Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.mft
File:                     6C8spT8bM9G1NUaiMJXThP8jdwM.mft (raw, json)
Hash identifier:          OpXkVy60UG/O7R0dBDndh50I9pGo9pgQOYyXlgj1l8c=
Subject key identifier:   B4:1A:A4:DA:25:20:87:62:F9:46:62:F7:F2:73:9D:0D:9B:0B:47:89
Authority key identifier: E8:2F:2C:A5:3F:1B:33:D1:B5:35:46:A2:30:95:D3:84:FF:23:77:03
Certificate issuer:       /CN=e82f2ca53f1b33d1b53546a23095d384ff237703
Certificate serial:       01974CD74A8A0C703F2A259430E6F2C3B5C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6C8spT8bM9G1NUaiMJXThP8jdwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.mft
Manifest number:          1579
Signing time:             Sun 08 Jun 2025 00:01:07 +0000
Manifest this update:     Sun 08 Jun 2025 00:01:07 +0000
Manifest next update:     Mon 09 Jun 2025 00:01:07 +0000
Files and hashes:         1: 6C8spT8bM9G1NUaiMJXThP8jdwM.crl (hash: OY7S/QZ3F9xlGH9ZacyxrCDEMNntf6Ke80RbbHj5Tjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6C8spT8bM9G1NUaiMJXThP8jdwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:d7:4a:8a:0c:70:3f:2a:25:94:30:e6:f2:c3:b5:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82f2ca53f1b33d1b53546a23095d384ff237703
        Validity
            Not Before: Jun  8 00:01:07 2025 GMT
            Not After : Jun  9 00:01:07 2025 GMT
        Subject: CN=b41aa4da25208762f94662f7f2739d0d9b0b4789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1b:58:af:b5:38:77:0c:2a:f9:eb:e4:1f:8c:
                    63:0e:15:81:df:7f:ed:c1:27:22:96:74:c4:91:82:
                    7f:4e:7e:cf:fb:d3:c8:ea:9b:7c:ed:e4:7f:da:06:
                    cc:91:06:be:a6:6f:c9:c0:34:ea:45:c4:3f:4b:e2:
                    40:eb:33:74:31:3c:45:5d:5e:18:a3:b0:a8:13:f3:
                    3f:d0:68:5f:8a:e4:69:58:30:e0:3b:eb:dd:67:29:
                    ae:56:fd:aa:24:a7:88:28:79:64:50:ce:8f:aa:db:
                    6e:b3:35:16:0c:ce:89:42:69:72:04:ec:7f:b6:85:
                    6c:02:1e:b3:7d:58:e5:48:3b:e8:4a:4f:43:15:26:
                    d6:6f:b0:45:07:3a:76:72:ce:03:6d:77:a0:90:81:
                    52:9d:b9:bf:f9:e5:45:ac:c4:30:0f:d0:fe:14:7c:
                    28:9e:8c:df:8c:0a:51:42:bb:33:0e:c4:83:22:20:
                    f7:05:d8:b3:a6:9d:30:e2:cd:c1:2f:8a:75:c1:b1:
                    22:97:c9:10:83:f3:0b:a0:51:31:a5:dc:c3:cc:83:
                    ae:76:c2:ad:cb:29:4e:02:51:9f:c0:16:3e:40:f3:
                    a4:b9:fd:d9:95:a5:b1:a7:10:ac:17:12:ce:84:2b:
                    7c:b3:67:3d:ea:eb:a9:2d:e3:1a:b2:75:66:af:da:
                    89:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1A:A4:DA:25:20:87:62:F9:46:62:F7:F2:73:9D:0D:9B:0B:47:89
            X509v3 Authority Key Identifier:
