Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
File:                     6xU9o8JM4SNuIMRoYWNdyO-1apI.mft (raw, json)
Hash identifier:          aGJDJ/vxmiy96vSdR45J6gkvuIpFShMVirojgT9PBkM=
Subject key identifier:   57:5E:22:00:78:CC:4F:A7:C5:FF:D2:EF:16:ED:09:0D:15:60:88:05
Authority key identifier: EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92
Certificate issuer:       /CN=eb153da3c24ce1236e20c46861635dc8efb56a92
Certificate serial:       019673B018DD522C75D7EC54DC643C7EA9D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
Manifest number:          0BF4
Signing time:             Sat 26 Apr 2025 20:00:42 +0000
Manifest this update:     Sat 26 Apr 2025 20:00:42 +0000
Manifest next update:     Sun 27 Apr 2025 20:00:42 +0000
Files and hashes:         1: 6xU9o8JM4SNuIMRoYWNdyO-1apI.crl (hash: 3kExHco/oxkX0pyo8+aAXTDRv4En3OkZOGY+CILHJ+A=)
                          2: ipmJ5LQmK4ddp63lgFVAIAYopkE.roa (hash: YVYb+vZufn7OkrWKbNACiC73zlWWGlO/lMGiNA3e8zY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:b0:18:dd:52:2c:75:d7:ec:54:dc:64:3c:7e:a9:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb153da3c24ce1236e20c46861635dc8efb56a92
        Validity
            Not Before: Apr 26 20:00:42 2025 GMT
            Not After : Apr 27 20:00:42 2025 GMT
        Subject: CN=575e220078cc4fa7c5ffd2ef16ed090d15608805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e2:73:41:76:5b:cf:e5:0d:95:52:46:7e:ee:
                    dd:96:a0:ee:2f:87:a1:59:87:29:d8:3c:f4:f6:76:
                    a6:88:60:4e:a8:a0:8b:17:4b:40:99:72:03:e9:d2:
                    d1:c9:b9:89:b8:ba:be:02:2b:af:71:f4:2f:c0:8f:
                    b4:33:b1:bb:12:37:50:a4:7c:83:00:2e:5b:9d:1c:
                    d5:50:43:cb:33:3c:f2:18:8c:dc:fe:58:94:c5:f5:
                    ce:69:60:06:7d:f1:3c:ac:5c:d2:5c:ed:9b:1e:12:
                    89:60:d4:2b:ac:85:05:02:c3:75:ec:40:03:9d:e7:
                    8b:64:96:22:02:c6:8b:c1:b2:ab:2c:72:51:52:9f:
                    c9:5f:d9:c8:fc:fa:08:53:70:c2:9b:59:b5:f6:e8:
                    51:17:6a:5f:45:77:c6:c5:0f:81:14:51:87:5e:b6:
                    7c:e5:cc:25:54:26:87:d9:ab:1e:28:58:ee:ad:7d:
                    93:0a:3d:ee:52:d3:c6:28:c4:5b:83:1f:c4:76:91:
                    c5:ff:1d:a2:c4:35:13:b5:04:5c:a7:68:d3:50:81:
                    ee:be:25:e5:a5:af:f5:ba:33:9b:a6:df:9d:c8:36:
                    95:c2:60:95:6d:ce:fe:86:6a:01:dd:59:0b:71:3a:
                    47:b1:ff:bf:c2:1c:a1:c0:2c:1f:02:1f:68:1a:8c:
                    ed:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5E:22:00:78:CC:4F:A7:C5:FF:D2:EF:16:ED:09:0D:15:60:88:05
            X509v3 Authority Key Identifier:
