Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
File:                     a4T-xJBquJAgoRa2hEbM6vbMUA8.mft (raw, json)
Hash identifier:          udkkZePGS48HIdTNK3m2J40C95S72xdXqDYl6m+Y3Mk=
Subject key identifier:   6B:37:3E:08:FC:F3:BB:F0:F5:20:5C:1A:36:D7:99:4A:7B:CC:33:B3
Authority key identifier: 6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F
Certificate issuer:       /CN=6b84fec4906ab89020a116b68446cceaf6cc500f
Certificate serial:       019748C2ED960A06D3DFC68710376DC92900
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
Manifest number:          0B04
Signing time:             Sat 07 Jun 2025 05:00:23 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:23 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:23 +0000
Files and hashes:         1: a4T-xJBquJAgoRa2hEbM6vbMUA8.crl (hash: V5g6yV08/cWIWyM6K600ZML9LrisJnwr/gpxgWFA7gQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c2:ed:96:0a:06:d3:df:c6:87:10:37:6d:c9:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b84fec4906ab89020a116b68446cceaf6cc500f
        Validity
            Not Before: Jun  7 05:00:23 2025 GMT
            Not After : Jun  8 05:00:23 2025 GMT
        Subject: CN=6b373e08fcf3bbf0f5205c1a36d7994a7bcc33b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:48:e6:7b:36:33:88:91:dc:be:7d:76:8d:36:
                    d3:73:a1:fc:90:25:5e:d6:ba:2b:d6:b9:4f:62:bc:
                    35:ef:f2:23:e1:1e:f5:de:a3:f1:27:45:28:67:0b:
                    ab:b3:15:76:02:bd:ea:cb:22:67:a6:e6:64:24:07:
                    b7:b7:8c:03:cd:9f:91:c1:d3:dd:d9:54:42:f2:8a:
                    7c:6e:df:a3:87:f8:bd:ad:81:2a:22:2e:72:7a:43:
                    23:c3:d8:21:8d:7c:22:91:f4:00:71:24:ce:b8:1d:
                    f0:4e:35:32:5f:1f:41:94:a4:46:73:b0:f0:8a:31:
                    7d:a8:9f:ed:38:1a:c2:1a:de:3a:33:0d:a9:a6:ae:
                    cf:81:5b:64:c4:2e:30:25:fe:20:9d:d6:41:a7:e6:
                    66:59:02:d1:70:93:f0:7e:b6:ee:d2:64:32:a0:6b:
                    47:75:5c:f4:c9:be:f8:12:f8:b8:0f:1b:c7:4b:3a:
                    d7:24:14:27:f3:6c:f2:fb:3c:dd:b3:16:dd:53:da:
                    3b:0c:5a:e3:63:c6:ac:e2:9f:15:d9:b6:c5:82:90:
                    97:a2:6d:15:ea:ac:88:40:3c:65:cf:ec:f3:11:75:
                    28:96:ca:66:5d:86:8d:e7:2e:77:3f:b2:aa:bd:0c:
                    42:6e:93:ca:df:c2:b0:65:8a:a6:9e:8a:32:d6:80:
                    e9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:37:3E:08:FC:F3:BB:F0:F5:20:5C:1A:36:D7:99:4A:7B:CC:33:B3
            X509v3 Authority Key Identifier:
