Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
File:                     6RJGEsq9EBwYyTXtIXdaDlxKibc.mft (raw, json)
Hash identifier:          4YXntBxKUkLRCwDwcpzIUgOGKCFvhrozREXfrFzyzHM=
Subject key identifier:   1B:97:48:5A:A4:66:E5:E7:04:47:D3:3A:0A:41:72:B6:17:24:B2:FA
Authority key identifier: E9:12:46:12:CA:BD:10:1C:18:C9:35:ED:21:77:5A:0E:5C:4A:89:B7
Certificate issuer:       /CN=e9124612cabd101c18c935ed21775a0e5c4a89b7
Certificate serial:       019873E2BE658137DA55BADBCEB9B45FA905
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
Manifest number:          09BC
Signing time:             Mon 04 Aug 2025 07:01:36 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:36 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:36 +0000
Files and hashes:         1: 6RJGEsq9EBwYyTXtIXdaDlxKibc.crl (hash: i+kuTKAU6tsFsEQgBbkjChyKNT4FOjaUitEdP/8MrmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:be:65:81:37:da:55:ba:db:ce:b9:b4:5f:a9:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9124612cabd101c18c935ed21775a0e5c4a89b7
        Validity
            Not Before: Aug  4 07:01:36 2025 GMT
            Not After : Aug  5 07:01:36 2025 GMT
        Subject: CN=1b97485aa466e5e70447d33a0a4172b61724b2fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ca:ac:d9:3d:c2:37:c1:a6:f5:0e:3f:d3:b9:
                    7a:97:8b:a8:40:9a:ba:26:29:23:c8:6e:98:b6:ee:
                    09:e0:34:9e:2f:f9:a1:3e:a2:01:ee:fa:a6:50:42:
                    6e:7e:9f:d8:9e:f2:3e:69:18:64:96:a1:34:98:1f:
                    17:1c:40:39:01:d5:fa:51:d4:6d:7e:cd:d3:49:42:
                    bc:9e:9b:2b:9e:6a:7f:1a:e1:de:16:38:4c:77:5c:
                    99:1a:95:dd:7c:cd:6e:5a:be:27:fe:df:94:50:b9:
                    3f:bc:6e:fe:b7:4b:5c:fa:cf:0b:9a:ca:9b:37:ec:
                    2c:da:a3:df:4d:51:e6:ec:45:39:28:0d:87:f3:08:
                    44:d7:06:25:38:7f:f7:a9:a1:3c:28:a7:ae:06:7e:
                    1a:4d:59:94:e4:f2:0e:50:01:3c:78:11:16:f2:75:
                    2b:d0:55:1a:14:8e:41:41:47:7f:8b:78:56:9d:43:
                    1a:73:03:78:41:68:a7:8d:8f:d2:e5:2b:ad:44:81:
                    3d:a1:82:14:90:c2:95:a0:69:aa:51:83:ea:70:a7:
                    70:b5:71:24:b1:5f:0c:82:36:7c:9c:71:9c:27:e9:
                    04:53:87:09:b2:84:ef:55:40:0b:0c:0d:0a:ed:5d:
                    e8:a9:96:a8:1d:d9:58:69:db:cf:0b:86:b2:67:11:
                    87:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:97:48:5A:A4:66:E5:E7:04:47:D3:3A:0A:41:72:B6:17:24:B2:FA
            X509v3 Authority Key Identifier:
                keyid:E9:12:46:12:CA:BD:10:1C:18:C9:35:ED:21:77:5A:0E:5C:4A:89:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:6d:19:0a:40:f4:be:2f:88:ab:6c:39:a4:e9:dd:08:14:11:
         96:e1:b3:a0:89:07:18:e5:c6:41:d9:34:c1:dd:95:03:63:94:
         ab:04:51:ad:0f:06:59:ce:29:26:e6:bd:37:ac:7b:18:e7:da:
         d1:26:eb:7c:4c:04:2f:01:3f:43:64:c1:2f:47:0c:eb:72:90:
         d5:32:80:d6:50:94:b4:df:dd:71:91:40:69:1a:18:d1:e0:df:
         c1:df:a0:cf:69:64:5d:f2:9f:c9:bf:74:63:29:c4:6c:4a:a0:
         52:40:01:d3:ad:56:18:7d:f3:ed:7a:18:0d:29:82:9f:b0:ce:
         ad:e2:ff:39:6c:eb:95:09:8f:45:93:a7:2c:db:85:ca:de:76:
         e1:68:3a:c0:e4:08:80:44:f2:96:3d:93:9a:4b:9c:d2:81:b1:
         c6:80:3f:01:bd:19:b9:4b:9d:71:61:d7:57:2a:e8:be:79:a6:
         c9:e4:67:9f:81:5c:91:5f:6e:40:a0:ae:6d:fa:6e:56:f3:c2:
         8a:d1:5b:6e:62:66:3e:b4:0c:e5:ab:f8:84:79:c1:55:9d:28:
         db:13:55:36:7d:22:43:9f:55:23:3b:1c:83:72:e1:83:b9:86:
         3b:d1:42:ba:6a:bd:f3:79:57:06:2a:1c:30:65:9c:fe:18:41:
         37:82:9b:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4r5lgTfaVbrbzrm0X6kFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MTI0NjEyY2FiZDEwMWMxOGM5MzVlZDIxNzc1YTBlNWM0
YTg5YjcwHhcNMjUwODA0MDcwMTM2WhcNMjUwODA1MDcwMTM2WjAzMTEwLwYDVQQD
EygxYjk3NDg1YWE0NjZlNWU3MDQ0N2QzM2EwYTQxNzJiNjE3MjRiMmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksqs2T3CN8Gm9Q4/07l6l4uoQJq6
JikjyG6Ytu4J4DSeL/mhPqIB7vqmUEJufp/YnvI+aRhklqE0mB8XHEA5AdX6UdRt
fs3TSUK8npsrnmp/GuHeFjhMd1yZGpXdfM1uWr4n/t+UULk/vG7+t0tc+s8Lmsqb
N+ws2qPfTVHm7EU5KA2H8whE1wYlOH/3qaE8KKeuBn4aTVmU5PIOUAE8eBEW8nUr
0FUaFI5BQUd/i3hWnUMacwN4QWinjY/S5SutRIE9oYIUkMKVoGmqUYPqcKdwtXEk
sV8MgjZ8nHGcJ+kEU4cJsoTvVUALDA0K7V3oqZaoHdlYadvPC4ayZxGHfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuXSFqkZuXnBEfTOgpBcrYXJLL6MB8GA1UdIwQY
MBaAFOkSRhLKvRAcGMk17SF3Wg5cSom3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlJKR0VzcTlFQndZeVRYdElYZGFEbHhLaWJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9kNzI2MjgtMmQzNy00YzlmLWIxZjMt
YzFkODQ1NzA4YTZiLzEvNlJKR0VzcTlFQndZeVRYdElYZGFEbHhLaWJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9kNzI2MjgtMmQzNy00YzlmLWIxZjMtYzFkODQ1NzA4YTZi
LzEvNlJKR0VzcTlFQndZeVRYdElYZGFEbHhLaWJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiG0ZCkD0
vi+Iq2w5pOndCBQRluGzoIkHGOXGQdk0wd2VA2OUqwRRrQ8GWc4pJua9N6x7GOfa
0SbrfEwELwE/Q2TBL0cM63KQ1TKA1lCUtN/dcZFAaRoY0eDfwd+gz2lkXfKfyb90
YynEbEqgUkAB061WGH3z7XoYDSmCn7DOreL/OWzrlQmPRZOnLNuFyt524Wg6wOQI
gETylj2Tmkuc0oGxxoA/Ab0ZuUudcWHXVyrovnmmyeRnn4FckV9uQKCubfpuVvPC
itFbbmJmPrQM5av4hHnBVZ0o2xNVNn0iQ59VIzscg3Lhg7mGO9FCumq983lXBioc
MGWc/hhBN4Kbkw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:51 2025 by rpki-client