f:65:fd:3d:05:a3:a4:70:4d:6a:03:18:
         a3:e3:2e:7c:0b:b7:7f:8d:8f:89:e0:bd:2b:d1:34:be:76:4b:
         a1:55:21:d4:60:03:d8:9d:22:af:d6:35:01:18:f9:38:2e:5a:
         3a:dc:e1:ce:81:6f:3b:f2:d2:6e:08:c9:c2:38:ad:dc:d0:92:
         48:7e:45:24:1f:cc:13:15:94:01:8a:9e:b5:93:56:af:03:7f:
         a4:e5:d1:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJnxGEV9LHjeiSaYu0Qy8XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YjkxYjE5ZjRiZGJkNmZmMWQ3ZjM3MmQzYTBkZDEzOTAw
NTAwMDYwHhcNMjUwNjA3MDkwMDUwWhcNMjUwNjA4MDkwMDUwWjAzMTEwLwYDVQQD
EygxNjM2NmE4MzFlZWRjN2U5Yzc3OWE4M2FjYzVlMGRlOGU1ZGZmZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5/9+p6aB++BhHbryb24KDwqonoH
vRF22sviuafaDn9CMlxgf22JrQTDClc9MhNTwnW5Q9u02j+BufQ2Xo263WyqSxBJ
gqKPmWwGjQ9xX2Fbk7yMx6OhH0XFKEagyKrsKezT+CF+48EmFIVcsF39Y3HC+CUH
9Ygg6RpW1XbijWU7zJlyQkxKdopbA4GszOl40GU1lbT8SdciV7wYD7OmBAeDRS+d
D1eBc3byu1lHBhjqvfj1a07QjEVRiE0qaqJcsU8UR7C545gT9Cmj+IFiS5Q1KneL
qBJeecO0GfWwhoM+F7BLyhwXTZtf96QytYEl6yMicWy3BzK6+jt80DfavwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBY2aoMe7cfpx3moOsxeDejl3/41MB8GA1UdIwQY
MBaAFOa5Gxn0vb1v8dfzctOg3ROQBQAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXJrYkdmUzl2V194MV9OeTA2RGRFNUFGQUFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85MzE1NDUtY2Y3Yi00ZDU4LWJlZDct
MDRiNTI4ZmFlMDNhLzEvNXJrYkdmUzl2V194MV9OeTA2RGRFNUFGQUFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS85MzE1NDUtY2Y3Yi00ZDU4LWJlZDctMDRiNTI4ZmFlMDNh
LzEvNXJrYkdmUzl2V194MV9OeTA2RGRFNUFGQUFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADviHSnwJ
1Mb/rEd1GonSopDwRSknNL2kK42ps1LJf1bc6jsI73eSG8iSCJvAj64irVTYeIaK
GhqkL4p9MACRWM2u+j8OpcN7frhNSrVCke+HDO1rlIDKLzZzW/IomswRFW9LIPzq
lf3Pa2DGOloM0gq8REPyyoiqVUShB7F7v53/LTbjZV9DqepXMDnNtaRUOooLPqT0
rquVU1IGU96NwKCHXvHwGOTsD2X9PQWjpHBNagMYo+MufAu3f42PieC9K9E0vnZL
oVUh1GAD2J0ir9Y1ARj5OC5aOtzhzoFvO/LSbgjJwjit3NCSSH5FJB/MExWUAYqe
tZNWrwN/pOXRUg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:28:30 2025 by rpki-client