                keyid:6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b1:f4:dd:e1:87:67:ca:c8:05:9d:17:53:8f:24:40:2a:3a:
         76:a4:47:8f:fc:9c:b1:0d:00:a8:aa:98:19:38:3e:c5:ef:ca:
         2a:72:e1:96:ec:4d:c4:e8:a8:2d:05:5d:d2:27:67:f5:ed:b9:
         0e:55:51:fc:08:7f:28:a0:64:52:b4:1a:76:15:82:e7:13:04:
         78:45:f0:7b:0a:95:6d:ba:40:97:dc:eb:49:5a:89:f4:62:f3:
         93:c2:a8:5a:b8:a9:4e:76:02:a1:d6:4d:51:36:f3:52:4b:7f:
         89:73:28:8f:8a:32:6a:7b:6a:f6:ba:fe:41:55:92:0e:51:8c:
         8e:cd:16:4f:66:6f:ae:8f:43:6f:93:90:ef:53:62:d5:ec:9d:
         76:b9:5b:6b:d1:ad:12:f5:c6:06:68:24:9d:16:30:d3:85:b8:
         7e:8d:18:ea:f1:17:d6:ee:55:05:3c:e6:4f:ac:c9:d4:32:c5:
         5e:59:a7:e2:91:d1:e2:f0:4e:ce:f9:a8:4e:ac:7a:40:40:a8:
         ac:d7:32:c2:6f:87:20:13:ea:f9:d4:5b:e7:e9:de:51:bd:3a:
         5d:a8:00:d9:f6:19:67:91:5f:05:e3:3f:7c:30:d8:09:6e:e1:
         d3:ff:4e:d7:b1:5f:cc:f4:8e:98:2c:9b:97:c7:e0:a3:ef:d1:
         a8:98:48:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIwu2WCgbT38aHEDdtySkAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiODRmZWM0OTA2YWI4OTAyMGExMTZiNjg0NDZjY2VhZjZj
YzUwMGYwHhcNMjUwNjA3MDUwMDIzWhcNMjUwNjA4MDUwMDIzWjAzMTEwLwYDVQQD
Eyg2YjM3M2UwOGZjZjNiYmYwZjUyMDVjMWEzNmQ3OTk0YTdiY2MzM2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkjmezYziJHcvn12jTbTc6H8kCVe
1ror1rlPYrw17/Ij4R713qPxJ0UoZwursxV2Ar3qyyJnpuZkJAe3t4wDzZ+RwdPd
2VRC8op8bt+jh/i9rYEqIi5yekMjw9ghjXwikfQAcSTOuB3wTjUyXx9BlKRGc7Dw
ijF9qJ/tOBrCGt46Mw2ppq7PgVtkxC4wJf4gndZBp+ZmWQLRcJPwfrbu0mQyoGtH
dVz0yb74Evi4DxvHSzrXJBQn82zy+zzdsxbdU9o7DFrjY8as4p8V2bbFgpCXom0V
6qyIQDxlz+zzEXUolspmXYaN5y53P7KqvQxCbpPK38KwZYqmnooy1oDpPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGs3Pgj887vw9SBcGjbXmUp7zDOzMB8GA1UdIwQY
MBaAFGuE/sSQariQIKEWtoRGzOr2zFAPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTRULXhKQnF1SkFnb1JhMmhFYk02dmJNVUE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8wMjYzZmEtM2FmZi00N2RjLTgyYjgt
ZDFkOTQ3ZTczMzA5LzEvYTRULXhKQnF1SkFnb1JhMmhFYk02dmJNVUE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8wMjYzZmEtM2FmZi00N2RjLTgyYjgtZDFkOTQ3ZTczMzA5
LzEvYTRULXhKQnF1SkFnb1JhMmhFYk02dmJNVUE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrH03eGH
Z8rIBZ0XU48kQCo6dqRHj/ycsQ0AqKqYGTg+xe/KKnLhluxNxOioLQVd0idn9e25
DlVR/Ah/KKBkUrQadhWC5xMEeEXwewqVbbpAl9zrSVqJ9GLzk8KoWripTnYCodZN
UTbzUkt/iXMoj4oyantq9rr+QVWSDlGMjs0WT2Zvro9Db5OQ71Ni1eyddrlba9Gt
EvXGBmgknRYw04W4fo0Y6vEX1u5VBTzmT6zJ1DLFXlmn4pHR4vBOzvmoTqx6QECo
rNcywm+HIBPq+dRb5+neUb06XagA2fYZZ5FfBeM/fDDYCW7h0/9O17FfzPSOmCyb
l8fgo+/RqJhIFQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:24:14 2025 by rpki-client