Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft
File:                     0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft (raw, json)
Hash identifier:          rHWhFQ6QZkM8FPGpWekDJOiVzsPrjvjqIOYeVLlp6bo=
Subject key identifier:   C8:D9:D9:9E:00:63:7F:04:2D:D0:C8:1F:5A:0F:6D:68:DB:2B:DC:A6
Authority key identifier: D0:2E:A9:01:48:D4:E6:88:C9:49:2D:94:67:15:9C:D1:05:75:59:1B
Certificate issuer:       /CN=d02ea90148d4e688c9492d9467159cd10575591b
Certificate serial:       019679E9AFC468602F0777942F441DC0A833
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft
Manifest number:          0640
Signing time:             Mon 28 Apr 2025 01:01:20 +0000
Manifest this update:     Mon 28 Apr 2025 01:01:20 +0000
Manifest next update:     Tue 29 Apr 2025 01:01:20 +0000
Files and hashes:         1: 0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl (hash: pS8FDvHK/ca6frmuren4jnm6p13ejWLR5nGVgDqRgLI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:e9:af:c4:68:60:2f:07:77:94:2f:44:1d:c0:a8:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d02ea90148d4e688c9492d9467159cd10575591b
        Validity
            Not Before: Apr 28 01:01:20 2025 GMT
            Not After : Apr 29 01:01:20 2025 GMT
        Subject: CN=c8d9d99e00637f042dd0c81f5a0f6d68db2bdca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8c:03:b2:d1:7e:0d:41:04:5b:5d:8a:ff:e4:
                    d5:9b:f1:19:53:67:b8:c0:0e:1e:0d:7d:5e:d2:70:
                    91:0c:a3:7d:d0:9e:ec:b2:92:e4:f5:9a:cc:5f:6e:
                    c2:1f:55:aa:6e:76:cb:4d:48:44:67:b2:3b:86:24:
                    06:48:b9:fe:4e:4e:17:66:07:81:d0:65:4c:e6:04:
                    23:43:82:06:be:46:53:65:99:03:ba:85:5a:cc:75:
                    6c:21:af:c0:9a:70:3f:42:98:08:b9:b2:53:29:a7:
                    e9:8b:70:f9:2d:73:28:49:cb:c6:af:0f:7c:a9:bf:
                    0e:96:25:10:8a:9f:18:3e:c1:6f:2a:52:62:cc:44:
                    05:59:e4:03:28:ff:fc:f8:12:9e:e7:93:d5:a5:0c:
                    ef:16:88:6c:9e:42:07:42:07:55:d8:98:42:59:cb:
                    39:54:6a:5a:14:11:ba:a7:ea:14:34:37:83:b3:5f:
                    54:97:e0:23:48:5f:ce:2b:a1:5d:6f:d1:57:76:67:
                    c6:c5:c7:b6:2a:25:e3:24:fa:67:58:3e:38:14:be:
                    57:f5:d3:5c:a9:14:be:6b:0d:6a:23:ce:46:8d:6a:
                    25:0a:79:97:5d:72:2e:6d:5f:e2:b3:66:18:06:51:
                    f5:cd:7a:7a:0a:13:b7:3f:26:fe:a1:38:de:5d:e2:
                    40:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D9:D9:9E:00:63:7F:04:2D:D0:C8:1F:5A:0F:6D:68:DB:2B:DC:A6
            X509v3 Authority Key Identifier:
