Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.mft
File:                     6Hodk-5Oh81VCZq4rSXuwBxP0kw.mft (raw, json)
Hash identifier:          Xkecx7HCgxLgxr2eMPJ3LTKpbq9QWhBusqYZd6GbNsI=
Subject key identifier:   ED:46:FC:B2:C2:6B:AC:80:A0:1C:8C:E3:D6:A9:CD:1F:2B:37:22:22
Authority key identifier: E8:7A:1D:93:EE:4E:87:CD:55:09:9A:B8:AD:25:EE:C0:1C:4F:D2:4C
Certificate issuer:       /CN=e87a1d93ee4e87cd55099ab8ad25eec01c4fd24c
Certificate serial:       0197B6A0AC38200669699E26C9BA08F18808
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Hodk-5Oh81VCZq4rSXuwBxP0kw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.mft
Manifest number:          0AF9
Signing time:             Sat 28 Jun 2025 13:01:12 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:12 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:12 +0000
Files and hashes:         1: 6Hodk-5Oh81VCZq4rSXuwBxP0kw.crl (hash: ZlMZeqvYz3cd6hZaq0azIuI0V8KaGJcEeRi9Y17Hrx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Hodk-5Oh81VCZq4rSXuwBxP0kw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:ac:38:20:06:69:69:9e:26:c9:ba:08:f1:88:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e87a1d93ee4e87cd55099ab8ad25eec01c4fd24c
        Validity
            Not Before: Jun 28 13:01:12 2025 GMT
            Not After : Jun 29 13:01:12 2025 GMT
        Subject: CN=ed46fcb2c26bac80a01c8ce3d6a9cd1f2b372222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b9:f6:ef:af:be:67:bf:87:1f:ac:4d:e6:4a:
                    ab:b1:30:e4:24:ea:00:a8:b7:e8:db:1c:9a:4c:46:
                    f1:5f:02:22:bb:61:c3:6b:7b:ed:4e:2c:ff:05:e3:
                    18:64:ad:4a:60:d6:5e:7a:0f:bd:9d:39:a1:c0:12:
                    51:ef:b8:c8:d0:a7:f2:cd:4e:ed:cf:a8:fe:d4:ae:
                    e1:61:63:cc:9a:06:c8:45:f2:31:a7:c4:38:14:e6:
                    0f:b6:4c:75:d1:c0:37:e4:40:18:3a:d1:47:25:54:
                    bd:97:59:24:86:1e:a8:78:db:86:bd:67:7f:59:2a:
                    55:38:40:9e:68:89:be:1f:a4:37:f2:ae:c8:09:1d:
                    25:23:b9:16:5e:25:a3:c5:b5:d5:4e:6e:15:1e:26:
                    d7:4c:31:6a:0e:99:11:78:8d:60:01:41:e6:d7:e4:
                    c9:c9:73:2e:75:11:a4:9a:c7:53:ba:76:62:2a:bf:
                    5e:75:57:74:ee:f8:47:a1:18:35:16:7d:68:7f:4d:
                    22:1e:7e:41:36:3f:d6:fa:d4:c4:d8:a6:6f:34:80:
                    99:a6:6a:e2:f6:65:d0:e9:10:82:36:58:1c:cc:73:
                    da:f3:77:3c:de:d7:d4:0c:6c:98:cc:61:64:23:d8:
                    43:c5:3c:ce:83:84:87:f0:b8:94:5f:f8:4d:18:61:
                    b7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:46:FC:B2:C2:6B:AC:80:A0:1C:8C:E3:D6:A9:CD:1F:2B:37:22:22
            X509v3 Authority Key Identifier:
                keyid:E8:7A:1D:93:EE:4E:87:CD:55:09:9A:B8:AD:25:EE:C0:1C:4F:D2:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hodk-5Oh81VCZq4rSXuwBxP0kw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:89:66:da:e5:01:9d:9f:29:71:66:5f:0f:39:e0:f4:12:50:
         9a:c6:ab:48:ff:c6:86:67:16:1e:eb:33:74:fc:9d:00:fa:37:
         d6:47:f8:f0:5d:29:be:df:ff:7e:aa:a8:96:98:e8:67:09:4c:
         6a:86:d2:f8:1a:55:b8:f1:73:a2:00:68:fd:0f:60:0b:8e:de:
         7b:d5:16:64:30:b9:91:6e:16:bf:b7:18:02:cd:63:06:fa:e9:
         e9:c3:a5:be:62:e6:01:a6:af:eb:21:b7:4b:a6:7c:bc:a4:60:
         6d:7c:ae:3d:4a:be:b2:b8:14:72:47:6f:97:72:fb:c8:17:d7:
         24:f1:5f:69:b0:34:3c:ba:5a:3f:1d:86:f1:92:c6:03:03:01:
         d1:db:9f:6f:b2:c7:b2:3d:02:70:87:44:e8:81:6b:c1:0b:39:
         7c:42:26:cc:49:3f:c2:e3:59:45:b1:b2:81:3e:98:9b:d4:df:
         12:09:dc:fd:1f:1a:5c:9c:4d:e2:cf:bf:31:fe:25:ad:d3:4f:
         56:f7:12:48:a9:fd:bc:6d:fb:84:01:13:f2:24:64:56:5b:d1:
         dc:77:97:9a:56:1b:44:bb:74:18:73:bc:e4:7f:a3:a7:74:5f:
         4c:33:db:da:9c:37:60:16:10:c7:31:a8:69:44:52:9a:2e:94:
         50:8c:e5:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oKw4IAZpaZ4myboI8YgIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4N2ExZDkzZWU0ZTg3Y2Q1NTA5OWFiOGFkMjVlZWMwMWM0
ZmQyNGMwHhcNMjUwNjI4MTMwMTEyWhcNMjUwNjI5MTMwMTEyWjAzMTEwLwYDVQQD
EyhlZDQ2ZmNiMmMyNmJhYzgwYTAxYzhjZTNkNmE5Y2QxZjJiMzcyMjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLn276++Z7+HH6xN5kqrsTDkJOoA
qLfo2xyaTEbxXwIiu2HDa3vtTiz/BeMYZK1KYNZeeg+9nTmhwBJR77jI0KfyzU7t
z6j+1K7hYWPMmgbIRfIxp8Q4FOYPtkx10cA35EAYOtFHJVS9l1kkhh6oeNuGvWd/
WSpVOECeaIm+H6Q38q7ICR0lI7kWXiWjxbXVTm4VHibXTDFqDpkReI1gAUHm1+TJ
yXMudRGkmsdTunZiKr9edVd07vhHoRg1Fn1of00iHn5BNj/W+tTE2KZvNICZpmri
9mXQ6RCCNlgczHPa83c83tfUDGyYzGFkI9hDxTzOg4SH8LiUX/hNGGG3swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1G/LLCa6yAoByM49apzR8rNyIiMB8GA1UdIwQY
MBaAFOh6HZPuTofNVQmauK0l7sAcT9JMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkhvZGstNU9oODFWQ1pxNHJTWHV3QnhQMGt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yYjNlM2EtOTk4Yy00MDM1LWEyOTUt
OWQyZjg0NzYwNDVhLzEvNkhvZGstNU9oODFWQ1pxNHJTWHV3QnhQMGt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8yYjNlM2EtOTk4Yy00MDM1LWEyOTUtOWQyZjg0NzYwNDVh
LzEvNkhvZGstNU9oODFWQ1pxNHJTWHV3QnhQMGt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIlm2uUB
nZ8pcWZfDzng9BJQmsarSP/GhmcWHuszdPydAPo31kf48F0pvt//fqqolpjoZwlM
aobS+BpVuPFzogBo/Q9gC47ee9UWZDC5kW4Wv7cYAs1jBvrp6cOlvmLmAaav6yG3
S6Z8vKRgbXyuPUq+srgUckdvl3L7yBfXJPFfabA0PLpaPx2G8ZLGAwMB0dufb7LH
sj0CcIdE6IFrwQs5fEImzEk/wuNZRbGygT6Ym9TfEgnc/R8aXJxN4s+/Mf4lrdNP
VvcSSKn9vG37hAET8iRkVlvR3HeXmlYbRLt0GHO85H+jp3RfTDPb2pw3YBYQxzGo
aURSmi6UUIzlCw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:30 2025 by rpki-client