Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
File:                     6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft (raw, json)
Hash identifier:          XJ0S4QIuQiB1YdeIMVMlUJWcn1uX3HSC0zTTOz+ZNQ8=
Subject key identifier:   07:B3:4F:2C:D4:F2:E6:B3:6D:24:CD:AF:6E:B4:84:D7:41:6C:E5:20
Authority key identifier: E9:6B:91:2B:4A:5A:0C:77:03:B5:CA:58:B1:86:74:1E:0D:53:35:B4
Certificate issuer:       /CN=e96b912b4a5a0c7703b5ca58b186741e0d5335b4
Certificate serial:       01976D3E4B134CE770DFE0AECED1866D118A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
Manifest number:          0F87
Signing time:             Sat 14 Jun 2025 07:01:28 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:28 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:28 +0000
Files and hashes:         1: 6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl (hash: ej3IQNkZtKrysp13VHEFpRMJjCafQ9TvrO4NGxUoATY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:4b:13:4c:e7:70:df:e0:ae:ce:d1:86:6d:11:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b912b4a5a0c7703b5ca58b186741e0d5335b4
        Validity
            Not Before: Jun 14 07:01:28 2025 GMT
            Not After : Jun 15 07:01:28 2025 GMT
        Subject: CN=07b34f2cd4f2e6b36d24cdaf6eb484d7416ce520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7c:c4:cf:24:04:5d:f0:e3:9d:ca:c1:45:92:
                    3d:15:d1:1a:8e:f7:eb:0c:2b:12:43:c9:b3:fa:a4:
                    53:5b:ee:2c:ee:bb:3b:d0:8a:b8:8e:84:e1:9a:90:
                    5a:60:f1:29:67:b1:c0:cd:37:84:c8:05:9a:3d:8b:
                    62:0c:86:b1:dd:fd:2e:aa:c6:5f:e4:db:56:77:1f:
                    75:33:59:cc:29:de:cd:e4:2f:14:dd:cb:5c:40:79:
                    68:7a:90:3f:85:77:14:05:32:3c:4a:d5:de:18:43:
                    79:56:87:6f:2b:59:3d:7b:02:b0:8b:00:f0:5a:1e:
                    d7:65:88:7e:59:3c:62:0b:d4:44:fd:10:f4:40:89:
                    ed:de:ba:5d:04:b2:40:4a:73:6f:47:0c:b4:7e:66:
                    08:e1:16:8d:72:1d:13:d5:91:73:77:59:86:f3:11:
                    31:3e:6f:81:fe:33:4b:29:16:5a:09:69:6d:62:5d:
                    dd:b3:b7:fe:3c:1a:23:67:f1:90:c3:41:49:03:cd:
                    26:37:bf:8b:16:bd:45:68:00:29:76:01:ba:2c:07:
                    d2:f7:3a:ca:39:7b:d3:2f:7d:7a:cc:d2:ad:28:c7:
                    3a:ba:d7:27:8f:ac:99:bb:83:0e:00:f6:2e:82:2e:
                    59:bb:7a:1e:64:7d:7f:a3:fb:1e:6b:6c:3b:2a:ce:
                    1b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B3:4F:2C:D4:F2:E6:B3:6D:24:CD:AF:6E:B4:84:D7:41:6C:E5:20
            X509v3 Authority Key Identifier:
