Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft
File:                     6YMf0OexWxfgoKfcz8q7Bj18R8o.mft (raw, json)
Hash identifier:          hFXLzP7OZYVya/vRhqOFtv/asQG1p3elZs30pXYqhIA=
Subject key identifier:   57:45:76:69:B6:B3:18:6B:BB:B6:1F:45:E0:45:45:84:F8:16:50:5E
Authority key identifier: E9:83:1F:D0:E7:B1:5B:17:E0:A0:A7:DC:CF:CA:BB:06:3D:7C:47:CA
Certificate issuer:       /CN=e9831fd0e7b15b17e0a0a7dccfcabb063d7c47ca
Certificate serial:       019651242F1F32394042694F583F14F83383
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6YMf0OexWxfgoKfcz8q7Bj18R8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft
Manifest number:          02DD
Signing time:             Sun 20 Apr 2025 03:00:47 +0000
Manifest this update:     Sun 20 Apr 2025 03:00:47 +0000
Manifest next update:     Mon 21 Apr 2025 03:00:47 +0000
Files and hashes:         1: 6YMf0OexWxfgoKfcz8q7Bj18R8o.crl (hash: HpkGjWwC08tj8TSVn4oVpaSIDbVA+IYGA5sB23CqYLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6YMf0OexWxfgoKfcz8q7Bj18R8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 03:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:24:2f:1f:32:39:40:42:69:4f:58:3f:14:f8:33:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9831fd0e7b15b17e0a0a7dccfcabb063d7c47ca
        Validity
            Not Before: Apr 20 03:00:47 2025 GMT
            Not After : Apr 21 03:00:47 2025 GMT
        Subject: CN=57457669b6b3186bbbb61f45e0454584f816505e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a0:7e:8d:10:49:13:7c:c2:fa:65:3b:17:54:
                    8c:63:8a:08:2e:45:67:88:f5:94:0e:16:50:be:bc:
                    80:b9:47:d3:da:45:3f:a0:ad:92:9d:5f:fb:0b:7b:
                    f7:06:d9:6c:9b:d3:af:31:7e:2a:4b:8a:06:cf:df:
                    95:41:a7:90:8d:d2:af:dd:10:e4:a3:42:82:9d:ab:
                    27:dc:6c:4d:ee:04:f8:f4:eb:d1:cd:57:9d:d0:5a:
                    8b:e3:44:5f:3d:51:e3:67:54:3e:1d:f7:4f:6e:4b:
                    ff:ff:f2:72:dc:97:56:ff:b0:5c:12:d8:7d:27:95:
                    66:25:42:76:0e:11:20:ee:b0:3d:30:6b:07:c2:c0:
                    55:98:49:69:3b:95:57:99:71:79:bc:81:b3:7a:86:
                    e3:c9:03:53:37:30:07:59:ce:2e:c2:19:8e:22:55:
                    5c:6b:49:61:bc:86:b7:d6:27:39:69:6e:bb:d9:f2:
                    69:2c:5f:3c:85:ff:6f:a1:53:d3:7c:76:5b:38:88:
                    11:75:1c:f8:8d:a6:10:e5:80:d0:31:ab:a9:2d:d8:
                    82:8f:cb:92:e4:45:81:70:12:33:a3:f8:c7:29:ba:
                    b8:93:fc:40:4a:86:44:5e:24:9e:49:a4:9c:5c:39:
                    75:18:56:19:fb:f6:78:b2:47:fe:6a:12:98:4b:e8:
                    c4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:45:76:69:B6:B3:18:6B:BB:B6:1F:45:E0:45:45:84:F8:16:50:5E
            X509v3 Authority Key Identifier:
                keyid:E9:83:1F:D0:E7:B1:5B:17:E0:A0:A7:DC:CF:CA:BB:06:3D:7C:47:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6YMf0OexWxfgoKfcz8q7Bj18R8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:3d:16:de:ca:ab:74:8f:53:02:b2:dc:e5:81:be:cc:59:a9:
         ec:61:f7:8f:c5:42:8c:27:9a:d9:b9:b2:54:16:ce:78:6a:b9:
         ae:56:41:a7:18:ba:7c:84:20:ea:a9:cd:76:6c:fd:44:44:82:
         9c:7a:80:d8:fb:78:10:f1:13:65:49:04:b2:49:b1:07:14:56:
         44:1a:34:80:a5:94:1e:d1:09:c8:7f:18:cd:80:69:74:a0:34:
         63:cc:65:02:40:d9:a8:94:0c:7c:01:98:e8:9e:2d:0b:2d:2d:
         84:e4:6d:a6:4f:af:a8:4a:fe:5f:31:ef:6d:9b:28:6e:8c:d4:
         cd:b7:36:d7:53:38:2d:b9:00:df:b7:3b:85:28:1b:8f:0f:8a:
         66:a7:d5:df:f3:7e:4b:98:4d:b1:c4:53:3d:97:66:53:59:f5:
         f1:8b:99:03:5a:2f:30:d7:d3:43:ec:af:3e:8e:a4:cf:7f:8f:
         67:2a:92:5b:3d:31:93:8b:92:c2:62:a3:7f:7b:56:02:c5:19:
         f5:c3:83:bf:6b:04:bd:4d:0a:17:64:48:86:89:53:8b:f9:74:
         32:31:02:18:24:cc:0f:22:99:c6:43:61:c4:b9:12:4a:eb:51:
         ab:c3:a7:aa:ee:03:3a:43:9a:56:61:a7:45:41:d6:87:74:c8:
         0d:11:61:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRJC8fMjlAQmlPWD8U+DODMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ODMxZmQwZTdiMTViMTdlMGEwYTdkY2NmY2FiYjA2M2Q3
YzQ3Y2EwHhcNMjUwNDIwMDMwMDQ3WhcNMjUwNDIxMDMwMDQ3WjAzMTEwLwYDVQQD
Eyg1NzQ1NzY2OWI2YjMxODZiYmJiNjFmNDVlMDQ1NDU4NGY4MTY1MDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaB+jRBJE3zC+mU7F1SMY4oILkVn
iPWUDhZQvryAuUfT2kU/oK2SnV/7C3v3Btlsm9OvMX4qS4oGz9+VQaeQjdKv3RDk
o0KCnasn3GxN7gT49OvRzVed0FqL40RfPVHjZ1Q+HfdPbkv///Jy3JdW/7BcEth9
J5VmJUJ2DhEg7rA9MGsHwsBVmElpO5VXmXF5vIGzeobjyQNTNzAHWc4uwhmOIlVc
a0lhvIa31ic5aW672fJpLF88hf9voVPTfHZbOIgRdRz4jaYQ5YDQMaupLdiCj8uS
5EWBcBIzo/jHKbq4k/xASoZEXiSeSaScXDl1GFYZ+/Z4skf+ahKYS+jEUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdFdmm2sxhru7YfReBFRYT4FlBeMB8GA1UdIwQY
MBaAFOmDH9DnsVsX4KCn3M/KuwY9fEfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNllNZjBPZXhXeGZnb0tmY3o4cTdCajE4UjhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi85NGZkOGEtM2I2NS00YWY3LTg4NWQt
MDE0N2UxM2E5OTNlLzEvNllNZjBPZXhXeGZnb0tmY3o4cTdCajE4UjhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi85NGZkOGEtM2I2NS00YWY3LTg4NWQtMDE0N2UxM2E5OTNl
LzEvNllNZjBPZXhXeGZnb0tmY3o4cTdCajE4UjhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXz0W3sqr
dI9TArLc5YG+zFmp7GH3j8VCjCea2bmyVBbOeGq5rlZBpxi6fIQg6qnNdmz9RESC
nHqA2Pt4EPETZUkEskmxBxRWRBo0gKWUHtEJyH8YzYBpdKA0Y8xlAkDZqJQMfAGY
6J4tCy0thORtpk+vqEr+XzHvbZsobozUzbc211M4LbkA37c7hSgbjw+KZqfV3/N+
S5hNscRTPZdmU1n18YuZA1ovMNfTQ+yvPo6kz3+PZyqSWz0xk4uSwmKjf3tWAsUZ
9cODv2sEvU0KF2RIholTi/l0MjECGCTMDyKZxkNhxLkSSutRq8Onqu4DOkOaVmGn
RUHWh3TIDRFhQg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:18 2025 by rpki-client