                keyid:E8:2F:2C:A5:3F:1B:33:D1:B5:35:46:A2:30:95:D3:84:FF:23:77:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6C8spT8bM9G1NUaiMJXThP8jdwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:dc:c5:9a:5d:47:e4:41:85:8d:88:d3:bf:10:d7:48:03:f8:
         e1:65:d1:39:44:72:ee:88:b5:38:60:b6:58:d0:5f:8e:51:eb:
         a8:74:75:60:8b:af:3b:26:32:2e:26:1e:14:54:c6:fd:43:dc:
         e3:eb:a7:31:f2:2b:62:84:3b:f6:91:82:d2:98:cd:41:68:d8:
         58:9d:90:95:13:16:86:af:38:74:23:91:a9:4f:69:9c:1f:c8:
         87:62:81:91:ca:a6:ab:e1:c7:fb:ca:86:35:2b:3a:a0:9a:7f:
         25:41:f5:a8:d0:f9:8d:32:93:fe:de:aa:b5:44:11:23:4b:80:
         e1:70:a2:26:1a:06:1b:f3:87:78:72:47:c4:5e:14:a9:8f:f4:
         89:a5:f9:a8:d2:c6:10:dd:69:f7:bb:b1:4a:9d:a2:35:ad:5b:
         d3:1a:2f:1e:fc:50:56:c2:6d:04:0e:22:75:8b:13:49:d6:5b:
         ce:6a:31:77:1f:91:5f:3b:76:a1:fe:54:f3:12:a0:5f:ae:78:
         21:c0:c0:b7:37:69:12:06:71:34:21:61:35:e1:af:07:2a:f5:
         78:bd:eb:58:ad:e1:a2:29:ec:05:90:02:80:fc:a6:9b:4a:a3:
         d5:a2:51:47:ab:54:fb:98:d3:16:68:c7:ac:47:7b:50:54:08:
         6a:64:c3:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdM10qKDHA/KiWUMObyw7XHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MmYyY2E1M2YxYjMzZDFiNTM1NDZhMjMwOTVkMzg0ZmYy
Mzc3MDMwHhcNMjUwNjA4MDAwMTA3WhcNMjUwNjA5MDAwMTA3WjAzMTEwLwYDVQQD
EyhiNDFhYTRkYTI1MjA4NzYyZjk0NjYyZjdmMjczOWQwZDliMGI0Nzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhtYr7U4dwwq+evkH4xjDhWB33/t
wScilnTEkYJ/Tn7P+9PI6pt87eR/2gbMkQa+pm/JwDTqRcQ/S+JA6zN0MTxFXV4Y
o7CoE/M/0GhfiuRpWDDgO+vdZymuVv2qJKeIKHlkUM6PqttuszUWDM6JQmlyBOx/
toVsAh6zfVjlSDvoSk9DFSbWb7BFBzp2cs4DbXegkIFSnbm/+eVFrMQwD9D+FHwo
nozfjApRQrszDsSDIiD3Bdizpp0w4s3BL4p1wbEil8kQg/MLoFExpdzDzIOudsKt
yylOAlGfwBY+QPOkuf3ZlaWxpxCsFxLOhCt8s2c96uupLeMasnVmr9qJ/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQapNolIIdi+UZi9/JznQ2bC0eJMB8GA1UdIwQY
MBaAFOgvLKU/GzPRtTVGojCV04T/I3cDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkM4c3BUOGJNOUcxTlVhaU1KWFRoUDhqZHdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS85YWIxMmQtZDdmZS00ODgxLTlmYmUt
NWY5MjI5YjI2MWI1LzEvNkM4c3BUOGJNOUcxTlVhaU1KWFRoUDhqZHdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS85YWIxMmQtZDdmZS00ODgxLTlmYmUtNWY5MjI5YjI2MWI1
LzEvNkM4c3BUOGJNOUcxTlVhaU1KWFRoUDhqZHdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdzFml1H
5EGFjYjTvxDXSAP44WXROURy7oi1OGC2WNBfjlHrqHR1YIuvOyYyLiYeFFTG/UPc
4+unMfIrYoQ79pGC0pjNQWjYWJ2QlRMWhq84dCORqU9pnB/Ih2KBkcqmq+HH+8qG
NSs6oJp/JUH1qND5jTKT/t6qtUQRI0uA4XCiJhoGG/OHeHJHxF4UqY/0iaX5qNLG
EN1p97uxSp2iNa1b0xovHvxQVsJtBA4idYsTSdZbzmoxdx+RXzt2of5U8xKgX654
IcDAtzdpEgZxNCFhNeGvByr1eL3rWK3hoinsBZACgPymm0qj1aJRR6tU+5jTFmjH
rEd7UFQIamTDLw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:09:47 2025 by rpki-client