Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
File:                     c1AO60fC8TVxh2oZZjU3-LY2qA8.mft (raw, json)
Hash identifier:          MzbP4OBrUIMR9vevbotrzsI7M7S2nHIrxxjWtTV+SvM=
Subject key identifier:   6B:48:44:20:C1:16:BA:8D:D4:DB:8C:45:E9:B9:1E:A6:12:D2:4D:49
Authority key identifier: 73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F
Certificate issuer:       /CN=73500eeb47c2f13571876a19663537f8b636a80f
Certificate serial:       01976884BC82C42D5BF669F322EBB65FE632
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
Manifest number:          0213
Signing time:             Fri 13 Jun 2025 09:00:18 +0000
Manifest this update:     Fri 13 Jun 2025 09:00:18 +0000
Manifest next update:     Sat 14 Jun 2025 09:00:18 +0000
Files and hashes:         1: c1AO60fC8TVxh2oZZjU3-LY2qA8.crl (hash: fXr4s45Ki/+ejY3qOK+2nExouSkg8QHOIUiHdrTmUDA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 09:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:84:bc:82:c4:2d:5b:f6:69:f3:22:eb:b6:5f:e6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73500eeb47c2f13571876a19663537f8b636a80f
        Validity
            Not Before: Jun 13 09:00:18 2025 GMT
            Not After : Jun 14 09:00:18 2025 GMT
        Subject: CN=6b484420c116ba8dd4db8c45e9b91ea612d24d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ad:84:03:e4:56:8b:c1:48:59:a7:73:bc:a8:
                    c6:26:24:87:f2:05:1d:04:59:5d:c7:a2:19:6d:2e:
                    60:6c:c1:9d:9f:f5:1c:89:99:e4:a2:50:bd:33:32:
                    c5:6c:ef:24:34:92:b0:63:4c:f8:9c:71:ce:f9:7f:
                    d2:ea:e6:3f:2d:cb:dd:a5:3e:aa:bc:31:a8:fa:e8:
                    bf:96:14:25:61:b8:44:46:1a:7e:8b:3f:66:a4:e9:
                    bd:ab:0e:3c:ef:8e:23:6a:ee:4d:8c:3f:e9:6b:e0:
                    12:7c:88:32:9e:cb:b1:32:9a:21:c8:84:1c:97:92:
                    56:fc:65:ea:4b:a5:5e:d2:fe:ab:bd:3a:7f:04:9a:
                    00:3a:8d:78:aa:e7:5a:22:a3:62:7a:3f:68:f7:a7:
                    38:e0:77:5c:a7:4f:5b:76:e0:80:3d:88:1e:93:5d:
                    88:3b:7c:40:41:7f:7b:43:bc:7c:64:fe:a2:ca:a3:
                    59:3a:96:b5:2b:5b:03:b0:d6:3d:07:20:3e:be:bb:
                    af:22:36:63:04:a6:a8:ac:0e:1e:1f:ef:b2:ea:0c:
                    76:c6:40:1d:f2:54:83:32:73:97:fe:b6:e4:17:9a:
                    d1:7d:44:9b:dc:b0:0d:2c:95:9a:5a:60:e8:82:bc:
                    a2:3f:b5:61:45:7c:28:f7:87:dc:14:f3:c2:24:62:
                    1c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:48:44:20:C1:16:BA:8D:D4:DB:8C:45:E9:B9:1E:A6:12:D2:4D:49
            X509v3 Authority Key Identifier:
                keyid:73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:df:cd:37:4e:f5:74:1f:99:ea:11:39:fb:76:3d:fa:ee:41:
         81:fa:51:21:cf:cc:3c:4a:9d:11:92:40:47:ec:3b:63:e5:c1:
         d1:d0:cb:e4:6c:e9:8f:49:25:68:30:4e:69:0d:32:81:b7:31:
         a0:3c:63:79:e9:63:58:9b:2f:9c:84:e6:25:7b:8b:b7:b5:18:
         70:c8:73:0c:d6:94:27:ba:b7:4c:15:26:d0:9d:6a:c0:20:c9:
         6b:a3:3d:61:c1:40:0e:40:d3:8a:76:3c:f3:8c:5f:1d:70:b8:
         6a:f4:a1:23:74:7e:e6:a1:7d:7a:4a:f3:bf:1c:52:61:75:4e:
         ae:f5:85:ff:68:0e:99:5d:ac:58:e1:36:de:46:5d:4c:64:bc:
         30:7c:10:b2:4f:aa:a5:b6:e4:5a:1f:f1:f4:cc:21:91:14:de:
         33:bb:53:9a:67:6f:5f:f6:c0:87:bb:e8:87:b0:44:7c:c2:8e:
         06:b1:56:e6:7d:6e:67:1b:c7:9e:26:71:cb:b7:bd:6d:a2:85:
         47:71:e8:28:19:06:64:6d:19:76:5a:8d:80:41:b8:ec:04:8b:
         47:f6:99:40:9e:24:5e:54:98:78:99:f6:dd:d7:62:84:54:4b:
         e8:9d:f9:df:4c:aa:a5:d3:75:77:45:8c:27:28:4b:a8:85:13:
         c4:87:5e:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdohLyCxC1b9mnzIuu2X+YyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNTAwZWViNDdjMmYxMzU3MTg3NmExOTY2MzUzN2Y4YjYz
NmE4MGYwHhcNMjUwNjEzMDkwMDE4WhcNMjUwNjE0MDkwMDE4WjAzMTEwLwYDVQQD
Eyg2YjQ4NDQyMGMxMTZiYThkZDRkYjhjNDVlOWI5MWVhNjEyZDI0ZDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA262EA+RWi8FIWadzvKjGJiSH8gUd
BFldx6IZbS5gbMGdn/UciZnkolC9MzLFbO8kNJKwY0z4nHHO+X/S6uY/LcvdpT6q
vDGo+ui/lhQlYbhERhp+iz9mpOm9qw48744jau5NjD/pa+ASfIgynsuxMpohyIQc
l5JW/GXqS6Ve0v6rvTp/BJoAOo14qudaIqNiej9o96c44Hdcp09bduCAPYgek12I
O3xAQX97Q7x8ZP6iyqNZOpa1K1sDsNY9ByA+vruvIjZjBKaorA4eH++y6gx2xkAd
8lSDMnOX/rbkF5rRfUSb3LANLJWaWmDogryiP7VhRXwo94fcFPPCJGIcgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtIRCDBFrqN1NuMRem5HqYS0k1JMB8GA1UdIwQY
MBaAFHNQDutHwvE1cYdqGWY1N/i2NqgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzFBTzYwZkM4VFZ4aDJvWlpqVTMtTFkycUE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jMDhhYmItNDU4Ni00MjU0LTllMjAt
YzA3ODFjYTgwOTFjLzEvYzFBTzYwZkM4VFZ4aDJvWlpqVTMtTFkycUE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9jMDhhYmItNDU4Ni00MjU0LTllMjAtYzA3ODFjYTgwOTFj
LzEvYzFBTzYwZkM4VFZ4aDJvWlpqVTMtTFkycUE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcd/NN071
dB+Z6hE5+3Y9+u5BgfpRIc/MPEqdEZJAR+w7Y+XB0dDL5Gzpj0klaDBOaQ0ygbcx
oDxjeeljWJsvnITmJXuLt7UYcMhzDNaUJ7q3TBUm0J1qwCDJa6M9YcFADkDTinY8
84xfHXC4avShI3R+5qF9ekrzvxxSYXVOrvWF/2gOmV2sWOE23kZdTGS8MHwQsk+q
pbbkWh/x9MwhkRTeM7tTmmdvX/bAh7voh7BEfMKOBrFW5n1uZxvHniZxy7e9baKF
R3HoKBkGZG0ZdlqNgEG47ASLR/aZQJ4kXlSYeJn23ddihFRL6J3530yqpdN1d0WM
JyhLqIUTxIdepA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:08:31 2025 by rpki-client