Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft
File:                     a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft (raw, json)
Hash identifier:          OrPoku8wkE7/iwhJkOqwjxcCyZ6rcs2lz3e9WJI4IWo=
Subject key identifier:   0A:12:3F:71:BB:B6:93:75:B8:62:DE:12:CE:1F:DB:C6:E7:25:D4:39
Authority key identifier: 6B:EB:8E:75:0D:31:BC:CE:AA:88:04:B5:F6:53:25:9D:18:50:E8:1C
Certificate issuer:       /CN=6beb8e750d31bcceaa8804b5f653259d1850e81c
Certificate serial:       01976C986C1815EA29248680EFFCC3F59054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft
Manifest number:          158B
Signing time:             Sat 14 Jun 2025 04:00:17 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:17 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:17 +0000
Files and hashes:         1: a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.crl (hash: zdjUZq9mJ1LOAtIgFxRg4/3wRtTdg4JjiTIyeOsT6WY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:6c:18:15:ea:29:24:86:80:ef:fc:c3:f5:90:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6beb8e750d31bcceaa8804b5f653259d1850e81c
        Validity
            Not Before: Jun 14 04:00:17 2025 GMT
            Not After : Jun 15 04:00:17 2025 GMT
        Subject: CN=0a123f71bbb69375b862de12ce1fdbc6e725d439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:84:d1:72:36:81:ab:d9:cb:86:fb:e1:5f:c2:
                    38:a4:0a:e2:f5:db:52:4a:29:08:c9:e4:4a:ed:2f:
                    8f:ec:17:4d:f5:f5:85:bd:df:52:f6:03:e8:38:7a:
                    a8:e7:81:7c:24:7d:88:72:c1:a4:8e:9b:5d:a0:d7:
                    a0:11:41:74:72:6d:75:c5:18:48:75:6f:2c:1d:5e:
                    4a:51:e7:54:2d:5e:32:fa:a3:ac:34:74:b5:65:6a:
                    03:f6:89:a0:ea:6a:b7:2d:ce:c1:77:4c:b2:15:2d:
                    b0:71:65:60:9a:86:b2:f6:c2:69:00:47:7a:37:e9:
                    09:ab:ac:b3:dd:40:58:95:4b:3c:a2:ac:53:43:48:
                    d3:7e:06:bf:ed:90:3c:e5:fc:fe:7c:95:93:b6:01:
                    29:32:06:1d:65:c7:24:7c:44:df:e0:d6:7b:0c:14:
                    01:fd:ee:3f:3c:df:8c:ae:e8:87:1e:87:d3:3f:39:
                    c8:2f:a8:f4:78:33:01:9b:ad:be:34:50:14:9b:f1:
                    3f:21:ab:9e:99:d9:b1:3e:1b:5f:d5:d7:0e:90:83:
                    99:ab:51:ef:12:d5:01:88:36:63:04:70:fa:2d:b5:
                    81:a6:da:60:51:95:06:46:a5:4e:0c:2b:11:17:20:
                    6d:75:32:f8:6e:e8:2f:cb:14:ba:fd:22:2a:1b:c5:
                    b1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:12:3F:71:BB:B6:93:75:B8:62:DE:12:CE:1F:DB:C6:E7:25:D4:39
            X509v3 Authority Key Identifier:
