Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft
File:                     I6lUuSO6IAjpheuiQdG3AHF_iEM.mft (raw, json)
Hash identifier:          n+D3ZUAHiPdBmdfnjJi3XLcyOSvr0q3q5Z5SVdm42lc=
Subject key identifier:   99:D8:BE:BF:34:28:D1:FE:2E:AD:46:80:56:1B:44:FB:00:F5:B8:E9
Authority key identifier: 23:A9:54:B9:23:BA:20:08:E9:85:EB:A2:41:D1:B7:00:71:7F:88:43
Certificate issuer:       /CN=23a954b923ba2008e985eba241d1b700717f8843
Certificate serial:       01976961AA5BE57E41297A60C86F78CACB66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I6lUuSO6IAjpheuiQdG3AHF_iEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft
Manifest number:          13D5
Signing time:             Fri 13 Jun 2025 13:01:37 +0000
Manifest this update:     Fri 13 Jun 2025 13:01:37 +0000
Manifest next update:     Sat 14 Jun 2025 13:01:37 +0000
Files and hashes:         1: I6lUuSO6IAjpheuiQdG3AHF_iEM.crl (hash: ErAjBRRmk0H3X8jzE0hl1T9ywSaSNybiowSmz4lLAyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I6lUuSO6IAjpheuiQdG3AHF_iEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:61:aa:5b:e5:7e:41:29:7a:60:c8:6f:78:ca:cb:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23a954b923ba2008e985eba241d1b700717f8843
        Validity
            Not Before: Jun 13 13:01:37 2025 GMT
            Not After : Jun 14 13:01:37 2025 GMT
        Subject: CN=99d8bebf3428d1fe2ead4680561b44fb00f5b8e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:8e:01:f1:59:c1:ac:80:d7:10:34:bd:c5:3a:
                    16:a8:22:28:d4:20:fd:db:1a:c2:36:0d:c8:ee:b8:
                    57:5b:8f:d6:a7:8b:08:90:6b:04:07:9a:08:f2:94:
                    f4:ea:7c:91:79:88:12:d6:58:65:bd:3c:da:a2:08:
                    91:b6:b6:1d:02:b9:9e:45:20:d7:f7:3f:c5:3e:33:
                    53:24:07:15:3c:ba:75:34:0a:2f:94:93:d6:49:06:
                    4d:31:08:30:ef:7a:80:a8:9a:78:d8:e9:9d:01:91:
                    0a:ef:47:93:7f:91:3c:1f:d2:bc:de:1e:88:e7:15:
                    c0:82:e1:b1:af:09:b5:4f:ff:fb:e6:eb:fe:db:ad:
                    36:85:1e:66:d1:e7:6f:04:ed:cf:21:dd:c4:b8:05:
                    27:e0:ba:6b:d5:84:e2:09:f3:c9:0b:33:e6:7a:15:
                    b8:58:f7:1c:09:9d:6d:30:71:af:ef:4a:1b:30:6c:
                    f4:28:7b:27:45:67:16:13:b7:a8:ec:35:1b:8b:fc:
                    97:b5:2e:0b:46:29:a8:d0:c3:f8:91:4c:6d:0e:ff:
                    ae:f2:fa:22:cb:0d:28:c9:c0:e9:e7:f9:fe:64:b7:
                    12:ee:84:21:97:d8:f9:15:63:6c:68:45:8f:2a:e4:
                    9f:40:f9:4a:fb:3e:05:b7:c7:47:03:ef:6c:c8:b7:
                    e0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D8:BE:BF:34:28:D1:FE:2E:AD:46:80:56:1B:44:FB:00:F5:B8:E9
            X509v3 Authority Key Identifier:
                keyid:23:A9:54:B9:23:BA:20:08:E9:85:EB:A2:41:D1:B7:00:71:7F:88:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6lUuSO6IAjpheuiQdG3AHF_iEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:95:30:88:ac:de:1e:54:8d:92:44:a6:96:f9:e5:89:0b:75:
         e8:ca:08:f1:0e:66:cc:15:1c:0b:d7:2d:fd:9a:90:60:e7:61:
         58:3e:15:14:5e:83:af:aa:9b:65:67:fd:ec:e4:e3:53:a0:f0:
         6e:43:e7:5e:29:09:84:82:34:9e:aa:dd:50:e8:fe:c7:2a:4f:
         98:4f:e1:d9:8e:d6:a6:bc:5a:22:c0:f0:e4:ec:f0:9f:c0:8e:
         b5:eb:d9:89:d2:d3:a5:6b:21:f7:4e:ec:0f:ea:e1:8e:04:ec:
         df:04:19:87:35:4e:3c:ba:83:50:a5:92:5c:da:cd:6a:f1:88:
         04:d6:a9:f8:89:9b:8f:32:e1:12:66:70:ed:87:d3:e1:e3:31:
         35:cc:85:d5:90:04:f0:e3:7f:91:ed:51:f0:a3:65:72:b4:35:
         c1:7e:68:46:ad:72:c2:02:4b:68:9a:ee:7b:85:1d:f0:28:49:
         f5:67:44:2c:38:43:7b:35:4f:7d:1f:7d:aa:bb:dc:bd:d6:c7:
         44:b2:b9:bc:9f:6f:b1:23:3a:6d:62:78:4c:c3:10:40:d3:c4:
         24:7c:64:b7:9f:bf:7b:5a:96:43:e9:24:18:8d:98:c2:65:2b:
         81:8d:6e:7a:45:a1:3a:31:6e:3e:59:cb:18:6e:17:e0:35:ba:
         5c:63:7f:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYapb5X5BKXpgyG94ystmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYTk1NGI5MjNiYTIwMDhlOTg1ZWJhMjQxZDFiNzAwNzE3
Zjg4NDMwHhcNMjUwNjEzMTMwMTM3WhcNMjUwNjE0MTMwMTM3WjAzMTEwLwYDVQQD
Eyg5OWQ4YmViZjM0MjhkMWZlMmVhZDQ2ODA1NjFiNDRmYjAwZjViOGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Y4B8VnBrIDXEDS9xToWqCIo1CD9
2xrCNg3I7rhXW4/Wp4sIkGsEB5oI8pT06nyReYgS1lhlvTzaogiRtrYdArmeRSDX
9z/FPjNTJAcVPLp1NAovlJPWSQZNMQgw73qAqJp42OmdAZEK70eTf5E8H9K83h6I
5xXAguGxrwm1T//75uv+2602hR5m0edvBO3PId3EuAUn4Lpr1YTiCfPJCzPmehW4
WPccCZ1tMHGv70obMGz0KHsnRWcWE7eo7DUbi/yXtS4LRimo0MP4kUxtDv+u8voi
yw0oycDp5/n+ZLcS7oQhl9j5FWNsaEWPKuSfQPlK+z4Ft8dHA+9syLfgcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnYvr80KNH+Lq1GgFYbRPsA9bjpMB8GA1UdIwQY
MBaAFCOpVLkjuiAI6YXrokHRtwBxf4hDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTZsVXVTTzZJQWpwaGV1aVFkRzNBSEZfaUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81ZDk3NjAtZTM2ZS00N2MyLTk2ZTMt
NmRjNTEwZTk4YjczLzEvSTZsVXVTTzZJQWpwaGV1aVFkRzNBSEZfaUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi81ZDk3NjAtZTM2ZS00N2MyLTk2ZTMtNmRjNTEwZTk4Yjcz
LzEvSTZsVXVTTzZJQWpwaGV1aVFkRzNBSEZfaUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJUwiKze
HlSNkkSmlvnliQt16MoI8Q5mzBUcC9ct/ZqQYOdhWD4VFF6Dr6qbZWf97OTjU6Dw
bkPnXikJhII0nqrdUOj+xypPmE/h2Y7WprxaIsDw5Ozwn8COtevZidLTpWsh907s
D+rhjgTs3wQZhzVOPLqDUKWSXNrNavGIBNap+ImbjzLhEmZw7YfT4eMxNcyF1ZAE
8ON/ke1R8KNlcrQ1wX5oRq1ywgJLaJrue4Ud8ChJ9WdELDhDezVPfR99qrvcvdbH
RLK5vJ9vsSM6bWJ4TMMQQNPEJHxkt5+/e1qWQ+kkGI2YwmUrgY1uekWhOjFuPlnL
GG4X4DW6XGN/wA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:23 2025 by rpki-client