                keyid:E9:6B:91:2B:4A:5A:0C:77:03:B5:CA:58:B1:86:74:1E:0D:53:35:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:58:21:cb:56:19:e5:2a:fc:fe:0a:a5:1c:3c:f8:48:97:b2:
         bc:48:f4:8e:b6:8a:28:b3:4f:a7:03:bd:6d:01:1a:1e:d6:ab:
         93:d9:52:6b:4f:0b:b9:22:78:ac:38:1d:90:85:43:59:a6:0f:
         5a:4c:0b:1f:e5:81:ce:36:53:d9:47:34:a8:c5:7c:c7:21:f8:
         7a:e5:7b:64:f2:4c:c4:18:9a:8e:9b:ae:e1:91:82:34:93:82:
         a1:79:ce:4d:6d:94:b9:5f:58:62:9d:9d:d5:2c:f1:8d:04:c0:
         44:5d:ca:2f:1e:05:32:5f:4c:39:d8:d5:7a:6b:44:79:c3:f2:
         33:13:c8:17:a9:21:fc:d2:96:39:99:bd:95:8f:91:0b:d4:a8:
         bd:b8:57:50:41:45:ae:dc:97:4f:62:88:3d:10:3b:cf:ee:24:
         91:a7:b2:ab:7e:db:25:81:21:56:7f:64:37:96:b2:e3:6e:b0:
         6e:0a:3f:5c:77:6e:e9:a3:32:07:d3:70:6d:9f:8a:33:9f:fd:
         cc:3c:03:ae:57:6d:b9:36:25:b3:39:26:50:75:ec:84:38:e8:
         56:ea:2c:67:9a:60:b7:74:f2:95:d1:6c:e5:57:cf:e2:de:da:
         a0:76:11:1e:19:6d:01:6f:16:34:3d:fc:7b:f7:c7:62:bb:34:
         1e:14:6d:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPksTTOdw3+CuztGGbRGKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NmI5MTJiNGE1YTBjNzcwM2I1Y2E1OGIxODY3NDFlMGQ1
MzM1YjQwHhcNMjUwNjE0MDcwMTI4WhcNMjUwNjE1MDcwMTI4WjAzMTEwLwYDVQQD
EygwN2IzNGYyY2Q0ZjJlNmIzNmQyNGNkYWY2ZWI0ODRkNzQxNmNlNTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHzEzyQEXfDjncrBRZI9FdEajvfr
DCsSQ8mz+qRTW+4s7rs70Iq4joThmpBaYPEpZ7HAzTeEyAWaPYtiDIax3f0uqsZf
5NtWdx91M1nMKd7N5C8U3ctcQHloepA/hXcUBTI8StXeGEN5VodvK1k9ewKwiwDw
Wh7XZYh+WTxiC9RE/RD0QInt3rpdBLJASnNvRwy0fmYI4RaNch0T1ZFzd1mG8xEx
Pm+B/jNLKRZaCWltYl3ds7f+PBojZ/GQw0FJA80mN7+LFr1FaAApdgG6LAfS9zrK
OXvTL316zNKtKMc6utcnj6yZu4MOAPYugi5Zu3oeZH1/o/sea2w7Ks4bFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAezTyzU8uazbSTNr260hNdBbOUgMB8GA1UdIwQY
MBaAFOlrkStKWgx3A7XKWLGGdB4NUzW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNld1UkswcGFESGNEdGNwWXNZWjBIZzFUTmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8yZjMzODMtZGI3OS00NGM2LWJiNmIt
YjU0NjE1MGZkYzA0LzEvNld1UkswcGFESGNEdGNwWXNZWjBIZzFUTmJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8yZjMzODMtZGI3OS00NGM2LWJiNmItYjU0NjE1MGZkYzA0
LzEvNld1UkswcGFESGNEdGNwWXNZWjBIZzFUTmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1ghy1YZ
5Sr8/gqlHDz4SJeyvEj0jraKKLNPpwO9bQEaHtark9lSa08LuSJ4rDgdkIVDWaYP
WkwLH+WBzjZT2Uc0qMV8xyH4euV7ZPJMxBiajpuu4ZGCNJOCoXnOTW2UuV9YYp2d
1SzxjQTARF3KLx4FMl9MOdjVemtEecPyMxPIF6kh/NKWOZm9lY+RC9SovbhXUEFF
rtyXT2KIPRA7z+4kkaeyq37bJYEhVn9kN5ay426wbgo/XHdu6aMyB9NwbZ+KM5/9
zDwDrldtuTYlszkmUHXshDjoVuosZ5pgt3TyldFs5VfP4t7aoHYRHhltAW8WND38
e/fHYrs0HhRthg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:47:22 2025 by rpki-client