Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
File:                     5XB6RVkqydFxmoV2lgMXeCm0bgo.mft (raw, json)
Hash identifier:          Uex8SmB7ei2OyclUgNljvbDTJA3e4BS5WoeTzT1NVBQ=
Subject key identifier:   BD:65:38:DC:CC:3D:10:D3:6B:52:50:7C:A1:19:A1:AD:75:32:5E:22
Authority key identifier: E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
Certificate issuer:       /CN=e5707a45592ac9d1719a85769603177829b46e0a
Certificate serial:       019769CED147EB41924FE7881421A55063C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
Manifest number:          0B8B
Signing time:             Fri 13 Jun 2025 15:00:51 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:51 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:51 +0000
Files and hashes:         1: 5XB6RVkqydFxmoV2lgMXeCm0bgo.crl (hash: MK0Iz9VYjWgVA8HyXUAxKJiD8D9RGaeA4mndJI4T7es=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:d1:47:eb:41:92:4f:e7:88:14:21:a5:50:63:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5707a45592ac9d1719a85769603177829b46e0a
        Validity
            Not Before: Jun 13 15:00:51 2025 GMT
            Not After : Jun 14 15:00:51 2025 GMT
        Subject: CN=bd6538dccc3d10d36b52507ca119a1ad75325e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a1:62:81:7d:61:c9:81:d7:f8:77:4b:47:a7:
                    81:5d:53:a1:d7:43:12:bd:6f:64:80:f7:21:b9:56:
                    c5:c3:ca:c5:e3:6d:fb:e6:9f:12:a8:a6:0c:0c:ad:
                    06:46:da:4b:ea:17:ad:e1:a7:83:52:b4:e6:37:0d:
                    2d:28:a2:fb:9a:a8:8a:7d:1f:a6:00:73:8a:f8:7f:
                    89:22:99:7c:aa:a7:f5:35:d8:a9:eb:54:c9:de:4e:
                    d1:64:05:9d:9a:7e:3f:6c:58:d2:83:e9:63:08:4b:
                    2a:bc:bf:6b:2b:e6:fb:fa:8f:cc:ad:62:6d:47:63:
                    80:a4:ba:e4:45:00:d5:98:9b:f4:5a:59:0c:f5:4c:
                    af:d4:60:22:7d:11:27:8e:39:a2:85:8f:48:0e:f2:
                    e8:6e:0e:72:b1:c1:e1:d0:f3:e1:32:99:f5:0b:a1:
                    f9:d2:15:68:7b:74:48:99:6d:ab:58:58:4c:4d:44:
                    08:44:af:1f:36:3c:85:7d:80:f0:77:23:ad:2a:b5:
                    c1:ef:fb:6e:07:c2:e7:ee:9a:bd:f6:1b:d8:e8:51:
                    a7:70:38:8f:5b:f4:2c:28:59:2e:b2:f2:47:fe:4e:
                    64:e7:17:48:48:58:43:cd:d3:c4:f3:86:54:a4:a7:
                    73:a5:1f:e4:b9:64:a4:79:30:33:3c:c7:93:d0:32:
                    7c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:65:38:DC:CC:3D:10:D3:6B:52:50:7C:A1:19:A1:AD:75:32:5E:22
            X509v3 Authority Key Identifier:
