Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
File:                     xSe66XlBtg89zTqgfixf2d0DpsE.mft (raw, json)
Hash identifier:          NKi47F6Yv1ns4J885YivHeC3mNv+Pne3cisnk5KhYbo=
Subject key identifier:   00:DF:7E:DE:DD:02:AB:13:CC:5F:3B:8F:2A:71:24:FA:C4:60:4E:18
Authority key identifier: C5:27:BA:E9:79:41:B6:0F:3D:CD:3A:A0:7E:2C:5F:D9:DD:03:A6:C1
Certificate issuer:       /CN=c527bae97941b60f3dcd3aa07e2c5fd9dd03a6c1
Certificate serial:       0198A0F16C6E4AB5C2EA438E06956398635B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
Manifest number:          0C6F
Signing time:             Wed 13 Aug 2025 01:00:33 +0000
Manifest this update:     Wed 13 Aug 2025 01:00:33 +0000
Manifest next update:     Thu 14 Aug 2025 01:00:33 +0000
Files and hashes:         1: xSe66XlBtg89zTqgfixf2d0DpsE.crl (hash: U5VjffEHJ5gVpnrb/uq6aVzGjtsVmasCQaodWmIeue4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:f1:6c:6e:4a:b5:c2:ea:43:8e:06:95:63:98:63:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c527bae97941b60f3dcd3aa07e2c5fd9dd03a6c1
        Validity
            Not Before: Aug 13 01:00:33 2025 GMT
            Not After : Aug 14 01:00:33 2025 GMT
        Subject: CN=00df7ededd02ab13cc5f3b8f2a7124fac4604e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c2:af:68:c6:99:df:50:c5:e2:5a:3f:1f:13:
                    01:a8:f7:b9:20:ac:42:9e:3b:fe:3d:fb:99:b3:ce:
                    5c:25:14:dc:0b:b0:58:4a:8a:b8:b9:09:21:fd:9a:
                    98:37:a8:a7:c9:74:2d:04:58:c8:61:74:89:59:aa:
                    86:17:8c:3d:56:1f:13:b3:e7:93:d5:42:6a:2f:b7:
                    d7:af:29:cd:88:86:74:7f:b7:53:39:d4:d6:c6:3d:
                    f6:e1:b8:32:ee:f7:f4:f6:75:c2:5c:b1:55:b0:8e:
                    32:b0:63:24:11:97:2b:e2:8f:a8:64:25:c3:b7:60:
                    56:57:2a:8a:30:14:86:64:84:09:b7:cc:5a:ae:75:
                    dd:0e:1f:f2:29:40:51:1c:b4:48:6b:fc:4f:9e:d8:
                    56:32:9b:eb:3a:17:25:81:b6:c5:3a:09:f6:36:36:
                    04:b6:09:bb:17:80:b0:16:0a:c0:4b:40:4f:97:c5:
                    1b:70:b4:46:17:9f:be:1f:7d:13:61:2b:03:86:43:
                    28:69:0a:b7:2e:73:2b:51:56:c5:0a:9e:d6:22:e3:
                    c7:6b:04:02:d9:3e:8c:ef:92:6a:5c:cb:bd:17:21:
                    91:ec:cf:d3:7b:63:90:ff:50:0f:e7:e6:80:fb:a2:
                    9c:7d:40:c6:bb:6c:ac:4f:08:c3:db:24:5c:d5:90:
                    02:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DF:7E:DE:DD:02:AB:13:CC:5F:3B:8F:2A:71:24:FA:C4:60:4E:18
            X509v3 Authority Key Identifier:
                keyid:C5:27:BA:E9:79:41:B6:0F:3D:CD:3A:A0:7E:2C:5F:D9:DD:03:A6:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:78:16:f5:6a:81:12:d1:e0:fc:6d:2a:4f:28:01:a6:30:9c:
         a4:c9:8e:ab:d9:cb:18:67:c6:dd:5e:d7:c1:81:8d:0e:ac:db:
         8b:f1:80:b7:aa:53:10:a0:d0:d6:38:8e:bd:c9:55:d0:4a:e7:
         8f:12:2f:08:ca:94:2e:c4:c8:a0:b5:64:bd:dc:4f:45:d2:9f:
         c7:83:e6:42:88:35:b0:f7:80:33:ba:75:b4:c9:2c:b4:3a:c0:
         7b:cf:ac:99:5c:8e:77:4e:af:94:e1:d3:79:d5:96:9f:58:d5:
         7d:00:d6:83:a8:d2:dd:4f:00:65:af:27:4f:9e:9e:fc:6e:57:
         c2:89:c7:44:57:4a:3f:d5:cc:ee:11:4c:b5:1b:6f:27:38:fa:
         96:ee:d5:7b:3c:d8:2d:1a:d7:d6:79:8e:02:b3:d2:a7:c2:5a:
         99:f4:1b:e9:c2:ba:85:59:16:92:0d:b5:ef:72:bb:3f:e6:2f:
         54:00:67:13:c2:70:84:72:03:10:a4:61:34:44:2c:fa:63:3b:
         8f:f5:aa:fe:18:d8:6b:34:5e:25:ca:f8:6a:f8:be:10:da:d8:
         46:ff:78:ae:8e:c4:ea:40:9c:f4:50:50:c3:4c:ee:ba:23:be:
         b3:04:3c:51:4f:df:b0:aa:f2:63:78:59:2d:47:92:a5:e3:59:
         3f:cf:36:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZig8WxuSrXC6kOOBpVjmGNbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MjdiYWU5Nzk0MWI2MGYzZGNkM2FhMDdlMmM1ZmQ5ZGQw
M2E2YzEwHhcNMjUwODEzMDEwMDMzWhcNMjUwODE0MDEwMDMzWjAzMTEwLwYDVQQD
EygwMGRmN2VkZWRkMDJhYjEzY2M1ZjNiOGYyYTcxMjRmYWM0NjA0ZTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsKvaMaZ31DF4lo/HxMBqPe5IKxC
njv+PfuZs85cJRTcC7BYSoq4uQkh/ZqYN6inyXQtBFjIYXSJWaqGF4w9Vh8Ts+eT
1UJqL7fXrynNiIZ0f7dTOdTWxj324bgy7vf09nXCXLFVsI4ysGMkEZcr4o+oZCXD
t2BWVyqKMBSGZIQJt8xarnXdDh/yKUBRHLRIa/xPnthWMpvrOhclgbbFOgn2NjYE
tgm7F4CwFgrAS0BPl8UbcLRGF5++H30TYSsDhkMoaQq3LnMrUVbFCp7WIuPHawQC
2T6M75JqXMu9FyGR7M/Te2OQ/1AP5+aA+6KcfUDGu2ysTwjD2yRc1ZACYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADfft7dAqsTzF87jypxJPrEYE4YMB8GA1UdIwQY
MBaAFMUnuul5QbYPPc06oH4sX9ndA6bBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFNlNjZYbEJ0Zzg5elRxZ2ZpeGYyZDBEcHNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMmIxMTUtZmM1ZS00YmFjLWIwYWQt
MTM2NmQ0ZWY3ZjNiLzEveFNlNjZYbEJ0Zzg5elRxZ2ZpeGYyZDBEcHNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wMmIxMTUtZmM1ZS00YmFjLWIwYWQtMTM2NmQ0ZWY3ZjNi
LzEveFNlNjZYbEJ0Zzg5elRxZ2ZpeGYyZDBEcHNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3gW9WqB
EtHg/G0qTygBpjCcpMmOq9nLGGfG3V7XwYGNDqzbi/GAt6pTEKDQ1jiOvclV0Ern
jxIvCMqULsTIoLVkvdxPRdKfx4PmQog1sPeAM7p1tMkstDrAe8+smVyOd06vlOHT
edWWn1jVfQDWg6jS3U8AZa8nT56e/G5XwonHRFdKP9XM7hFMtRtvJzj6lu7VezzY
LRrX1nmOArPSp8JamfQb6cK6hVkWkg2173K7P+YvVABnE8JwhHIDEKRhNEQs+mM7
j/Wq/hjYazReJcr4avi+ENrYRv94ro7E6kCc9FBQw0zuuiO+swQ8UU/fsKryY3hZ
LUeSpeNZP882uQ==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:33 2025 by rpki-client