Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.mft
File:                     6Hzn3yMUDAAFElphqtchUx5oHw4.mft (raw, json)
Hash identifier:          wGGFN1fBUmJim2T0F6+F5n2q5kHjr6158c87oXoBVZs=
Subject key identifier:   CA:17:5D:84:F9:1B:2F:91:D6:64:15:B5:F0:28:DF:A2:A6:D6:3C:84
Authority key identifier: E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
Certificate issuer:       /CN=e87ce7df23140c0005125a61aad721531e681f0e
Certificate serial:       01976C6241A4ED9BDB272319D11414B9E5FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.mft
Manifest number:          133E
Signing time:             Sat 14 Jun 2025 03:01:07 +0000
Manifest this update:     Sat 14 Jun 2025 03:01:07 +0000
Manifest next update:     Sun 15 Jun 2025 03:01:07 +0000
Files and hashes:         1: 6Hzn3yMUDAAFElphqtchUx5oHw4.crl (hash: fBqmQiu1bUSnjGZgMGlscYlIwNRINQ01C8Ln9VN+V/U=)
                          2: 93H-M2YyFdByF3_m4UTdVNG3rnA.roa (hash: NZdZDzcAYrRqjG7IML02jAFdaMVtT3noP2YHjNJwoR0=)
                          3: N9uVt8-2z0dXmjID6iR9e9MgbVk.roa (hash: n9sIL4/YW67/qBoixPSCi+GKHMtO0JV9xlXo1RPhaOU=)
                          4: _mlHYvNOqlWn3kV4X-JxKfP06uI.roa (hash: nSc6Enn4OnvgwO+jJT800LzQF9tqpEFUJwGLWJoDG80=)
                          5: haML-aesPdHDrfKfNJ4GEsc_gPQ.roa (hash: /PovY2vwBA2lMcdVZ631+GF0OPyYkLCFUcs9P6/i2kg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:62:41:a4:ed:9b:db:27:23:19:d1:14:14:b9:e5:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e87ce7df23140c0005125a61aad721531e681f0e
        Validity
            Not Before: Jun 14 03:01:07 2025 GMT
            Not After : Jun 15 03:01:07 2025 GMT
        Subject: CN=ca175d84f91b2f91d66415b5f028dfa2a6d63c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:db:cb:0a:0c:10:48:ed:a8:63:a5:19:47:27:
                    7e:fe:8c:a5:ef:e5:bc:a3:16:0b:25:c5:82:75:44:
                    93:2a:79:c0:17:1c:be:22:77:14:55:63:5d:19:e6:
                    3f:c8:48:cb:87:d3:a2:08:23:ea:c3:a4:f5:09:f9:
                    a0:9d:da:0c:10:38:a2:1d:0d:ae:37:35:27:78:c3:
                    88:96:f7:44:18:08:00:c2:dd:16:b4:02:13:cf:df:
                    f9:40:ed:52:1b:dd:fd:3f:80:50:ed:ca:af:c6:54:
                    4f:fb:ff:4e:84:13:c1:91:45:9d:0c:a9:8a:d9:84:
                    40:b5:cd:db:0e:ed:30:78:f8:84:90:76:6d:39:76:
                    bf:c7:65:bf:e8:c8:2c:d3:cb:00:8b:8e:01:ad:6d:
                    1e:55:67:f2:35:2d:f4:51:0a:32:5b:ca:92:fc:b5:
                    31:dc:0d:b8:12:cd:38:c2:f3:85:b4:02:2a:87:27:
                    02:0e:44:60:27:ed:05:f9:c0:40:74:c1:06:75:23:
                    d5:bb:42:91:94:60:5c:c2:31:9c:9c:40:62:f3:25:
                    67:87:11:c5:f1:bd:da:62:56:ba:d2:17:1c:52:d9:
                    88:9e:39:93:63:f4:e3:fa:77:3f:ca:e6:fe:ae:d3:
                    e6:e2:5b:77:14:b8:1b:ec:24:a3:84:46:d1:78:37:
