Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
File:                     6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft (raw, json)
Hash identifier:          Q8cgwb8A6LN9nJevUWzFsVO3IebGyG0MDm9OOhEG2OI=
Subject key identifier:   76:81:74:85:DF:05:87:CA:1C:05:7A:41:9B:4E:E8:99:98:A3:7F:8A
Authority key identifier: E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00
Certificate issuer:       /CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00
Certificate serial:       01977BD504B6D1047B1DC2F94D7FA012929B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
Manifest number:          05EA
Signing time:             Tue 17 Jun 2025 03:00:47 +0000
Manifest this update:     Tue 17 Jun 2025 03:00:47 +0000
Manifest next update:     Wed 18 Jun 2025 03:00:47 +0000
Files and hashes:         1: 4pppDVsEzxWcpvOQRzSfsEfJ_j4.roa (hash: QqOmQPrrioYAbFdEx9jvAv4IzYIgXNG6tw4Mnvbd0vE=)
                          2: 6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl (hash: RLrACUPtsnCRvQypnzfVUFp+r7BSv1NJIChfyBW0OTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7b:d5:04:b6:d1:04:7b:1d:c2:f9:4d:7f:a0:12:92:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00
        Validity
            Not Before: Jun 17 03:00:47 2025 GMT
            Not After : Jun 18 03:00:47 2025 GMT
        Subject: CN=76817485df0587ca1c057a419b4ee89998a37f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:24:80:4b:ba:19:a1:1a:47:be:a7:2c:7b:d7:
                    d9:6f:f9:bb:e2:9b:99:e3:9f:72:ad:dc:74:7e:b4:
                    c0:6c:e9:bf:d2:bb:27:4a:d8:d9:7c:c8:d3:e2:61:
                    cb:5c:57:ab:b8:c3:1b:76:12:7b:5c:5a:20:ac:81:
                    e5:f9:46:a4:ff:85:51:0c:9b:83:99:7e:e5:49:df:
                    12:ab:16:c3:6a:f0:df:98:62:33:3b:48:03:c2:15:
                    c7:d3:04:d0:07:fc:31:2d:02:e7:95:69:00:29:7f:
                    ec:f9:d7:fc:e0:06:19:a9:f1:3c:ff:3e:03:99:a6:
                    1e:9e:59:e0:04:2c:4a:1e:04:76:55:76:4f:dc:13:
                    a8:d9:21:99:9d:e1:4f:ae:50:7e:d3:e0:a5:2e:a9:
                    77:6c:3d:42:95:09:07:13:f8:7d:55:86:f1:44:1a:
                    10:cb:01:e6:2e:08:71:9f:12:5f:bc:7e:3f:1e:db:
                    0c:d2:26:19:27:ed:77:27:1b:fe:dd:88:c1:da:6b:
                    6e:70:47:99:88:d5:27:5d:ad:6e:f8:91:85:f5:9c:
                    9b:0e:2a:f6:b2:f0:e4:6a:55:cc:7a:66:e8:11:83:
                    00:a0:34:90:fd:61:35:4f:3c:63:7e:57:78:00:74:
                    ef:e3:37:0f:fb:78:38:2c:1d:28:f8:07:e8:61:f0:
                    98:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:81:74:85:DF:05:87:CA:1C:05:7A:41:9B:4E:E8:99:98:A3:7F:8A