                keyid:EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:af:49:a2:02:64:4e:1b:b7:c8:3e:94:46:06:01:b5:de:0e:
         6f:53:0f:36:6b:d5:28:d5:66:77:2a:6c:3c:81:70:ea:93:24:
         ba:77:ec:91:0f:c4:a1:12:d4:b5:a4:e3:bf:62:ab:c2:11:06:
         d8:c4:9f:78:ff:8d:26:86:61:76:d8:2a:a6:6c:07:c1:0e:3f:
         14:5c:d0:88:51:1a:56:f4:36:02:5b:30:9f:80:14:61:5f:f5:
         f0:4c:c2:90:2f:dc:29:88:b5:fa:6a:78:04:89:07:aa:17:31:
         3b:d3:23:ec:11:01:e1:f9:c9:c0:54:c3:6c:1a:d1:73:08:48:
         1d:8f:c6:16:63:d2:c5:ed:80:63:3b:01:6a:25:66:80:ef:1f:
         b2:97:c0:75:4b:4c:d4:9b:62:da:cc:cd:6f:08:1c:76:25:7a:
         36:ff:09:df:ca:70:32:11:6b:0d:91:ee:b5:cb:00:b7:c3:1a:
         44:d5:0c:e1:21:b9:32:87:59:00:a9:4e:b9:44:27:87:cd:c6:
         32:65:5a:7d:4c:ef:ee:91:16:9a:0b:40:1c:a4:4e:43:a1:d3:
         fd:b9:f5:fb:2f:ce:0e:01:26:d3:3d:f3:7d:09:a7:46:2c:1d:
         0e:1b:aa:64:c5:1e:43:93:1f:3f:51:42:12:2b:77:76:9e:8d:
         2a:00:a6:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzsBjdUix11+xU3GQ8fqnSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMTUzZGEzYzI0Y2UxMjM2ZTIwYzQ2ODYxNjM1ZGM4ZWZi
NTZhOTIwHhcNMjUwNDI2MjAwMDQyWhcNMjUwNDI3MjAwMDQyWjAzMTEwLwYDVQQD
Eyg1NzVlMjIwMDc4Y2M0ZmE3YzVmZmQyZWYxNmVkMDkwZDE1NjA4ODA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouJzQXZbz+UNlVJGfu7dlqDuL4eh
WYcp2Dz09namiGBOqKCLF0tAmXID6dLRybmJuLq+AiuvcfQvwI+0M7G7EjdQpHyD
AC5bnRzVUEPLMzzyGIzc/liUxfXOaWAGffE8rFzSXO2bHhKJYNQrrIUFAsN17EAD
neeLZJYiAsaLwbKrLHJRUp/JX9nI/PoIU3DCm1m19uhRF2pfRXfGxQ+BFFGHXrZ8
5cwlVCaH2aseKFjurX2TCj3uUtPGKMRbgx/EdpHF/x2ixDUTtQRcp2jTUIHuviXl
pa/1ujObpt+dyDaVwmCVbc7+hmoB3VkLcTpHsf+/whyhwCwfAh9oGoztqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdeIgB4zE+nxf/S7xbtCQ0VYIgFMB8GA1UdIwQY
MBaAFOsVPaPCTOEjbiDEaGFjXcjvtWqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnhVOW84Sk00U051SU1Sb1lXTmR5Ty0xYXBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80YmIwNjctYzM2NS00NTJlLWE5M2Ut
MzlkYTFhZThiNzMxLzEvNnhVOW84Sk00U051SU1Sb1lXTmR5Ty0xYXBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy80YmIwNjctYzM2NS00NTJlLWE5M2UtMzlkYTFhZThiNzMx
LzEvNnhVOW84Sk00U051SU1Sb1lXTmR5Ty0xYXBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASK9JogJk
Thu3yD6URgYBtd4Ob1MPNmvVKNVmdypsPIFw6pMkunfskQ/EoRLUtaTjv2KrwhEG
2MSfeP+NJoZhdtgqpmwHwQ4/FFzQiFEaVvQ2Alswn4AUYV/18EzCkC/cKYi1+mp4
BIkHqhcxO9Mj7BEB4fnJwFTDbBrRcwhIHY/GFmPSxe2AYzsBaiVmgO8fspfAdUtM
1Jti2szNbwgcdiV6Nv8J38pwMhFrDZHutcsAt8MaRNUM4SG5ModZAKlOuUQnh83G
MmVafUzv7pEWmgtAHKROQ6HT/bn1+y/ODgEm0z3zfQmnRiwdDhuqZMUeQ5MfP1FC
Eit3dp6NKgCmBg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 02:51:24 2025 by rpki-client