Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
File:                     6rBmxuGACj9b0uQG6aYg0qD29lM.mft (raw, json)
Hash identifier:          1R/FnToj9NhjSg1w90od61/8vfMe8yJH3rnkC27cQkw=
Subject key identifier:   75:9B:59:E4:29:D8:3A:23:68:32:FE:24:71:BD:C8:D2:51:0B:49:6B
Authority key identifier: EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53
Certificate issuer:       /CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653
Certificate serial:       019640670593264DF5342FC4F757D7724B4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
Manifest number:          0B87
Signing time:             Wed 16 Apr 2025 21:00:15 +0000
Manifest this update:     Wed 16 Apr 2025 21:00:15 +0000
Manifest next update:     Thu 17 Apr 2025 21:00:15 +0000
Files and hashes:         1: 6rBmxuGACj9b0uQG6aYg0qD29lM.crl (hash: 0qijB0B04L/CBY+Cw7d5jWyZSCenNnysg+KYWRdk1Ew=)
                          2: 9uvjekcau3PbfLrEyZwNzBwQO7Q.roa (hash: mH0HAaOf2X0fWHcxqJaO7mLzzy3VZpb8eqMe7h725z0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:40:67:05:93:26:4d:f5:34:2f:c4:f7:57:d7:72:4b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653
        Validity
            Not Before: Apr 16 21:00:15 2025 GMT
            Not After : Apr 17 21:00:15 2025 GMT
        Subject: CN=759b59e429d83a236832fe2471bdc8d2510b496b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:98:94:90:52:96:11:77:29:94:43:2c:0b:35:
                    90:74:85:67:e2:80:d9:b0:44:26:f7:36:46:86:ff:
                    5c:69:24:e0:9e:b8:43:bc:59:72:cc:7a:8e:71:19:
                    f4:77:db:4c:08:fe:a1:06:67:38:23:9c:c4:33:a9:
                    28:31:e2:81:04:2a:bb:70:ba:55:a1:30:0d:9e:a0:
                    87:ed:86:73:11:04:e0:44:64:bf:3c:72:45:1c:0d:
                    ae:2f:f9:a3:9f:90:eb:d1:96:31:a0:e7:44:0f:cc:
                    80:c3:fa:2f:b8:f8:b2:38:91:de:70:ad:1c:c9:ae:
                    48:b2:85:24:b6:c9:50:d1:07:0d:df:e4:28:81:2c:
                    aa:11:30:1d:23:9c:56:e1:17:6d:fc:a0:10:da:f3:
                    4d:5b:76:4a:b3:d2:59:7c:48:13:94:35:5c:35:af:
                    c4:3e:81:98:e2:8d:24:67:6a:25:36:86:4e:0a:3c:
                    66:49:3d:54:a0:1d:d4:00:f0:85:88:12:49:e4:29:
                    8d:ca:c2:9d:51:78:63:fb:ff:99:01:f8:3c:cd:c6:
                    72:e5:79:19:6c:9a:82:fc:0a:f2:9c:89:b3:cf:24:
                    da:18:b7:e7:ab:bd:e2:b1:08:b7:bb:8f:f2:b5:39:
                    0c:90:75:ca:83:85:fd:73:35:f3:c0:a9:77:55:be:
                    95:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9B:59:E4:29:D8:3A:23:68:32:FE:24:71:BD:C8:D2:51:0B:49:6B
            X509v3 Authority Key Identifier:
                keyid:EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e1:30:15:0f:1e:bc:ca:be:b1:34:25:f0:95:8b:de:26:3d:
         f8:06:23:33:14:15:19:85:ae:6d:4d:15:6a:f2:a5:0e:ee:84:
         55:f1:17:bf:8a:d5:de:16:40:70:e1:8b:31:c0:0a:78:a1:e9:
         c9:af:f8:36:77:0a:31:1a:03:15:46:03:51:0a:8e:2d:54:d0:
         d7:8c:e0:52:cb:9e:3b:b5:1d:fb:91:45:34:83:f6:59:e4:b8:
         77:54:d1:3a:87:3a:ba:10:1e:f3:37:e0:d2:fe:64:d0:03:39:
         95:fd:91:1e:1b:91:cd:5d:96:6e:a2:c2:05:90:e5:da:4a:13:
         50:dd:86:c7:6a:f5:f6:8b:01:9c:db:c7:d9:17:75:84:4d:f2:
         ae:e3:32:70:67:d4:00:9f:bc:84:f2:1c:a2:a5:97:a6:10:61:
         de:3d:05:41:68:77:5f:96:17:ac:8e:b1:ff:0f:f0:c0:bc:bb:
         a3:42:f3:16:54:b9:c9:ba:d6:e3:57:20:27:d0:db:0c:c3:66:
         fe:31:b2:e5:a1:97:c1:23:af:6d:3a:9d:4f:33:48:1c:11:c3:
         7c:a2:13:c6:af:ea:8d:4f:ac:3e:2c:a8:71:45:7f:bc:ce:09:
         8a:bb:77:27:6d:27:bd:57:d2:e7:f6:92:83:f3:e7:91:a5:21:
         9c:e9:04:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZAZwWTJk31NC/E91fXcktMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYjA2NmM2ZTE4MDBhM2Y1YmQyZTQwNmU5YTYyMGQyYTBm
NmY2NTMwHhcNMjUwNDE2MjEwMDE1WhcNMjUwNDE3MjEwMDE1WjAzMTEwLwYDVQQD
Eyg3NTliNTllNDI5ZDgzYTIzNjgzMmZlMjQ3MWJkYzhkMjUxMGI0OTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5iUkFKWEXcplEMsCzWQdIVn4oDZ
sEQm9zZGhv9caSTgnrhDvFlyzHqOcRn0d9tMCP6hBmc4I5zEM6koMeKBBCq7cLpV
oTANnqCH7YZzEQTgRGS/PHJFHA2uL/mjn5Dr0ZYxoOdED8yAw/ovuPiyOJHecK0c
ya5IsoUktslQ0QcN3+QogSyqETAdI5xW4Rdt/KAQ2vNNW3ZKs9JZfEgTlDVcNa/E
PoGY4o0kZ2olNoZOCjxmST1UoB3UAPCFiBJJ5CmNysKdUXhj+/+ZAfg8zcZy5XkZ
bJqC/ArynImzzyTaGLfnq73isQi3u4/ytTkMkHXKg4X9czXzwKl3Vb6VnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWbWeQp2DojaDL+JHG9yNJRC0lrMB8GA1UdIwQY
MBaAFOqwZsbhgAo/W9LkBummINKg9vZTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnJCbXh1R0FDajliMHVRRzZhWWcwcUQyOWxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi85MWQ2MjktN2QxZi00NWJkLWExZTEt
OTMxY2Y3OThlNDEyLzEvNnJCbXh1R0FDajliMHVRRzZhWWcwcUQyOWxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi85MWQ2MjktN2QxZi00NWJkLWExZTEtOTMxY2Y3OThlNDEy
LzEvNnJCbXh1R0FDajliMHVRRzZhWWcwcUQyOWxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARuEwFQ8e
vMq+sTQl8JWL3iY9+AYjMxQVGYWubU0VavKlDu6EVfEXv4rV3hZAcOGLMcAKeKHp
ya/4NncKMRoDFUYDUQqOLVTQ14zgUsueO7Ud+5FFNIP2WeS4d1TROoc6uhAe8zfg
0v5k0AM5lf2RHhuRzV2WbqLCBZDl2koTUN2Gx2r19osBnNvH2Rd1hE3yruMycGfU
AJ+8hPIcoqWXphBh3j0FQWh3X5YXrI6x/w/wwLy7o0LzFlS5ybrW41cgJ9DbDMNm
/jGy5aGXwSOvbTqdTzNIHBHDfKITxq/qjU+sPiyocUV/vM4Jirt3J20nvVfS5/aS
g/PnkaUhnOkEHA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 00:24:00 2025 by rpki-client