Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
File:                     L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft (raw, json)
Hash identifier:          tR6icB7LW7eOdS/B4+PCFFoHgniaXDYwi6ZEUrA+AGM=
Subject key identifier:   F5:48:46:6F:49:16:E4:AA:8E:23:E6:E4:44:60:F6:27:7B:C2:48:54
Authority key identifier: 2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20
Certificate issuer:       /CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120
Certificate serial:       0197B6A17F191441E16BA2A64B2C46FCFA97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
Manifest number:          15B0
Signing time:             Sat 28 Jun 2025 13:02:06 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:06 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:06 +0000
Files and hashes:         1: L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl (hash: 78WoqJcT+5xrLAdfcOqC9ueGkVhpd/7gxpfMRY+LsZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:7f:19:14:41:e1:6b:a2:a6:4b:2c:46:fc:fa:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120
        Validity
            Not Before: Jun 28 13:02:06 2025 GMT
            Not After : Jun 29 13:02:06 2025 GMT
        Subject: CN=f548466f4916e4aa8e23e6e44460f6277bc24854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ea:78:00:20:d6:f8:e1:31:22:7d:9b:ba:bc:
                    50:9e:2a:24:bc:c5:43:18:ff:36:80:73:04:7b:e8:
                    25:f7:b9:27:ef:1d:64:e9:f7:67:52:fe:3c:3f:82:
                    e6:8d:6d:3f:ed:95:19:71:74:e3:52:26:04:e5:ad:
                    d7:a6:ab:d4:6e:56:49:97:ec:02:bb:76:ab:8e:b3:
                    84:74:ba:d5:a6:e4:46:bb:f1:df:33:aa:44:8b:07:
                    67:a1:34:8e:59:d5:77:e9:24:30:35:55:0e:ac:de:
                    f8:bb:d0:71:52:68:c7:fb:36:b8:27:d0:b5:ac:e7:
                    5f:4f:aa:6a:6c:1a:c8:ca:f8:46:3f:d8:ae:4d:df:
                    e4:41:f2:bb:a6:89:ea:95:ca:a8:a3:c8:6e:89:fd:
                    0c:d3:87:d6:be:7a:f1:13:31:76:02:68:54:2f:83:
                    f7:eb:fc:7c:a8:07:7b:ea:79:ba:76:79:d6:58:09:
                    89:21:b5:ba:d0:93:54:4f:b9:43:86:0b:f9:2d:c6:
                    d2:78:f8:fe:6b:b4:e0:c6:24:ad:ca:42:92:8b:9b:
                    b4:5f:16:0e:42:99:d3:1b:d3:c7:88:e1:b6:82:94:
                    1e:33:d3:dd:b5:0d:f6:95:54:6a:34:be:eb:d3:4e:
                    6d:0f:4c:65:ce:3e:89:af:24:ee:5e:f5:cf:35:ab:
                    75:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:48:46:6F:49:16:E4:AA:8E:23:E6:E4:44:60:F6:27:7B:C2:48:54
            X509v3 Authority Key Identifier:
                keyid:2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:1e:f6:53:ce:e3:6b:c8:be:22:4e:a3:51:11:70:22:c5:33:
         13:88:ca:dc:1f:8e:d7:ad:d9:26:f2:c1:56:e7:5e:95:ce:bb:
         a3:a8:ea:9d:bc:ee:e1:08:2c:1a:bc:47:94:28:d6:fa:34:cb:
         b3:9c:42:da:f7:9d:03:c9:24:6d:a7:df:49:65:a5:2f:0a:e7:
         fb:32:e0:9b:2a:96:34:05:8a:33:ff:f6:eb:66:22:c2:22:a0:
         ae:cf:b1:6a:bc:b5:4a:c0:af:3d:80:d7:af:14:ec:dc:b7:26:
         9e:f8:32:45:fc:36:a8:b2:fe:09:a3:bc:48:c6:32:a9:2b:55:
         1e:3c:d4:7d:1d:e5:5e:9f:ba:76:91:b8:5d:a7:4d:a1:cc:5a:
         cd:b4:1f:41:b4:44:fd:2f:a3:a8:bb:25:ea:15:18:5e:7b:74:
         1d:d5:47:4c:1c:40:7b:8e:d4:c5:96:88:d1:2f:5e:04:8d:65:
         b4:c7:09:ad:6a:c0:5e:6e:4b:9c:ce:9e:17:4e:4b:8a:7f:96:
         25:28:23:33:37:3a:2d:52:d6:bb:75:e0:6a:0d:1c:3f:23:38:
         8c:01:f4:db:50:b7:e4:7c:10:9e:d4:71:13:94:15:1c:81:da:
         96:b8:db:4d:26:68:15:0c:ae:ff:71:d1:a7:cb:6e:ab:8c:46:
         3a:2d:85:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oX8ZFEHha6KmSyxG/PqXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZTBhYTdiZmFlMTI0NzQwMmFiYjZjODliNzViYjIzZjBm
MGYxMjAwHhcNMjUwNjI4MTMwMjA2WhcNMjUwNjI5MTMwMjA2WjAzMTEwLwYDVQQD
EyhmNTQ4NDY2ZjQ5MTZlNGFhOGUyM2U2ZTQ0NDYwZjYyNzdiYzI0ODU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+p4ACDW+OExIn2burxQniokvMVD
GP82gHMEe+gl97kn7x1k6fdnUv48P4LmjW0/7ZUZcXTjUiYE5a3XpqvUblZJl+wC
u3arjrOEdLrVpuRGu/HfM6pEiwdnoTSOWdV36SQwNVUOrN74u9BxUmjH+za4J9C1
rOdfT6pqbBrIyvhGP9iuTd/kQfK7ponqlcqoo8huif0M04fWvnrxEzF2AmhUL4P3
6/x8qAd76nm6dnnWWAmJIbW60JNUT7lDhgv5LcbSePj+a7TgxiStykKSi5u0XxYO
QpnTG9PHiOG2gpQeM9PdtQ32lVRqNL7r005tD0xlzj6JryTuXvXPNat17QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVIRm9JFuSqjiPm5ERg9id7wkhUMB8GA1UdIwQY
MBaAFC/gqnv64SR0Aqu2yJt1uyPw8PEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTC1DcWVfcmhKSFFDcTdiSW0zVzdJX0R3OFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hNDZkMzItYjA1NS00YWIyLTgyODYt
NTJjOWQzNTZhMjE1LzEvTC1DcWVfcmhKSFFDcTdiSW0zVzdJX0R3OFNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9hNDZkMzItYjA1NS00YWIyLTgyODYtNTJjOWQzNTZhMjE1
LzEvTC1DcWVfcmhKSFFDcTdiSW0zVzdJX0R3OFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfh72U87j
a8i+Ik6jURFwIsUzE4jK3B+O163ZJvLBVudelc67o6jqnbzu4QgsGrxHlCjW+jTL
s5xC2vedA8kkbaffSWWlLwrn+zLgmyqWNAWKM//262YiwiKgrs+xary1SsCvPYDX
rxTs3LcmnvgyRfw2qLL+CaO8SMYyqStVHjzUfR3lXp+6dpG4XadNocxazbQfQbRE
/S+jqLsl6hUYXnt0HdVHTBxAe47UxZaI0S9eBI1ltMcJrWrAXm5LnM6eF05Lin+W
JSgjMzc6LVLWu3Xgag0cPyM4jAH021C35HwQntRxE5QVHIHalrjbTSZoFQyu/3HR
p8tuq4xGOi2FKQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:48 2025 by rpki-client