Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft
File:                     1e6pLEJFQFBGvpuMpsDCDmorFA0.mft (raw, json)
Hash identifier:          SLP/jktv/XvMG0ACHHrGU5JHMI9NpmPCBbeM0HymW3o=
Subject key identifier:   27:0B:D6:79:39:C1:9F:F6:CD:9D:5D:8B:A4:66:C3:4C:E4:0A:0B:92
Authority key identifier: D5:EE:A9:2C:42:45:40:50:46:BE:9B:8C:A6:C0:C2:0E:6A:2B:14:0D
Certificate issuer:       /CN=d5eea92c4245405046be9b8ca6c0c20e6a2b140d
Certificate serial:       0198D73B36E9C1562867F429C4E581632BCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft
Manifest number:          0435
Signing time:             Sat 23 Aug 2025 14:00:38 +0000
Manifest this update:     Sat 23 Aug 2025 14:00:38 +0000
Manifest next update:     Sun 24 Aug 2025 14:00:38 +0000
Files and hashes:         1: 1e6pLEJFQFBGvpuMpsDCDmorFA0.crl (hash: ROqPzAUJ2Rdcrwu6Du/9I0DO12YZQcN+5aMPAADnuMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:36:e9:c1:56:28:67:f4:29:c4:e5:81:63:2b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5eea92c4245405046be9b8ca6c0c20e6a2b140d
        Validity
            Not Before: Aug 23 14:00:38 2025 GMT
            Not After : Aug 24 14:00:38 2025 GMT
        Subject: CN=270bd67939c19ff6cd9d5d8ba466c34ce40a0b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a6:2c:fc:4b:39:97:f1:9b:37:b3:f7:c7:f9:
                    d1:cd:c3:4c:5d:64:d0:bc:01:0b:e2:a6:8f:57:26:
                    dd:10:36:e8:5b:b7:05:bb:4b:46:ee:41:34:79:47:
                    97:3d:2a:ea:bb:82:b7:0c:83:e3:49:0b:ff:c3:cf:
                    e8:b5:c0:37:e6:09:c0:3a:8b:2c:6c:37:b6:1a:90:
                    9d:09:69:e2:2d:37:c6:a9:c7:c4:9e:53:5b:3c:d1:
                    62:57:ef:44:39:9b:99:3c:57:c4:3e:f6:06:68:94:
                    38:7e:13:42:e0:c7:80:17:06:a6:bd:8b:8d:5a:27:
                    50:0b:13:3f:34:64:d7:85:90:01:59:30:c0:2a:67:
                    8e:62:01:b3:89:27:19:47:33:5a:cf:4d:16:f3:b1:
                    a0:a5:8e:4a:c5:bc:fd:7b:ec:10:9b:f7:86:5c:3c:
                    74:b2:7d:27:79:06:94:4b:a4:43:22:e1:21:62:d1:
                    7d:d3:3b:e1:4e:dc:d1:42:41:98:ef:d9:f1:35:c6:
                    ce:60:fa:77:17:26:cb:6f:1f:d5:61:86:3d:ee:0e:
                    79:7f:61:de:d9:22:da:9e:44:02:f0:84:c7:72:06:
                    79:bc:63:0e:73:e7:4f:31:f6:3d:11:61:c0:a8:01:
                    08:a1:01:87:32:bb:0e:bc:d0:70:e7:0c:65:92:03:
                    17:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0B:D6:79:39:C1:9F:F6:CD:9D:5D:8B:A4:66:C3:4C:E4:0A:0B:92
            X509v3 Authority Key Identifier:
                keyid:D5:EE:A9:2C:42:45:40:50:46:BE:9B:8C:A6:C0:C2:0E:6A:2B:14:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:e9:0c:0f:30:22:65:ef:2b:7f:40:06:87:fc:5d:ca:26:bd:
         1b:b8:d0:31:de:b2:82:b2:87:2c:33:4e:ac:4c:22:88:af:68:
         5b:92:bd:32:da:df:79:2e:dc:5b:fd:50:1e:7f:d0:b8:b0:15:
         98:22:00:9d:93:83:05:7a:01:cc:f4:62:1e:9f:67:1b:fe:9a:
         a1:68:f8:8b:6a:eb:e8:14:25:51:8b:50:3b:5e:84:65:81:af:
         7e:8f:de:45:c6:14:03:9c:0f:3e:fe:b2:24:26:e0:73:44:92:
         2e:df:49:c0:2e:41:8d:f2:4f:4c:42:73:06:e7:77:13:fb:a3:
         f4:3b:37:24:af:7b:e8:cc:40:65:6a:f0:31:e0:bc:a8:9b:87:
         e6:04:fc:44:1a:f0:36:59:0f:be:90:d2:69:26:e0:ad:5a:8f:
         36:c1:6a:3a:79:48:6f:57:7a:7c:88:f0:31:03:d8:0c:c8:12:
         66:d7:64:05:9d:d9:9a:c9:0a:ba:0b:97:3d:71:ae:9e:c6:98:
         7c:ea:c8:a6:50:7e:5d:66:ca:9c:fa:28:01:6e:fb:6e:e4:6e:
         7e:35:03:b8:ea:1d:3b:b8:b5:e3:e0:ff:29:7d:4d:78:11:16:
         93:67:27:ff:aa:19:33:d3:de:87:18:8e:c2:55:a9:1f:79:2c:
         cc:a2:c2:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXOzbpwVYoZ/QpxOWBYyvOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZWVhOTJjNDI0NTQwNTA0NmJlOWI4Y2E2YzBjMjBlNmEy
YjE0MGQwHhcNMjUwODIzMTQwMDM4WhcNMjUwODI0MTQwMDM4WjAzMTEwLwYDVQQD
EygyNzBiZDY3OTM5YzE5ZmY2Y2Q5ZDVkOGJhNDY2YzM0Y2U0MGEwYjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aYs/Es5l/GbN7P3x/nRzcNMXWTQ
vAEL4qaPVybdEDboW7cFu0tG7kE0eUeXPSrqu4K3DIPjSQv/w8/otcA35gnAOoss
bDe2GpCdCWniLTfGqcfEnlNbPNFiV+9EOZuZPFfEPvYGaJQ4fhNC4MeAFwamvYuN
WidQCxM/NGTXhZABWTDAKmeOYgGziScZRzNaz00W87GgpY5Kxbz9e+wQm/eGXDx0
sn0neQaUS6RDIuEhYtF90zvhTtzRQkGY79nxNcbOYPp3FybLbx/VYYY97g55f2He
2SLankQC8ITHcgZ5vGMOc+dPMfY9EWHAqAEIoQGHMrsOvNBw5wxlkgMXXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcL1nk5wZ/2zZ1di6Rmw0zkCguSMB8GA1UdIwQY
MBaAFNXuqSxCRUBQRr6bjKbAwg5qKxQNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWU2cExFSkZRRkJHdnB1TXBzRENEbW9yRkEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lMTEzMDMtZThkYy00ZDhkLTgwN2Yt
NTM1NTIzYmQzZmZiLzEvMWU2cExFSkZRRkJHdnB1TXBzRENEbW9yRkEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lMTEzMDMtZThkYy00ZDhkLTgwN2YtNTM1NTIzYmQzZmZi
LzEvMWU2cExFSkZRRkJHdnB1TXBzRENEbW9yRkEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+kMDzAi
Ze8rf0AGh/xdyia9G7jQMd6ygrKHLDNOrEwiiK9oW5K9MtrfeS7cW/1QHn/QuLAV
mCIAnZODBXoBzPRiHp9nG/6aoWj4i2rr6BQlUYtQO16EZYGvfo/eRcYUA5wPPv6y
JCbgc0SSLt9JwC5BjfJPTEJzBud3E/uj9Ds3JK976MxAZWrwMeC8qJuH5gT8RBrw
NlkPvpDSaSbgrVqPNsFqOnlIb1d6fIjwMQPYDMgSZtdkBZ3ZmskKuguXPXGunsaY
fOrIplB+XWbKnPooAW77buRufjUDuOodO7i14+D/KX1NeBEWk2cn/6oZM9PehxiO
wlWpH3kszKLCSw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:27 2025 by rpki-client