                keyid:D0:2E:A9:01:48:D4:E6:88:C9:49:2D:94:67:15:9C:D1:05:75:59:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:46:9e:ab:c3:fd:29:2c:84:3e:62:47:78:13:a4:76:a5:99:
         c6:62:02:da:c4:15:07:eb:03:5a:af:ac:b0:70:b9:ba:b2:0d:
         9a:c8:5e:c5:ec:21:3c:b3:2c:78:94:7c:42:d5:da:52:6e:b5:
         c8:51:7a:f4:17:69:af:bd:d9:41:84:39:79:24:0a:46:41:24:
         85:25:8b:8b:e8:85:30:21:22:5b:4a:dc:b7:05:a2:69:a3:93:
         0a:0f:f7:0e:57:4d:28:15:1b:be:78:c9:b7:67:93:ee:93:8c:
         47:f3:d1:af:11:ae:ff:67:00:46:01:9f:ff:ee:24:7d:5c:f3:
         f1:47:71:a5:19:aa:70:c4:34:e9:bd:96:78:d6:e8:d4:54:2e:
         d1:b8:a7:4c:0a:b7:2b:5d:e7:60:20:5e:22:02:9f:99:58:55:
         f5:54:25:f3:17:26:45:42:f0:ee:c8:13:cb:b5:74:9d:75:7e:
         e1:96:bd:a8:70:c6:25:33:69:77:73:5d:a5:b0:ec:1e:19:de:
         ef:d3:7b:8b:a4:86:4b:2e:75:69:fc:1e:cf:25:02:a1:06:92:
         03:09:e6:29:d2:43:e8:e8:92:6d:77:4f:40:3e:76:36:f8:59:
         00:3d:db:16:6b:ee:28:93:fa:6b:ad:d5:28:b4:13:fb:f6:7b:
         73:37:bb:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ56a/EaGAvB3eUL0QdwKgzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMmVhOTAxNDhkNGU2ODhjOTQ5MmQ5NDY3MTU5Y2QxMDU3
NTU5MWIwHhcNMjUwNDI4MDEwMTIwWhcNMjUwNDI5MDEwMTIwWjAzMTEwLwYDVQQD
EyhjOGQ5ZDk5ZTAwNjM3ZjA0MmRkMGM4MWY1YTBmNmQ2OGRiMmJkY2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtowDstF+DUEEW12K/+TVm/EZU2e4
wA4eDX1e0nCRDKN90J7sspLk9ZrMX27CH1WqbnbLTUhEZ7I7hiQGSLn+Tk4XZgeB
0GVM5gQjQ4IGvkZTZZkDuoVazHVsIa/AmnA/QpgIubJTKafpi3D5LXMoScvGrw98
qb8OliUQip8YPsFvKlJizEQFWeQDKP/8+BKe55PVpQzvFohsnkIHQgdV2JhCWcs5
VGpaFBG6p+oUNDeDs19Ul+AjSF/OK6Fdb9FXdmfGxce2KiXjJPpnWD44FL5X9dNc
qRS+aw1qI85GjWolCnmXXXIubV/is2YYBlH1zXp6ChO3Pyb+oTjeXeJACwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjZ2Z4AY38ELdDIH1oPbWjbK9ymMB8GA1UdIwQY
MBaAFNAuqQFI1OaIyUktlGcVnNEFdVkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEM2cEFValU1b2pKU1MyVVp4V2MwUVYxV1JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kMmE4ODctMGFlNS00NDFjLWEzOTMt
ZmRjM2IzZmNlODNhLzEvMEM2cEFValU1b2pKU1MyVVp4V2MwUVYxV1JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9kMmE4ODctMGFlNS00NDFjLWEzOTMtZmRjM2IzZmNlODNh
LzEvMEM2cEFValU1b2pKU1MyVVp4V2MwUVYxV1JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc0aeq8P9
KSyEPmJHeBOkdqWZxmIC2sQVB+sDWq+ssHC5urINmshexewhPLMseJR8QtXaUm61
yFF69Bdpr73ZQYQ5eSQKRkEkhSWLi+iFMCEiW0rctwWiaaOTCg/3DldNKBUbvnjJ
t2eT7pOMR/PRrxGu/2cARgGf/+4kfVzz8UdxpRmqcMQ06b2WeNbo1FQu0binTAq3
K13nYCBeIgKfmVhV9VQl8xcmRULw7sgTy7V0nXV+4Za9qHDGJTNpd3NdpbDsHhne
79N7i6SGSy51afwezyUCoQaSAwnmKdJD6OiSbXdPQD52NvhZAD3bFmvuKJP6a63V
KLQT+/Z7cze7OA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 04:31:44 2025 by rpki-client