Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
File:                     6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft (raw, json)
Hash identifier:          IR2Fb55xm+8VMkKCqLUfcMV0jLfqrZQMqvrx8hEr8PI=
Subject key identifier:   CE:61:92:7C:06:6A:E5:7C:5E:22:BD:12:88:14:F5:EB:EA:64:88:71
Authority key identifier: E8:2B:EF:EC:70:6E:ED:27:7A:9D:98:F7:0B:B3:FB:66:84:9B:F2:96
Certificate issuer:       /CN=e82befec706eed277a9d98f70bb3fb66849bf296
Certificate serial:       0198D583A91230C35703AD60919652340946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
Manifest number:          0F60
Signing time:             Sat 23 Aug 2025 06:00:32 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:32 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:32 +0000
Files and hashes:         1: 6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl (hash: 0rmLlePjn0tg/71uRaBwjYT2uwfSA/LkxfvS1eFvRKc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:a9:12:30:c3:57:03:ad:60:91:96:52:34:09:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82befec706eed277a9d98f70bb3fb66849bf296
        Validity
            Not Before: Aug 23 06:00:32 2025 GMT
            Not After : Aug 24 06:00:32 2025 GMT
        Subject: CN=ce61927c066ae57c5e22bd128814f5ebea648871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:87:87:b2:f8:50:47:fc:ec:1a:96:94:7f:de:
                    f0:46:78:e3:85:18:de:70:6a:6e:cc:3f:13:ac:7b:
                    8e:54:2f:b8:ce:c8:87:87:03:e3:69:9f:fe:80:c9:
                    ec:d2:97:3c:9a:9f:8c:04:ad:23:6a:5f:3f:81:63:
                    7a:c1:f2:de:e4:ec:c4:31:11:2b:00:27:c2:8d:ed:
                    87:05:54:e1:23:c9:b2:96:0f:ca:36:79:60:60:c7:
                    0f:48:3b:4a:d5:c7:47:48:41:6b:3b:43:d2:ec:e9:
                    29:18:91:49:0c:5a:ac:c1:43:04:31:18:ee:f7:8b:
                    94:f8:7e:d6:23:a1:48:68:21:f9:68:cd:31:fc:8d:
                    95:4a:fe:57:49:19:1d:08:40:97:cf:ef:a9:55:6e:
                    5b:d5:4f:8f:af:74:d6:d0:01:9b:06:6a:e8:ae:0f:
                    68:b3:28:4c:d5:f8:85:b7:f4:23:d1:cd:bb:fa:6d:
                    33:2c:5b:09:b9:0a:b1:ef:1b:dd:cd:c2:5b:9c:9c:
                    4f:f5:e6:0b:4b:39:bf:73:1f:95:ae:15:26:fb:08:
                    ba:2f:aa:c6:51:e7:8d:c0:62:32:24:01:31:9d:d2:
                    d7:43:80:71:31:9f:9e:80:aa:3e:5b:8b:13:5f:af:
                    1e:89:47:53:49:fd:f4:ff:c8:8a:f1:eb:02:5a:63:
                    20:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:61:92:7C:06:6A:E5:7C:5E:22:BD:12:88:14:F5:EB:EA:64:88:71
            X509v3 Authority Key Identifier:
                keyid:E8:2B:EF:EC:70:6E:ED:27:7A:9D:98:F7:0B:B3:FB:66:84:9B:F2:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:5d:cb:50:db:72:9c:27:07:02:1c:e6:1f:98:da:4c:c7:67:
         db:1f:28:bb:4c:a9:8b:37:73:52:9d:77:52:ae:cf:bf:c2:82:
         c3:3d:8e:82:80:10:27:52:ca:31:79:54:9e:21:96:8d:14:65:
         81:40:13:c8:5d:2f:f8:4b:a8:4a:81:6b:a7:c5:4c:28:fe:f1:
         20:ca:93:9d:24:42:6c:ef:01:9b:e6:b9:20:42:d0:81:05:8a:
         8a:f4:86:97:4e:93:41:d2:cd:d1:54:68:73:4e:ed:4d:1a:de:
         92:d0:13:9f:2d:bf:23:01:b2:9c:e6:b7:9b:1b:cd:b0:13:96:
         16:c8:83:11:bd:ea:5a:b2:3c:d8:7d:22:b9:32:9b:c6:9a:8b:
         0a:70:0d:3f:06:ed:8e:11:24:34:8f:8f:ce:be:e6:58:33:f1:
         43:6d:81:35:8a:41:2e:85:fd:00:1f:a7:b8:d9:8c:34:e1:19:
         17:0f:fe:25:b3:c9:46:0a:cf:13:c4:44:7e:5d:6f:c6:37:6c:
         c4:61:e3:90:38:4b:3f:d8:8a:07:ae:40:27:11:ca:6f:f9:99:
         69:57:ee:5a:d7:aa:97:8a:ed:e4:26:47:21:5e:75:f7:19:77:
         c2:f1:f2:35:b1:fb:a2:46:79:d5:1d:2a:0d:bd:b7:3f:1b:0c:
         b7:b3:c0:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg6kSMMNXA61gkZZSNAlGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MmJlZmVjNzA2ZWVkMjc3YTlkOThmNzBiYjNmYjY2ODQ5
YmYyOTYwHhcNMjUwODIzMDYwMDMyWhcNMjUwODI0MDYwMDMyWjAzMTEwLwYDVQQD
EyhjZTYxOTI3YzA2NmFlNTdjNWUyMmJkMTI4ODE0ZjVlYmVhNjQ4ODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4eHsvhQR/zsGpaUf97wRnjjhRje
cGpuzD8TrHuOVC+4zsiHhwPjaZ/+gMns0pc8mp+MBK0jal8/gWN6wfLe5OzEMREr
ACfCje2HBVThI8mylg/KNnlgYMcPSDtK1cdHSEFrO0PS7OkpGJFJDFqswUMEMRju
94uU+H7WI6FIaCH5aM0x/I2VSv5XSRkdCECXz++pVW5b1U+Pr3TW0AGbBmrorg9o
syhM1fiFt/Qj0c27+m0zLFsJuQqx7xvdzcJbnJxP9eYLSzm/cx+VrhUm+wi6L6rG
UeeNwGIyJAExndLXQ4BxMZ+egKo+W4sTX68eiUdTSf30/8iK8esCWmMgnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5hknwGauV8XiK9EogU9evqZIhxMB8GA1UdIwQY
MBaAFOgr7+xwbu0nep2Y9wuz+2aEm/KWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkN2djdIQnU3U2Q2blpqM0M3UDdab1NiOHBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85ZWZiYzItZmMxOS00YWVhLTk5YWMt
MjVkNmJiOTI5Mjc4LzEvNkN2djdIQnU3U2Q2blpqM0M3UDdab1NiOHBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85ZWZiYzItZmMxOS00YWVhLTk5YWMtMjVkNmJiOTI5Mjc4
LzEvNkN2djdIQnU3U2Q2blpqM0M3UDdab1NiOHBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh13LUNty
nCcHAhzmH5jaTMdn2x8ou0ypizdzUp13Uq7Pv8KCwz2OgoAQJ1LKMXlUniGWjRRl
gUATyF0v+EuoSoFrp8VMKP7xIMqTnSRCbO8Bm+a5IELQgQWKivSGl06TQdLN0VRo
c07tTRrektATny2/IwGynOa3mxvNsBOWFsiDEb3qWrI82H0iuTKbxpqLCnANPwbt
jhEkNI+Pzr7mWDPxQ22BNYpBLoX9AB+nuNmMNOEZFw/+JbPJRgrPE8REfl1vxjds
xGHjkDhLP9iKB65AJxHKb/mZaVfuWteql4rt5CZHIV519xl3wvHyNbH7okZ51R0q
Db23PxsMt7PAZA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:17:28 2025 by rpki-client