Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.mft
File:                     6EdxWdZbIlaAmLlZUkhzAHcbPOU.mft (raw, json)
Hash identifier:          U1nDHpauxPYgt0rh0rFnwptp41E4j1hdQWWewPd+sZI=
Subject key identifier:   F7:8C:64:56:6F:00:2A:BC:B0:D0:E5:4A:1B:8D:2F:C0:F3:A5:BE:4F
Authority key identifier: E8:47:71:59:D6:5B:22:56:80:98:B9:59:52:48:73:00:77:1B:3C:E5
Certificate issuer:       /CN=e8477159d65b22568098b95952487300771b3ce5
Certificate serial:       01976997973DB6AAAA0DD2B705172076775B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.mft
Manifest number:          0D21
Signing time:             Fri 13 Jun 2025 14:00:31 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:31 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:31 +0000
Files and hashes:         1: 6EdxWdZbIlaAmLlZUkhzAHcbPOU.crl (hash: L4fpDJWKh9oG7oqfA+E6MXLIgELeTaQ17R10Z/JwpEU=)
                          2: YWx5LPUxWjVFqacvQPPS5X0JnQo.roa (hash: tQhWNjB+Ou6m9KvKR4e5W4hPzK0Vwe1hIf4sW/iHBAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:97:3d:b6:aa:aa:0d:d2:b7:05:17:20:76:77:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8477159d65b22568098b95952487300771b3ce5
        Validity
            Not Before: Jun 13 14:00:31 2025 GMT
            Not After : Jun 14 14:00:31 2025 GMT
        Subject: CN=f78c64566f002abcb0d0e54a1b8d2fc0f3a5be4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f1:c4:16:bc:74:7c:4f:98:15:0f:59:66:e2:
                    b5:49:e5:92:54:a3:23:90:94:b4:a6:a6:4f:4a:6b:
                    b9:1c:30:89:c5:dc:72:2b:79:01:b8:f8:34:9c:bc:
                    2a:59:aa:55:e4:4d:b2:c5:ac:5a:e7:37:7e:9e:43:
                    05:4f:2a:eb:c1:40:91:35:8f:11:c8:b0:26:2f:55:
                    71:23:a3:84:2e:23:79:c0:5b:2b:11:db:68:9e:ba:
                    1f:bd:d5:dc:46:3a:d2:7a:7c:95:29:08:ca:61:93:
                    98:1c:b1:af:59:fa:9e:71:c2:3c:69:bc:d7:f7:7e:
                    b4:83:35:99:58:f1:bd:bd:06:4b:4e:45:6f:54:08:
                    f3:c4:ad:22:60:a2:50:f7:20:78:68:f7:df:75:29:
                    54:52:70:0b:07:cf:39:4c:b2:48:47:a9:ee:44:a1:
                    5e:c1:72:c3:5f:f8:46:fb:22:db:2e:cb:80:e4:ad:
                    3e:5e:07:f0:6d:6f:e2:98:58:f7:8b:be:56:3d:8d:
                    e4:ad:63:0e:56:08:de:fa:fb:ae:0c:a6:02:6a:3c:
                    57:68:2a:d4:2a:d3:06:8e:b6:12:aa:c5:27:90:2e:
                    b9:a7:bb:68:98:f9:03:dd:86:bb:ea:f8:1d:6f:94:
                    11:72:74:84:f7:75:b9:be:c7:81:9e:88:3d:e5:32:
                    de:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8C:64:56:6F:00:2A:BC:B0:D0:E5:4A:1B:8D:2F:C0:F3:A5:BE:4F
            X509v3 Authority Key Identifier:
                keyid:E8:47:71:59:D6:5B:22:56:80:98:B9:59:52:48:73:00:77:1B:3C:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c4:36:86:0f:50:8b:7f:4b:11:c0:41:b0:c9:f7:77:e2:1a:
         62:5d:ab:d5:a3:cc:6e:c6:40:02:5c:03:8e:5d:19:de:42:b5:
         a7:a6:a7:e4:0f:77:a9:b5:42:13:c3:97:46:e8:95:a1:ba:8d:
         d8:28:dd:65:59:c2:54:c5:4a:ca:9a:ff:e6:b9:a6:53:bd:4f:
         c9:ae:9c:96:89:1e:07:9e:b4:6e:fc:af:ca:98:7e:25:b4:c7:
         d7:11:a9:e4:1b:31:5e:2f:10:71:83:9c:e4:a0:4b:1c:09:34:
         42:c6:3e:7a:f4:66:7c:67:02:ff:21:bf:80:d5:a9:16:18:0b:
         5f:90:03:e3:53:d9:78:a9:91:47:7a:84:13:16:38:1a:1e:b4:
         55:c0:e0:0d:c6:13:50:5e:d9:3d:36:31:45:81:bd:64:9c:03:
         37:d1:dc:81:31:ef:af:d9:64:62:48:b0:13:a4:e1:c6:f9:7f:
         5a:f3:0e:4c:ed:c8:86:4f:47:e7:d9:eb:d1:50:0d:86:b2:ce:
         42:64:6f:1b:91:75:02:69:dc:a7:ef:2b:43:72:21:11:09:75:
         ba:24:8e:9d:ee:14:10:6e:54:ee:a7:e9:4a:f5:0f:91:6e:1f:
         31:eb:e4:a0:aa:8f:8d:fe:bf:ca:a1:c9:e1:30:ca:87:74:d3:
         e0:71:14:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpl5c9tqqqDdK3BRcgdndbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDc3MTU5ZDY1YjIyNTY4MDk4Yjk1OTUyNDg3MzAwNzcx
YjNjZTUwHhcNMjUwNjEzMTQwMDMxWhcNMjUwNjE0MTQwMDMxWjAzMTEwLwYDVQQD
EyhmNzhjNjQ1NjZmMDAyYWJjYjBkMGU1NGExYjhkMmZjMGYzYTViZTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PHEFrx0fE+YFQ9ZZuK1SeWSVKMj
kJS0pqZPSmu5HDCJxdxyK3kBuPg0nLwqWapV5E2yxaxa5zd+nkMFTyrrwUCRNY8R
yLAmL1VxI6OELiN5wFsrEdtonrofvdXcRjrSenyVKQjKYZOYHLGvWfqeccI8abzX
9360gzWZWPG9vQZLTkVvVAjzxK0iYKJQ9yB4aPffdSlUUnALB885TLJIR6nuRKFe
wXLDX/hG+yLbLsuA5K0+XgfwbW/imFj3i75WPY3krWMOVgje+vuuDKYCajxXaCrU
KtMGjrYSqsUnkC65p7tomPkD3Ya76vgdb5QRcnSE93W5vseBnog95TLeqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeMZFZvACq8sNDlShuNL8Dzpb5PMB8GA1UdIwQY
MBaAFOhHcVnWWyJWgJi5WVJIcwB3GzzlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVkeFdkWmJJbGFBbUxsWlVraHpBSGNiUE9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9lYjA3OTItODQzYS00NmI2LWIwZGEt
ZjQ2OGI4YzQ2NTFhLzEvNkVkeFdkWmJJbGFBbUxsWlVraHpBSGNiUE9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9lYjA3OTItODQzYS00NmI2LWIwZGEtZjQ2OGI4YzQ2NTFh
LzEvNkVkeFdkWmJJbGFBbUxsWlVraHpBSGNiUE9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMQ2hg9Q
i39LEcBBsMn3d+IaYl2r1aPMbsZAAlwDjl0Z3kK1p6an5A93qbVCE8OXRuiVobqN
2CjdZVnCVMVKypr/5rmmU71Pya6clokeB560bvyvyph+JbTH1xGp5BsxXi8QcYOc
5KBLHAk0QsY+evRmfGcC/yG/gNWpFhgLX5AD41PZeKmRR3qEExY4Gh60VcDgDcYT
UF7ZPTYxRYG9ZJwDN9HcgTHvr9lkYkiwE6Thxvl/WvMOTO3Ihk9H59nr0VANhrLO
QmRvG5F1Amncp+8rQ3IhEQl1uiSOne4UEG5U7qfpSvUPkW4fMevkoKqPjf6/yqHJ
4TDKh3TT4HEUvQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:40 2025 by rpki-client