                keyid:6B:EB:8E:75:0D:31:BC:CE:AA:88:04:B5:F6:53:25:9D:18:50:E8:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:e5:73:da:7d:0e:c0:81:3d:d8:50:63:42:cb:ec:75:34:2a:
         1a:cc:f9:26:7d:db:9f:d0:07:05:71:53:4f:73:aa:2b:11:1e:
         f8:0b:d4:26:21:18:76:03:a7:dd:e9:e2:98:7b:3a:30:bb:83:
         84:98:d5:a8:45:17:05:e2:d5:9b:56:94:9f:d1:3e:03:88:42:
         3e:6b:68:45:14:bc:41:78:8d:85:39:20:1f:e7:7f:e6:3d:ec:
         49:ea:0d:fe:6a:51:f9:09:a8:c1:94:f4:30:bb:92:47:fa:3b:
         5f:34:9b:aa:0b:0e:09:9f:1a:d4:c4:c9:3a:09:6e:1b:4e:db:
         6b:28:3f:25:91:fb:6e:b4:0f:d3:fb:8a:44:43:68:6e:4b:f6:
         fc:5f:b5:47:09:f6:7c:2a:8a:05:46:9e:e4:12:48:dd:3e:f0:
         76:b5:85:b2:ec:5c:9b:ba:fd:79:22:bc:02:80:a3:6b:77:c3:
         bc:42:01:20:6d:c8:f6:ac:79:11:0f:f7:e1:74:80:b4:c6:60:
         fa:10:31:ed:c1:9c:cf:3f:94:4c:c0:48:63:7c:30:c0:d6:e6:
         3e:7d:e6:ec:45:c8:f6:19:af:80:f0:38:bb:1c:83:c5:88:47:
         a5:b8:28:9d:2c:b0:8c:99:22:c9:c0:b2:8c:39:40:6f:0d:95:
         3e:e8:fa:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmGwYFeopJIaA7/zD9ZBUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZWI4ZTc1MGQzMWJjY2VhYTg4MDRiNWY2NTMyNTlkMTg1
MGU4MWMwHhcNMjUwNjE0MDQwMDE3WhcNMjUwNjE1MDQwMDE3WjAzMTEwLwYDVQQD
EygwYTEyM2Y3MWJiYjY5Mzc1Yjg2MmRlMTJjZTFmZGJjNmU3MjVkNDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYTRcjaBq9nLhvvhX8I4pAri9dtS
SikIyeRK7S+P7BdN9fWFvd9S9gPoOHqo54F8JH2IcsGkjptdoNegEUF0cm11xRhI
dW8sHV5KUedULV4y+qOsNHS1ZWoD9omg6mq3Lc7Bd0yyFS2wcWVgmoay9sJpAEd6
N+kJq6yz3UBYlUs8oqxTQ0jTfga/7ZA85fz+fJWTtgEpMgYdZcckfETf4NZ7DBQB
/e4/PN+MruiHHofTPznIL6j0eDMBm62+NFAUm/E/IauemdmxPhtf1dcOkIOZq1Hv
EtUBiDZjBHD6LbWBptpgUZUGRqVODCsRFyBtdTL4bugvyxS6/SIqG8WxIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoSP3G7tpN1uGLeEs4f28bnJdQ5MB8GA1UdIwQY
MBaAFGvrjnUNMbzOqogEtfZTJZ0YUOgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYS11T2RRMHh2TTZxaUFTMTlsTWxuUmhRNkJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81NTIyMjktYjY2My00YTExLWFkNGIt
OWZmMGY5NTRkNzVkLzEvYS11T2RRMHh2TTZxaUFTMTlsTWxuUmhRNkJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi81NTIyMjktYjY2My00YTExLWFkNGItOWZmMGY5NTRkNzVk
LzEvYS11T2RRMHh2TTZxaUFTMTlsTWxuUmhRNkJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPuVz2n0O
wIE92FBjQsvsdTQqGsz5Jn3bn9AHBXFTT3OqKxEe+AvUJiEYdgOn3enimHs6MLuD
hJjVqEUXBeLVm1aUn9E+A4hCPmtoRRS8QXiNhTkgH+d/5j3sSeoN/mpR+QmowZT0
MLuSR/o7XzSbqgsOCZ8a1MTJOgluG07bayg/JZH7brQP0/uKRENobkv2/F+1Rwn2
fCqKBUae5BJI3T7wdrWFsuxcm7r9eSK8AoCja3fDvEIBIG3I9qx5EQ/34XSAtMZg
+hAx7cGczz+UTMBIY3wwwNbmPn3m7EXI9hmvgPA4uxyDxYhHpbgonSywjJkiycCy
jDlAbw2VPuj65g==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:17:10 2025 by rpki-client