Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft
File:                     1e6pLEJFQFBGvpuMpsDCDmorFA0.mft (raw, json)
Hash identifier:          OPAJC1xUh35aLnhl+XIuCb+rXZg2AfaMLgCr0JjOXLg=
Subject key identifier:   12:71:FA:43:8C:1E:A9:20:17:2B:15:98:23:58:34:9B:6E:DB:E5:F3
Authority key identifier: D5:EE:A9:2C:42:45:40:50:46:BE:9B:8C:A6:C0:C2:0E:6A:2B:14:0D
Certificate issuer:       /CN=d5eea92c4245405046be9b8ca6c0c20e6a2b140d
Certificate serial:       0197B77CD5B92729CA1350581578C414E986
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft
Manifest number:          03A0
Signing time:             Sat 28 Jun 2025 17:01:41 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:41 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:41 +0000
Files and hashes:         1: 1e6pLEJFQFBGvpuMpsDCDmorFA0.crl (hash: ZThaL01/qtq4lBu38kTxz8SlBfzqDYRumeGvj760n8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:d5:b9:27:29:ca:13:50:58:15:78:c4:14:e9:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5eea92c4245405046be9b8ca6c0c20e6a2b140d
        Validity
            Not Before: Jun 28 17:01:41 2025 GMT
            Not After : Jun 29 17:01:41 2025 GMT
        Subject: CN=1271fa438c1ea920172b15982358349b6edbe5f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a0:cc:02:3d:c3:58:d8:40:1b:95:46:2f:fc:
                    b0:02:ee:c8:4c:65:c4:94:44:83:c1:21:e8:03:aa:
                    45:52:2f:70:68:7e:cb:f7:d9:d3:a6:10:65:8f:a0:
                    66:c6:3f:fe:b9:5d:d1:2e:d6:30:ea:3f:1b:b2:70:
                    a8:e7:0a:67:ff:17:7c:97:4c:ce:d8:b3:5d:93:6c:
                    b0:93:45:72:23:bb:e5:47:59:bc:ef:b3:80:91:67:
                    64:f1:54:ed:e2:2f:5f:ed:33:35:0c:cf:ff:c3:d8:
                    e5:c9:e6:02:43:3c:9f:c0:01:6c:6f:70:65:17:8f:
                    f4:a0:2b:7c:79:11:14:3b:5a:a9:e9:e4:7e:a8:ee:
                    3a:2a:88:1d:cc:9f:0f:0b:c1:39:16:06:db:c8:6c:
                    a6:57:29:04:d6:6d:32:d3:a4:c6:71:f6:38:e8:6b:
                    6c:84:74:07:11:dd:a1:ed:db:a2:b3:c1:a0:0b:a5:
                    a5:a0:37:63:6b:73:87:2e:56:ad:87:fd:46:4e:88:
                    8d:9d:bb:58:a0:82:23:8f:2f:0d:a2:ec:fd:ab:86:
                    00:bb:a7:fe:73:ad:cf:a0:dd:73:5e:42:66:d5:28:
                    af:0f:a4:3c:2f:93:55:75:20:59:10:f7:09:83:d2:
                    b4:e1:c5:31:1a:65:65:91:f4:1b:4f:f6:6d:b3:f3:
                    f9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:71:FA:43:8C:1E:A9:20:17:2B:15:98:23:58:34:9B:6E:DB:E5:F3
            X509v3 Authority Key Identifier:
                keyid:D5:EE:A9:2C:42:45:40:50:46:BE:9B:8C:A6:C0:C2:0E:6A:2B:14:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:3c:a1:6c:b8:0f:62:a5:99:2c:08:1a:67:22:27:5d:d2:7f:
         09:ac:19:5c:30:0a:e6:4c:36:e4:58:7d:dd:d1:51:30:4d:7e:
         91:4f:6c:05:5e:19:d4:64:cf:60:32:88:f6:c0:7f:15:c5:8e:
         55:92:5c:4f:30:f6:d1:60:e7:07:f1:e6:8f:9d:c1:3b:dc:6d:
         ff:00:23:0c:2a:f3:9d:b9:a7:c3:2f:a3:ac:7d:a8:c7:8f:15:
         fa:fc:2f:b2:ce:41:36:e3:e1:98:96:7d:a6:8b:68:c1:bc:4b:
         40:b8:67:14:8b:bc:4e:ac:d0:b2:05:2d:41:23:d3:55:b6:91:
         3d:96:c6:d0:0b:99:c8:54:31:0b:34:35:a8:11:b5:5c:8f:6d:
         56:af:b0:2e:a9:de:fd:2c:cb:26:6e:28:ef:94:4c:56:22:a6:
         66:32:6b:b4:e6:d1:3a:f8:f7:46:08:bc:5e:6e:23:75:e6:e8:
         7d:6a:4a:fc:25:32:c5:d0:9d:69:0d:ee:48:8d:bc:18:d2:17:
         cd:72:e9:53:70:fe:e2:07:95:96:6b:54:a0:32:e6:b4:24:16:
         94:cd:34:a2:28:fc:8d:93:8c:0c:be:81:be:00:3a:22:12:6c:
         5a:d5:7d:7a:5e:5e:ba:2c:02:ad:d5:e4:c5:44:0d:3b:18:0d:
         3d:e0:ca:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fNW5JynKE1BYFXjEFOmGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZWVhOTJjNDI0NTQwNTA0NmJlOWI4Y2E2YzBjMjBlNmEy
YjE0MGQwHhcNMjUwNjI4MTcwMTQxWhcNMjUwNjI5MTcwMTQxWjAzMTEwLwYDVQQD
EygxMjcxZmE0MzhjMWVhOTIwMTcyYjE1OTgyMzU4MzQ5YjZlZGJlNWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqDMAj3DWNhAG5VGL/ywAu7ITGXE
lESDwSHoA6pFUi9waH7L99nTphBlj6Bmxj/+uV3RLtYw6j8bsnCo5wpn/xd8l0zO
2LNdk2ywk0VyI7vlR1m877OAkWdk8VTt4i9f7TM1DM//w9jlyeYCQzyfwAFsb3Bl
F4/0oCt8eREUO1qp6eR+qO46KogdzJ8PC8E5FgbbyGymVykE1m0y06TGcfY46Gts
hHQHEd2h7duis8GgC6WloDdja3OHLlath/1GToiNnbtYoIIjjy8Nouz9q4YAu6f+
c63PoN1zXkJm1SivD6Q8L5NVdSBZEPcJg9K04cUxGmVlkfQbT/Zts/P5HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJx+kOMHqkgFysVmCNYNJtu2+XzMB8GA1UdIwQY
MBaAFNXuqSxCRUBQRr6bjKbAwg5qKxQNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWU2cExFSkZRRkJHdnB1TXBzRENEbW9yRkEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lMTEzMDMtZThkYy00ZDhkLTgwN2Yt
NTM1NTIzYmQzZmZiLzEvMWU2cExFSkZRRkJHdnB1TXBzRENEbW9yRkEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lMTEzMDMtZThkYy00ZDhkLTgwN2YtNTM1NTIzYmQzZmZi
LzEvMWU2cExFSkZRRkJHdnB1TXBzRENEbW9yRkEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjyhbLgP
YqWZLAgaZyInXdJ/CawZXDAK5kw25Fh93dFRME1+kU9sBV4Z1GTPYDKI9sB/FcWO
VZJcTzD20WDnB/Hmj53BO9xt/wAjDCrznbmnwy+jrH2ox48V+vwvss5BNuPhmJZ9
potowbxLQLhnFIu8TqzQsgUtQSPTVbaRPZbG0AuZyFQxCzQ1qBG1XI9tVq+wLqne
/SzLJm4o75RMViKmZjJrtObROvj3Rgi8Xm4jdebofWpK/CUyxdCdaQ3uSI28GNIX
zXLpU3D+4geVlmtUoDLmtCQWlM00oij8jZOMDL6BvgA6IhJsWtV9el5euiwCrdXk
xUQNOxgNPeDK8Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:33 2025 by rpki-client