                keyid:E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b2:62:7a:83:2a:eb:8c:b6:b1:68:b0:b2:4f:7e:72:38:09:
         24:9c:1a:e6:25:7d:6f:d0:db:c6:51:36:91:d1:39:e4:9e:ed:
         68:5a:d5:7d:c2:ef:ea:72:8f:40:af:07:a8:da:87:1a:a0:94:
         8a:ad:3f:78:36:5c:ad:dc:30:fe:3b:84:9d:a5:ef:27:c0:d0:
         3a:9e:07:e9:0b:97:6a:14:54:12:bb:c2:a0:4b:05:3b:10:e3:
         fb:99:7f:a5:26:18:28:3d:05:4f:cf:93:54:3a:92:68:4d:53:
         77:1a:46:c6:99:2d:15:27:80:ed:89:77:ed:58:8e:47:f2:7c:
         e2:97:a2:27:67:69:ee:a6:94:a4:bb:21:96:6c:75:7d:b6:ee:
         1a:f6:af:a5:f8:18:86:75:1a:8f:90:d8:79:4b:ad:21:a5:d7:
         b8:06:92:91:8e:52:53:68:bc:b6:b0:78:0b:ec:c4:e8:0f:d5:
         ec:73:0e:7f:e1:8c:8f:7c:0c:18:63:a2:b8:fd:70:1a:70:be:
         6d:a2:dd:1c:86:b7:26:cf:6d:67:5a:d9:0c:bd:b0:6e:3f:74:
         82:69:39:7c:d6:00:cd:83:3d:dd:ce:cb:10:b1:af:a7:4f:88:
         e1:cd:8a:70:4b:be:e0:bc:57:4a:33:3e:95:03:31:bd:60:bb:
         58:b9:d2:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpztFH60GST+eIFCGlUGPHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzA3YTQ1NTkyYWM5ZDE3MTlhODU3Njk2MDMxNzc4Mjli
NDZlMGEwHhcNMjUwNjEzMTUwMDUxWhcNMjUwNjE0MTUwMDUxWjAzMTEwLwYDVQQD
EyhiZDY1MzhkY2NjM2QxMGQzNmI1MjUwN2NhMTE5YTFhZDc1MzI1ZTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqFigX1hyYHX+HdLR6eBXVOh10MS
vW9kgPchuVbFw8rF42375p8SqKYMDK0GRtpL6het4aeDUrTmNw0tKKL7mqiKfR+m
AHOK+H+JIpl8qqf1Ndip61TJ3k7RZAWdmn4/bFjSg+ljCEsqvL9rK+b7+o/MrWJt
R2OApLrkRQDVmJv0WlkM9Uyv1GAifREnjjmihY9IDvLobg5yscHh0PPhMpn1C6H5
0hVoe3RImW2rWFhMTUQIRK8fNjyFfYDwdyOtKrXB7/tuB8Ln7pq99hvY6FGncDiP
W/QsKFkusvJH/k5k5xdISFhDzdPE84ZUpKdzpR/kuWSkeTAzPMeT0DJ82wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1lONzMPRDTa1JQfKEZoa11Ml4iMB8GA1UdIwQY
MBaAFOVwekVZKsnRcZqFdpYDF3gptG4KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhCNlJWa3F5ZEZ4bW9WMmxnTVhlQ20wYmdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xNDQ2YWEtNmU0MS00NWMwLWIwOWEt
MzJjMzY1OGIyNWJlLzEvNVhCNlJWa3F5ZEZ4bW9WMmxnTVhlQ20wYmdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xNDQ2YWEtNmU0MS00NWMwLWIwOWEtMzJjMzY1OGIyNWJl
LzEvNVhCNlJWa3F5ZEZ4bW9WMmxnTVhlQ20wYmdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfrJieoMq
64y2sWiwsk9+cjgJJJwa5iV9b9DbxlE2kdE55J7taFrVfcLv6nKPQK8HqNqHGqCU
iq0/eDZcrdww/juEnaXvJ8DQOp4H6QuXahRUErvCoEsFOxDj+5l/pSYYKD0FT8+T
VDqSaE1TdxpGxpktFSeA7Yl37ViOR/J84peiJ2dp7qaUpLshlmx1fbbuGvavpfgY
hnUaj5DYeUutIaXXuAaSkY5SU2i8trB4C+zE6A/V7HMOf+GMj3wMGGOiuP1wGnC+
baLdHIa3Js9tZ1rZDL2wbj90gmk5fNYAzYM93c7LELGvp0+I4c2KcEu+4LxXSjM+
lQMxvWC7WLnSLw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:30:23 2025 by rpki-client