Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft
File:                     6diA6IcHf62Ct0yZgBD6myU-Dqg.mft (raw, json)
Hash identifier:          xAHQCd2E4SrGVjzy/s+UCOnSgJQ9CyiMVBECpcl+MSE=
Subject key identifier:   20:DB:C1:8E:1C:F6:4A:00:1E:F5:62:7B:A7:19:40:A7:6E:94:0E:0E
Authority key identifier: E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8
Certificate issuer:       /CN=e9d880e887077fad82b74c998010fa9b253e0ea8
Certificate serial:       019794B8B23FCAE4AFB91A2A299DAFAB5F6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft
Manifest number:          15A4
Signing time:             Sat 21 Jun 2025 23:00:21 +0000
Manifest this update:     Sat 21 Jun 2025 23:00:21 +0000
Manifest next update:     Sun 22 Jun 2025 23:00:21 +0000
Files and hashes:         1: 6diA6IcHf62Ct0yZgBD6myU-Dqg.crl (hash: TXbML62WB7NIgNma2z8f92LDnTecZ4qn8GykOSmvL8A=)
                          2: MAF_Elgy9u87cVsZVUNNm5Bb_UE.roa (hash: OX4gvHHnab+S9t+kA6ofZcqN5QU8A+hvwcM1NQu21jI=)
                          3: hbhPN4GRWF1Kh2C_ZGs02wMD7Rw.roa (hash: zbvVnLL4EUKhuAlyrvHCZpnuafPuDIGGmDdwOuvfDX8=)
                          4: zuxfhazkw5A2wUx6_S2GEVHOFH0.roa (hash: 2S2LWvnGAr/ZohzIcOjiYOYePYl9ZaqVuuPNKMqicns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Jun 2025 23:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:94:b8:b2:3f:ca:e4:af:b9:1a:2a:29:9d:af:ab:5f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9d880e887077fad82b74c998010fa9b253e0ea8
        Validity
            Not Before: Jun 21 23:00:21 2025 GMT
            Not After : Jun 22 23:00:21 2025 GMT
        Subject: CN=20dbc18e1cf64a001ef5627ba71940a76e940e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:99:68:f5:14:35:7b:e1:f8:30:15:0a:bc:c0:
                    17:98:03:40:ca:a4:64:9f:b5:ae:3f:1c:d5:38:a3:
                    44:34:62:45:e6:6a:0d:7c:17:ae:c5:32:16:9b:ab:
                    39:6c:ad:75:25:15:cb:5d:ba:a3:c5:0b:fe:ef:ff:
                    c6:c0:db:66:a7:6d:3a:2a:db:89:25:b7:ee:03:8f:
                    8b:1c:1e:05:4a:fe:54:c6:33:c2:47:dd:2c:91:19:
                    98:8b:ad:71:6f:cf:42:75:06:7a:87:48:39:51:d6:
                    4a:74:66:bc:c5:4f:f7:88:63:25:d7:a7:fe:24:7f:
                    ee:06:cb:36:43:c7:5a:d3:fe:08:6a:64:d9:43:35:
                    b6:dc:0e:13:c7:ed:24:1c:4c:8b:66:16:88:39:ce:
                    0e:73:ea:94:59:c4:0d:80:9d:a4:4b:5d:2c:87:91:
                    fa:40:ea:ed:68:bd:12:4e:7f:58:15:09:3e:06:05:
                    6c:ec:a8:a1:e9:d5:8d:a9:8b:47:95:88:f5:e2:38:
                    7c:0c:c4:f8:e6:f6:04:a7:9c:b8:80:f7:77:22:23:
                    9f:77:03:a8:10:c6:07:6e:47:01:51:5c:4c:27:68:
                    c9:94:99:ff:60:c8:76:a5:c6:38:a3:ad:d0:86:c6:
                    54:ed:1f:07:27:e5:3b:bf:1c:2e:ec:a1:38:73:e6:
