Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
File:                     p_555OY70WvEI3WStoTQBDPL0PY.mft (raw, json)
Hash identifier:          OhZp7PhYwCmZMb+wLmHLNq0IcUYVnd6UN2KsX8jH/1g=
Subject key identifier:   2E:B6:5F:7D:F3:17:6A:93:00:CC:6B:43:AA:F2:99:3C:0E:9F:D6:C4
Authority key identifier: A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
Certificate issuer:       /CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Certificate serial:       0197B6A17C72B136A212BA3698632952EC4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
Manifest number:          06F7
Signing time:             Sat 28 Jun 2025 13:02:05 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:05 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:05 +0000
Files and hashes:         1: p_555OY70WvEI3WStoTQBDPL0PY.crl (hash: hmiMksH0mGNIABucphnEXHcmAFqwFrWX8SFj4cdTwvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:7c:72:b1:36:a2:12:ba:36:98:63:29:52:ec:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
        Validity
            Not Before: Jun 28 13:02:05 2025 GMT
            Not After : Jun 29 13:02:05 2025 GMT
        Subject: CN=2eb65f7df3176a9300cc6b43aaf2993c0e9fd6c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:05:78:a0:ea:51:d6:40:f2:19:b5:21:ed:1e:
                    65:b1:c9:4d:28:54:c7:7a:97:43:cc:3d:96:ef:e3:
                    fb:02:60:70:bc:2c:07:da:9e:19:10:0b:2b:ac:19:
                    b5:b4:35:12:ba:27:68:60:09:48:e0:3e:e4:04:31:
                    e3:d3:f8:6b:a5:06:5c:b2:47:67:45:fc:99:15:3b:
                    5c:9a:47:58:55:e3:9a:a5:26:33:a0:82:3a:59:e6:
                    24:fd:ff:45:82:30:77:4b:2b:f9:7c:b4:b8:4f:39:
                    bc:81:08:52:54:00:87:ee:91:32:6a:7a:25:5b:d0:
                    0a:fb:cf:77:ac:05:f7:27:04:32:7e:cb:ea:5b:ca:
                    06:7d:57:c5:de:7d:e5:16:b9:25:32:4f:0d:5e:f8:
                    26:44:4b:fe:86:7f:95:e2:81:f6:31:b0:26:4d:df:
                    1b:5a:8a:f1:ad:29:48:f7:00:17:32:85:e3:91:55:
                    82:70:8a:d7:94:f0:c4:bf:8c:5f:c5:da:2f:68:33:
                    e8:dc:20:ee:af:91:57:5e:01:06:84:26:27:00:47:
                    8a:fa:c8:17:51:ea:c5:83:76:43:ce:ba:9e:59:77:
                    d4:27:5c:5f:34:98:f4:45:27:dc:d2:f4:01:e3:73:
                    94:ad:65:4d:13:14:e4:e8:6d:58:50:15:9f:c0:73:
                    42:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B6:5F:7D:F3:17:6A:93:00:CC:6B:43:AA:F2:99:3C:0E:9F:D6:C4
            X509v3 Authority Key Identifier:
                keyid:A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:6e:d2:ee:56:55:45:b0:6e:c3:c4:6e:b5:89:c0:99:dc:4e:
         98:37:a5:c4:1c:a8:91:03:ef:d8:27:63:f3:e2:48:2e:ac:49:
         37:cd:3e:b2:90:74:b1:82:73:97:46:a6:88:ce:21:1c:50:7d:
         aa:6a:78:17:76:31:b4:ab:c5:b7:0c:35:15:11:91:0f:af:e2:
         90:0f:45:4d:78:3d:70:e5:7a:df:a4:d9:78:0c:08:36:15:ec:
         11:b8:8e:c3:97:ff:28:84:28:7e:2e:85:8d:9c:8d:33:e1:b3:
         c8:02:91:c9:00:e7:f0:ca:26:35:cb:47:6e:f7:e7:1d:e6:46:
         b9:26:5a:85:5f:ab:6d:44:36:ff:9a:8a:86:04:af:bf:9f:cf:
         22:7c:1c:36:cc:a7:7d:12:bf:ea:7c:50:1a:b3:3d:42:bb:88:
         68:10:93:69:c3:71:1a:01:e6:8a:1d:2e:d7:6c:73:af:bb:e0:
         f3:8b:60:6e:d3:91:a3:8e:72:db:9d:c4:57:e7:e0:3e:d2:32:
         11:26:0c:d9:02:38:8a:c0:e6:f9:3b:68:4a:24:28:27:62:99:
         ce:6d:b4:0f:71:b5:b2:9f:07:84:a8:a7:d6:51:07:44:d6:f4:
         a8:f7:39:9b:bc:3b:dd:e5:ee:e5:f1:92:a1:52:a2:4e:7f:2e:
         20:9d:06:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oXxysTaiEro2mGMpUuxMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZmU3OWU0ZTYzYmQxNmJjNDIzNzU5MmI2ODRkMDA0MzNj
YmQwZjYwHhcNMjUwNjI4MTMwMjA1WhcNMjUwNjI5MTMwMjA1WjAzMTEwLwYDVQQD
EygyZWI2NWY3ZGYzMTc2YTkzMDBjYzZiNDNhYWYyOTkzYzBlOWZkNmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgV4oOpR1kDyGbUh7R5lsclNKFTH
epdDzD2W7+P7AmBwvCwH2p4ZEAsrrBm1tDUSuidoYAlI4D7kBDHj0/hrpQZcskdn
RfyZFTtcmkdYVeOapSYzoII6WeYk/f9FgjB3Syv5fLS4Tzm8gQhSVACH7pEyanol
W9AK+893rAX3JwQyfsvqW8oGfVfF3n3lFrklMk8NXvgmREv+hn+V4oH2MbAmTd8b
WorxrSlI9wAXMoXjkVWCcIrXlPDEv4xfxdovaDPo3CDur5FXXgEGhCYnAEeK+sgX
UerFg3ZDzrqeWXfUJ1xfNJj0RSfc0vQB43OUrWVNExTk6G1YUBWfwHNCBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC62X33zF2qTAMxrQ6rymTwOn9bEMB8GA1UdIwQY
MBaAFKf+eeTmO9FrxCN1kraE0AQzy9D2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcF81NTVPWTcwV3ZFSTNXU3RvVFFCRFBMMFBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xNGI1YzEtYTMzMy00NDliLWIyODAt
MjUxYTdiMTNjMTE4LzEvcF81NTVPWTcwV3ZFSTNXU3RvVFFCRFBMMFBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8xNGI1YzEtYTMzMy00NDliLWIyODAtMjUxYTdiMTNjMTE4
LzEvcF81NTVPWTcwV3ZFSTNXU3RvVFFCRFBMMFBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkW7S7lZV
RbBuw8RutYnAmdxOmDelxByokQPv2Cdj8+JILqxJN80+spB0sYJzl0amiM4hHFB9
qmp4F3YxtKvFtww1FRGRD6/ikA9FTXg9cOV636TZeAwINhXsEbiOw5f/KIQofi6F
jZyNM+GzyAKRyQDn8MomNctHbvfnHeZGuSZahV+rbUQ2/5qKhgSvv5/PInwcNsyn
fRK/6nxQGrM9QruIaBCTacNxGgHmih0u12xzr7vg84tgbtORo45y253EV+fgPtIy
ESYM2QI4isDm+TtoSiQoJ2KZzm20D3G1sp8HhKin1lEHRNb0qPc5m7w73eXu5fGS
oVKiTn8uIJ0G9w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:12:53 2025 by rpki-client