Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
File:                     h66JOPDgseq2FIgzbSPKORh9bqM.mft (raw, json)
Hash identifier:          mh/vJqzwoWVR70ESExM3GrFu8NXXrwpOzmJSWFQ2tNA=
Subject key identifier:   B2:0B:53:78:7F:42:D9:18:52:BB:14:60:5E:E2:C5:41:82:6E:E0:B5
Authority key identifier: 87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
Certificate issuer:       /CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
Certificate serial:       019750EA8F15080755D53C6775388B485EA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
Manifest number:          0493
Signing time:             Sun 08 Jun 2025 19:00:38 +0000
Manifest this update:     Sun 08 Jun 2025 19:00:38 +0000
Manifest next update:     Mon 09 Jun 2025 19:00:38 +0000
Files and hashes:         1: h66JOPDgseq2FIgzbSPKORh9bqM.crl (hash: f4xj6LiIjM9jFVRSe3Uiqfc4+Y3AJieAYUWfRGoXLlQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:ea:8f:15:08:07:55:d5:3c:67:75:38:8b:48:5e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
        Validity
            Not Before: Jun  8 19:00:38 2025 GMT
            Not After : Jun  9 19:00:38 2025 GMT
        Subject: CN=b20b53787f42d91852bb14605ee2c541826ee0b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7a:5b:a3:87:b9:81:02:f1:8e:2b:83:cf:63:
                    0a:50:4b:9f:60:4c:98:c0:b8:e9:01:a4:86:0e:ad:
                    e5:ad:1d:30:28:55:ed:46:97:9c:c6:83:cd:86:84:
                    6b:f9:44:22:17:c7:8a:e7:18:77:09:0f:ec:08:79:
                    ac:fb:c4:e6:38:87:9b:5e:5a:d9:52:98:03:a5:f6:
                    31:31:d2:33:d4:2d:c3:55:cb:d5:bb:a4:56:e2:c1:
                    5b:37:3b:7c:28:01:fc:01:f2:1b:a6:74:7b:da:84:
                    ec:c4:c3:12:54:78:d5:24:59:0e:e3:49:d2:ee:4e:
                    57:79:17:8e:8b:0d:c6:1d:83:6d:d6:67:ec:36:5d:
                    4f:ce:cc:51:95:5a:21:51:0a:1d:c1:41:7a:17:4a:
                    25:e4:96:5f:db:6c:96:8f:4a:b9:77:16:6b:1c:4c:
                    99:2f:66:da:29:cf:ee:4c:7c:37:2b:9a:23:e2:d1:
                    c1:ca:8e:6c:d7:19:c9:68:e8:43:33:d4:08:d8:d2:
                    09:83:45:f1:d0:78:b9:2b:2e:63:b1:bc:5a:ab:70:
                    52:32:07:77:51:37:da:9d:b9:e4:db:d7:f2:f3:4c:
                    ca:f3:46:20:0a:15:b4:fa:da:ce:48:35:ac:b8:ed:
                    10:6a:7b:fd:60:8f:34:a9:f3:81:ef:8e:ce:33:06:
                    b5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0B:53:78:7F:42:D9:18:52:BB:14:60:5E:E2:C5:41:82:6E:E0:B5
            X509v3 Authority Key Identifier:
                keyid:87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:de:9e:86:66:d0:c0:a3:29:04:0b:8d:50:e1:3c:eb:9e:fd:
         6d:1b:5f:94:f6:3c:90:1f:d1:14:88:9f:58:e6:21:ea:3c:87:
         ef:9a:a0:c7:1d:fb:3e:1e:e8:84:54:fb:a0:f0:c9:0b:78:de:
         dd:3c:ec:3a:d4:b9:16:f1:94:e8:e2:2d:4a:4d:25:40:9b:d8:
         0f:cd:a6:a3:a8:4a:f1:ae:2a:1e:86:68:3d:b8:6b:90:42:fc:
         07:fb:f0:28:8a:8e:8e:df:2c:75:64:79:63:f7:f1:51:02:c5:
         de:ac:44:67:d3:5a:95:a8:cf:de:e2:e1:8b:af:ee:23:53:d0:
         fa:94:be:87:d3:43:c5:07:23:96:93:aa:97:c7:b1:8f:ca:e8:
         48:6c:24:9b:b2:15:24:ab:6f:46:d7:15:a5:dd:09:a7:c7:ac:
         74:5c:ef:dd:17:e0:20:ad:09:7d:05:24:fe:fd:45:b6:22:57:
         f8:9d:ae:23:94:bf:65:ed:0e:4a:64:0f:fa:da:5c:07:d3:4e:
         d3:f6:d6:02:bc:50:06:17:20:1c:64:65:08:52:97:7f:82:37:
         91:5c:7f:93:42:39:1b:f2:71:b8:1e:48:f8:00:8b:df:87:8b:
         7f:3c:47:3a:69:a6:b0:5c:09:11:f3:95:a8:1c:7e:30:37:55:
         ae:08:0c:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQ6o8VCAdV1TxndTiLSF6iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YWU4OTM4ZjBlMGIxZWFiNjE0ODgzMzZkMjNjYTM5MTg3
ZDZlYTMwHhcNMjUwNjA4MTkwMDM4WhcNMjUwNjA5MTkwMDM4WjAzMTEwLwYDVQQD
EyhiMjBiNTM3ODdmNDJkOTE4NTJiYjE0NjA1ZWUyYzU0MTgyNmVlMGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHpbo4e5gQLxjiuDz2MKUEufYEyY
wLjpAaSGDq3lrR0wKFXtRpecxoPNhoRr+UQiF8eK5xh3CQ/sCHms+8TmOIebXlrZ
UpgDpfYxMdIz1C3DVcvVu6RW4sFbNzt8KAH8AfIbpnR72oTsxMMSVHjVJFkO40nS
7k5XeReOiw3GHYNt1mfsNl1PzsxRlVohUQodwUF6F0ol5JZf22yWj0q5dxZrHEyZ
L2baKc/uTHw3K5oj4tHByo5s1xnJaOhDM9QI2NIJg0Xx0Hi5Ky5jsbxaq3BSMgd3
UTfanbnk29fy80zK80YgChW0+trOSDWsuO0Qanv9YI80qfOB747OMwa1/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLILU3h/QtkYUrsUYF7ixUGCbuC1MB8GA1UdIwQY
MBaAFIeuiTjw4LHqthSIM20jyjkYfW6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDY2Sk9QRGdzZXEyRklnemJTUEtPUmg5YnFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC81ZWYzZTItMzFmZS00NjY0LWI1ZGYt
MjlkMGJhMTJlZGEyLzEvaDY2Sk9QRGdzZXEyRklnemJTUEtPUmg5YnFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC81ZWYzZTItMzFmZS00NjY0LWI1ZGYtMjlkMGJhMTJlZGEy
LzEvaDY2Sk9QRGdzZXEyRklnemJTUEtPUmg5YnFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ96ehmbQ
wKMpBAuNUOE86579bRtflPY8kB/RFIifWOYh6jyH75qgxx37Ph7ohFT7oPDJC3je
3TzsOtS5FvGU6OItSk0lQJvYD82mo6hK8a4qHoZoPbhrkEL8B/vwKIqOjt8sdWR5
Y/fxUQLF3qxEZ9NalajP3uLhi6/uI1PQ+pS+h9NDxQcjlpOql8exj8roSGwkm7IV
JKtvRtcVpd0Jp8esdFzv3RfgIK0JfQUk/v1FtiJX+J2uI5S/Ze0OSmQP+tpcB9NO
0/bWArxQBhcgHGRlCFKXf4I3kVx/k0I5G/JxuB5I+ACL34eLfzxHOmmmsFwJEfOV
qBx+MDdVrggMYA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:40:33 2025 by rpki-client