                    49:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:17:5D:84:F9:1B:2F:91:D6:64:15:B5:F0:28:DF:A2:A6:D6:3C:84
            X509v3 Authority Key Identifier:
                keyid:E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:e6:56:01:0a:12:91:a9:51:5b:58:86:c6:56:c8:ca:6b:a2:
         5d:9e:cb:21:8a:2c:c1:aa:8c:e9:7b:79:c8:b9:87:e6:da:a9:
         89:17:86:77:c9:49:4c:8d:d7:91:ff:1e:83:68:2c:a1:38:0b:
         35:cd:55:f2:6a:69:12:7c:83:7f:ad:41:0b:0f:1e:7e:80:7e:
         ec:2a:43:26:20:4d:a6:39:45:49:bb:38:34:ee:5d:11:74:18:
         04:ca:61:ce:f0:c9:e3:f4:fc:af:fc:d9:3e:8e:41:0f:9a:50:
         ea:c8:98:cb:35:d6:71:b4:11:60:37:26:90:5a:06:4d:16:80:
         9b:82:07:35:7e:68:d2:e1:41:94:6e:80:49:0d:ee:b2:52:ba:
         42:0c:f4:f3:dd:70:06:92:c4:46:f4:75:96:a4:26:c3:a7:ed:
         cd:c5:5c:8d:95:c4:6e:29:df:06:2c:62:f7:6b:e4:21:dc:c2:
         12:0c:76:8d:ef:2f:76:28:0a:8d:a4:cc:4d:5e:e8:a7:16:8d:
         6f:f0:9f:57:72:a7:37:e5:b3:ef:ef:69:8d:b9:22:89:31:d5:
         d8:c0:e6:64:fe:09:39:a9:b7:71:44:57:f7:16:cd:0b:2f:b6:
         c8:dc:79:37:27:ae:f9:b2:20:25:6f:76:7f:5a:86:13:44:bf:
         42:39:08:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYkGk7ZvbJyMZ0RQUueX9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4N2NlN2RmMjMxNDBjMDAwNTEyNWE2MWFhZDcyMTUzMWU2
ODFmMGUwHhcNMjUwNjE0MDMwMTA3WhcNMjUwNjE1MDMwMTA3WjAzMTEwLwYDVQQD
EyhjYTE3NWQ4NGY5MWIyZjkxZDY2NDE1YjVmMDI4ZGZhMmE2ZDYzYzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNvLCgwQSO2oY6UZRyd+/oyl7+W8
oxYLJcWCdUSTKnnAFxy+IncUVWNdGeY/yEjLh9OiCCPqw6T1CfmgndoMEDiiHQ2u
NzUneMOIlvdEGAgAwt0WtAITz9/5QO1SG939P4BQ7cqvxlRP+/9OhBPBkUWdDKmK
2YRAtc3bDu0wePiEkHZtOXa/x2W/6Mgs08sAi44BrW0eVWfyNS30UQoyW8qS/LUx
3A24Es04wvOFtAIqhycCDkRgJ+0F+cBAdMEGdSPVu0KRlGBcwjGcnEBi8yVnhxHF
8b3aYla60hccUtmInjmTY/Tj+nc/yub+rtPm4lt3FLgb7CSjhEbReDdJFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoXXYT5Gy+R1mQVtfAo36Km1jyEMB8GA1UdIwQY
MBaAFOh8598jFAwABRJaYarXIVMeaB8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkh6bjN5TVVEQUFGRWxwaHF0Y2hVeDVvSHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC83NzY3NDctNjI0YS00OTRlLTk0YjIt
MzIzZDM0ZGVmYzhhLzEvNkh6bjN5TVVEQUFGRWxwaHF0Y2hVeDVvSHc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC83NzY3NDctNjI0YS00OTRlLTk0YjItMzIzZDM0ZGVmYzhh
LzEvNkh6bjN5TVVEQUFGRWxwaHF0Y2hVeDVvSHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgeZWAQoS
kalRW1iGxlbIymuiXZ7LIYoswaqM6Xt5yLmH5tqpiReGd8lJTI3Xkf8eg2gsoTgL
Nc1V8mppEnyDf61BCw8efoB+7CpDJiBNpjlFSbs4NO5dEXQYBMphzvDJ4/T8r/zZ
Po5BD5pQ6siYyzXWcbQRYDcmkFoGTRaAm4IHNX5o0uFBlG6ASQ3uslK6Qgz0891w
BpLERvR1lqQmw6ftzcVcjZXEbinfBixi92vkIdzCEgx2je8vdigKjaTMTV7opxaN
b/CfV3KnN+Wz7+9pjbkiiTHV2MDmZP4JOam3cURX9xbNCy+2yNx5Nyeu+bIgJW92
f1qGE0S/QjkILQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:08:24 2025 by rpki-client