Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft
File:                     6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft (raw, json)
Hash identifier:          l8b18C4ZKiwFRNiktVCMS3gge0bxKFWA8LDn/zyLnx0=
Subject key identifier:   95:7E:B8:16:76:58:E9:61:E0:48:5E:44:E8:57:8A:DF:BB:D0:26:28
Authority key identifier: EA:35:52:FC:45:A3:66:40:9B:9F:C7:BD:96:13:A5:9F:1F:E0:6E:4D
Certificate issuer:       /CN=ea3552fc45a366409b9fc7bd9613a59f1fe06e4d
Certificate serial:       01976AAA1762A81D8F87C47901090F2D25EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6jVS_EWjZkCbn8e9lhOlnx_gbk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft
Manifest number:          099A
Signing time:             Fri 13 Jun 2025 19:00:21 +0000
Manifest this update:     Fri 13 Jun 2025 19:00:21 +0000
Manifest next update:     Sat 14 Jun 2025 19:00:21 +0000
Files and hashes:         1: 6jVS_EWjZkCbn8e9lhOlnx_gbk0.crl (hash: ehCONIF81ija0OIpeKWavD8Bsj21Fx/ppT2iPwR6hIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6jVS_EWjZkCbn8e9lhOlnx_gbk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:aa:17:62:a8:1d:8f:87:c4:79:01:09:0f:2d:25:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea3552fc45a366409b9fc7bd9613a59f1fe06e4d
        Validity
            Not Before: Jun 13 19:00:21 2025 GMT
            Not After : Jun 14 19:00:21 2025 GMT
        Subject: CN=957eb8167658e961e0485e44e8578adfbbd02628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ad:7d:60:41:26:d6:e6:9f:4f:de:37:87:09:
                    68:0f:2b:bc:ee:9f:8e:cd:4d:67:6e:c8:19:3c:19:
                    e2:57:35:3f:a0:23:ad:8d:a5:6f:9a:3d:90:96:4f:
                    78:1b:95:86:49:25:32:5c:d3:bf:13:34:cf:29:33:
                    4b:e7:6f:b4:0d:42:ab:7c:cb:30:39:e7:96:d1:a9:
                    f4:96:c2:56:3a:10:f4:80:a9:b8:3a:6d:d3:d4:63:
                    c9:8a:8a:ba:ff:74:53:cb:35:2f:21:fa:b8:26:19:
                    2f:5b:d7:e4:a5:ba:7d:2b:a3:db:87:92:24:e3:52:
                    5e:76:95:16:3b:dd:0c:46:6a:b2:cc:af:17:94:48:
                    8e:d7:5f:cc:a9:4f:83:cf:d1:66:46:cb:c3:5f:23:
                    81:07:42:4a:15:3c:cb:36:c9:ec:40:a8:d6:8e:fd:
                    1e:6b:5e:59:90:a6:9b:84:8a:10:fd:d3:59:fb:2a:
                    5c:69:57:e7:75:75:a1:36:d2:da:ae:de:2e:53:1b:
                    f0:f8:a0:fd:db:eb:ca:c8:29:9b:9e:6f:af:7e:89:
                    2e:6b:12:5b:03:b2:3d:28:88:42:de:ea:ad:c1:da:
                    98:6f:6a:3a:92:e5:2c:8e:2d:22:d5:fa:84:5a:e3:
                    53:96:a2:76:74:c1:ae:b4:06:68:d8:06:c1:c7:32:
                    e8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7E:B8:16:76:58:E9:61:E0:48:5E:44:E8:57:8A:DF:BB:D0:26:28
            X509v3 Authority Key Identifier:
                keyid:EA:35:52:FC:45:A3:66:40:9B:9F:C7:BD:96:13:A5:9F:1F:E0:6E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jVS_EWjZkCbn8e9lhOlnx_gbk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:36:fe:e3:cb:3c:49:f2:b5:9a:97:f1:ba:9e:07:a1:e6:0a:
         ba:b7:a7:7c:da:e2:e3:e1:d7:4c:d5:de:d4:d1:38:59:93:a1:
         18:c6:c8:83:cb:b3:e7:71:f6:7b:80:f8:3a:69:e7:d0:6f:34:
         aa:da:74:55:0c:90:60:c7:5b:b2:5c:80:f6:c8:c5:71:82:38:
         cd:02:f0:d4:9e:fd:e8:e5:bc:25:58:f5:b3:4a:a4:dc:7b:ad:
         86:e1:d1:d0:b0:44:1c:f9:2a:7a:2c:c1:ed:da:cc:47:06:f3:
         5b:04:82:5a:8e:1a:8c:99:2b:c0:ff:c3:60:8a:76:83:3a:84:
         97:36:20:02:a1:f0:4e:4b:56:e2:0f:b4:0b:4e:5a:f0:21:56:
         d6:25:62:a3:bc:fa:a8:22:02:5c:a7:78:7b:b5:ef:f2:50:20:
         6c:f2:d9:c4:9b:4f:b1:8d:46:db:ea:a3:6f:c2:89:36:b2:fd:
         a6:db:22:85:10:44:44:4a:f1:c2:35:9d:ac:ef:e7:c7:ab:20:
         70:82:8e:e2:13:47:93:9d:a9:1f:53:26:f1:80:0b:d9:dc:3f:
         9e:e4:3c:d5:44:2a:14:33:28:52:89:97:f2:78:3d:fd:18:d8:
         99:5e:5e:68:2c:21:a7:7c:10:7a:d7:92:e5:94:bb:69:fd:36:
         92:9a:16:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqqhdiqB2Ph8R5AQkPLSXqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMzU1MmZjNDVhMzY2NDA5YjlmYzdiZDk2MTNhNTlmMWZl
MDZlNGQwHhcNMjUwNjEzMTkwMDIxWhcNMjUwNjE0MTkwMDIxWjAzMTEwLwYDVQQD
Eyg5NTdlYjgxNjc2NThlOTYxZTA0ODVlNDRlODU3OGFkZmJiZDAyNjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv619YEEm1uafT943hwloDyu87p+O
zU1nbsgZPBniVzU/oCOtjaVvmj2Qlk94G5WGSSUyXNO/EzTPKTNL52+0DUKrfMsw
OeeW0an0lsJWOhD0gKm4Om3T1GPJioq6/3RTyzUvIfq4JhkvW9fkpbp9K6Pbh5Ik
41JedpUWO90MRmqyzK8XlEiO11/MqU+Dz9FmRsvDXyOBB0JKFTzLNsnsQKjWjv0e
a15ZkKabhIoQ/dNZ+ypcaVfndXWhNtLart4uUxvw+KD92+vKyCmbnm+vfokuaxJb
A7I9KIhC3uqtwdqYb2o6kuUsji0i1fqEWuNTlqJ2dMGutAZo2AbBxzLo7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJV+uBZ2WOlh4EheROhXit+70CYoMB8GA1UdIwQY
MBaAFOo1UvxFo2ZAm5/HvZYTpZ8f4G5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmpWU19FV2paa0NibjhlOWxoT2xueF9nYmswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82MjhkYTYtODMyNS00YzI1LTk4Mzct
ZDQxYzNlM2MzNTU1LzEvNmpWU19FV2paa0NibjhlOWxoT2xueF9nYmswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82MjhkYTYtODMyNS00YzI1LTk4MzctZDQxYzNlM2MzNTU1
LzEvNmpWU19FV2paa0NibjhlOWxoT2xueF9nYmswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDb+48s8
SfK1mpfxup4HoeYKurenfNri4+HXTNXe1NE4WZOhGMbIg8uz53H2e4D4Omnn0G80
qtp0VQyQYMdbslyA9sjFcYI4zQLw1J796OW8JVj1s0qk3HuthuHR0LBEHPkqeizB
7drMRwbzWwSCWo4ajJkrwP/DYIp2gzqElzYgAqHwTktW4g+0C05a8CFW1iVio7z6
qCICXKd4e7Xv8lAgbPLZxJtPsY1G2+qjb8KJNrL9ptsihRBERErxwjWdrO/nx6sg
cIKO4hNHk52pH1Mm8YAL2dw/nuQ81UQqFDMoUomX8ng9/RjYmV5eaCwhp3wQeteS
5ZS7af02kpoWcA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 00:39:36 2025 by rpki-client