            X509v3 Authority Key Identifier:
                keyid:E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:fe:2e:3e:82:e8:29:6f:04:2a:c7:a6:db:a3:6f:3c:ce:2b:
         0e:2c:6d:25:d4:90:22:c4:63:e0:48:29:80:87:16:56:21:9d:
         b2:a8:a5:3c:a2:49:9c:fb:84:77:dd:4c:7d:eb:4a:c5:03:3b:
         e5:a8:51:b2:8a:0b:b0:c5:16:02:d6:de:ad:2e:b9:74:0c:1d:
         7d:4e:48:99:23:ae:de:8a:f0:d8:a7:9a:c9:66:07:d3:70:6b:
         cf:6b:c0:6d:e8:36:5f:0f:a0:b0:45:94:4c:9c:e4:de:79:35:
         77:ba:ad:de:0e:47:8b:b2:7c:b7:c1:7c:fa:8e:b9:d5:82:17:
         bb:87:72:79:2b:05:1b:dc:a0:72:60:2b:63:da:cb:91:bf:bf:
         60:84:11:7d:ae:38:b7:79:a0:84:65:93:de:6c:a8:f2:81:b2:
         6c:c1:9a:d8:a6:36:48:b8:2b:8d:b2:03:e7:69:4a:9f:fa:16:
         d4:4d:4c:9b:2d:35:18:51:cb:81:db:02:79:84:0d:df:c7:de:
         d3:ad:e8:62:3e:50:3c:ea:23:fe:f0:a7:23:f0:5c:1f:09:d0:
         f5:16:d6:b2:79:aa:5f:09:73:5a:3e:6b:ab:b6:31:8d:f5:d0:
         3f:74:c0:73:53:99:f3:7d:6c:ff:b6:90:97:f5:1e:db:b4:1c:
         a2:68:b3:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd71QS20QR7HcL5TX+gEpKbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4Y2JiZmYyMThhNDM3ZGY4ZjgwYTk4Y2QyZmFlYjljMjQx
OGZkMDAwHhcNMjUwNjE3MDMwMDQ3WhcNMjUwNjE4MDMwMDQ3WjAzMTEwLwYDVQQD
Eyg3NjgxNzQ4NWRmMDU4N2NhMWMwNTdhNDE5YjRlZTg5OTk4YTM3ZjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCSAS7oZoRpHvqcse9fZb/m74puZ
459yrdx0frTAbOm/0rsnStjZfMjT4mHLXFeruMMbdhJ7XFogrIHl+Uak/4VRDJuD
mX7lSd8SqxbDavDfmGIzO0gDwhXH0wTQB/wxLQLnlWkAKX/s+df84AYZqfE8/z4D
maYenlngBCxKHgR2VXZP3BOo2SGZneFPrlB+0+ClLql3bD1ClQkHE/h9VYbxRBoQ
ywHmLghxnxJfvH4/HtsM0iYZJ+13Jxv+3YjB2mtucEeZiNUnXa1u+JGF9ZybDir2
svDkalXMemboEYMAoDSQ/WE1Tzxjfld4AHTv4zcP+3g4LB0o+AfoYfCYIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaBdIXfBYfKHAV6QZtO6JmYo3+KMB8GA1UdIwQY
MBaAFOjLv/IYpDffj4CpjNL665wkGP0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk11XzhoaWtOOS1QZ0ttTTB2cnJuQ1FZX1FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xZmQ2YmMtNTdlMi00ZjUwLTk4Yjct
Y2M3NjM1ZGU2ZTdhLzEvNk11XzhoaWtOOS1QZ0ttTTB2cnJuQ1FZX1FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8xZmQ2YmMtNTdlMi00ZjUwLTk4YjctY2M3NjM1ZGU2ZTdh
LzEvNk11XzhoaWtOOS1QZ0ttTTB2cnJuQ1FZX1FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAav4uPoLo
KW8EKsem26NvPM4rDixtJdSQIsRj4EgpgIcWViGdsqilPKJJnPuEd91MfetKxQM7
5ahRsooLsMUWAtberS65dAwdfU5ImSOu3orw2KeayWYH03Brz2vAbeg2Xw+gsEWU
TJzk3nk1d7qt3g5Hi7J8t8F8+o651YIXu4dyeSsFG9ygcmArY9rLkb+/YIQRfa44
t3mghGWT3myo8oGybMGa2KY2SLgrjbID52lKn/oW1E1Mmy01GFHLgdsCeYQN38fe
063oYj5QPOoj/vCnI/BcHwnQ9RbWsnmqXwlzWj5rq7YxjfXQP3TAc1OZ831s/7aQ
l/Ue27QcomizCw==
-----END CERTIFICATE-----
Generated at Tue Jun 17 05:02:49 2025 by rpki-client