                    c1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DB:C1:8E:1C:F6:4A:00:1E:F5:62:7B:A7:19:40:A7:6E:94:0E:0E
            X509v3 Authority Key Identifier:
                keyid:E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ff:3e:83:60:0b:4a:df:68:c4:0b:6b:a1:f1:16:45:17:43:
         02:54:ca:90:71:9c:a2:c1:ed:b9:67:d3:98:7a:84:a7:a8:20:
         97:99:3b:c0:d5:85:00:56:a3:ca:a8:7b:44:eb:ba:7f:d7:fd:
         9d:32:35:77:12:7f:b4:17:68:0d:44:d7:aa:c9:e6:21:89:9b:
         6c:2a:50:27:01:ce:27:ef:8c:61:3c:28:5f:8d:5d:10:2f:39:
         fa:a0:f4:da:04:c2:86:cf:68:43:19:14:18:92:14:a4:4d:fe:
         f3:12:00:85:a6:0d:91:8a:1c:dd:7f:d3:31:e2:60:04:a8:44:
         46:59:70:21:ed:fa:44:ae:ad:0a:6e:ab:9b:ba:fb:b1:54:da:
         e0:45:b8:a6:4e:91:f3:96:2e:b2:94:5f:4c:57:bd:a5:2f:b6:
         ab:f7:65:c2:c0:22:91:bc:1b:b9:1d:63:8d:8d:33:76:54:1b:
         31:8d:bf:7d:47:02:92:ed:45:c3:10:56:3f:91:2d:97:1e:e6:
         e9:9d:45:b0:f3:38:00:7b:19:0d:9b:ab:fa:e1:cd:25:61:77:
         4f:13:9a:2d:e2:4d:b7:62:b2:a6:73:b8:58:af:b1:d5:80:b8:
         76:63:39:8e:58:ec:74:49:e4:4b:47:a7:7b:2f:93:df:7e:8d:
         a4:ea:c0:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeUuLI/yuSvuRoqKZ2vq19qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ZDg4MGU4ODcwNzdmYWQ4MmI3NGM5OTgwMTBmYTliMjUz
ZTBlYTgwHhcNMjUwNjIxMjMwMDIxWhcNMjUwNjIyMjMwMDIxWjAzMTEwLwYDVQQD
EygyMGRiYzE4ZTFjZjY0YTAwMWVmNTYyN2JhNzE5NDBhNzZlOTQwZTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZlo9RQ1e+H4MBUKvMAXmANAyqRk
n7WuPxzVOKNENGJF5moNfBeuxTIWm6s5bK11JRXLXbqjxQv+7//GwNtmp206KtuJ
JbfuA4+LHB4FSv5UxjPCR90skRmYi61xb89CdQZ6h0g5UdZKdGa8xU/3iGMl16f+
JH/uBss2Q8da0/4IamTZQzW23A4Tx+0kHEyLZhaIOc4Oc+qUWcQNgJ2kS10sh5H6
QOrtaL0STn9YFQk+BgVs7Kih6dWNqYtHlYj14jh8DMT45vYEp5y4gPd3IiOfdwOo
EMYHbkcBUVxMJ2jJlJn/YMh2pcY4o63QhsZU7R8HJ+U7vxwu7KE4c+bB6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDbwY4c9koAHvVie6cZQKdulA4OMB8GA1UdIwQY
MBaAFOnYgOiHB3+tgrdMmYAQ+pslPg6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmRpQTZJY0hmNjJDdDB5WmdCRDZteVUtRHFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kYmRhZDItN2M0My00Y2FjLWI0YTYt
ZmFjZjQ4NTg2MjQ5LzEvNmRpQTZJY0hmNjJDdDB5WmdCRDZteVUtRHFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kYmRhZDItN2M0My00Y2FjLWI0YTYtZmFjZjQ4NTg2MjQ5
LzEvNmRpQTZJY0hmNjJDdDB5WmdCRDZteVUtRHFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfP8+g2AL
St9oxAtrofEWRRdDAlTKkHGcosHtuWfTmHqEp6ggl5k7wNWFAFajyqh7ROu6f9f9
nTI1dxJ/tBdoDUTXqsnmIYmbbCpQJwHOJ++MYTwoX41dEC85+qD02gTChs9oQxkU
GJIUpE3+8xIAhaYNkYoc3X/TMeJgBKhERllwIe36RK6tCm6rm7r7sVTa4EW4pk6R
85YuspRfTFe9pS+2q/dlwsAikbwbuR1jjY0zdlQbMY2/fUcCku1FwxBWP5Etlx7m
6Z1FsPM4AHsZDZur+uHNJWF3TxOaLeJNt2KypnO4WK+x1YC4dmM5jljsdEnkS0en
ey+T336NpOrANw==
-----END CERTIFICATE-----
Generated at Sun Jun 22 04:43:26 2025 by rpki-client