Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
File:                     b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft (raw, json)
Hash identifier:          1yiIFWY2Knni5AmK9ymCXVCLL0pmnPDQf7aLtyeLTHI=
Subject key identifier:   28:D1:23:33:44:0E:B1:87:DD:74:7D:D7:B2:B1:CD:58:D6:F4:0A:ED
Authority key identifier: 6F:C5:C4:73:F9:B7:B0:1E:9C:24:85:C4:6B:F5:69:CC:E0:81:6F:02
Certificate issuer:       /CN=6fc5c473f9b7b01e9c2485c46bf569cce0816f02
Certificate serial:       0197B74515F856D493D7199B11999176C7EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
Manifest number:          023B
Signing time:             Sat 28 Jun 2025 16:00:47 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:47 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:47 +0000
Files and hashes:         1: b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl (hash: WcHm1wuVbmtWqnWN954d5sQ/0YY1UZBN2odaX6Bizl8=)
                          2: he_LtNesHB3yhhLeem_GRg_44MQ.roa (hash: evnQ8oB4iSjxmSj6Kbjo2AeseAHFfPXeoG38g6RTNyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:15:f8:56:d4:93:d7:19:9b:11:99:91:76:c7:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fc5c473f9b7b01e9c2485c46bf569cce0816f02
        Validity
            Not Before: Jun 28 16:00:47 2025 GMT
            Not After : Jun 29 16:00:47 2025 GMT
        Subject: CN=28d12333440eb187dd747dd7b2b1cd58d6f40aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:de:eb:be:75:41:a9:2d:ee:c2:3a:3f:65:a9:
                    8d:5d:50:9e:4c:27:7a:16:0c:55:ee:12:5f:fe:bc:
                    2c:b3:f5:ae:5c:1e:8d:65:ce:a6:e3:47:3f:47:2a:
                    b2:0b:db:74:ba:fd:dc:e5:00:b8:b1:4c:e4:32:16:
                    81:a9:37:69:14:98:2c:9f:19:bc:93:05:af:f9:23:
                    b6:65:22:88:92:88:88:a5:e0:b9:87:a5:d2:f7:cd:
                    11:2c:f1:69:ad:51:f3:16:f4:16:e3:ba:0d:c8:45:
                    fb:39:ce:64:61:4b:43:88:47:97:15:31:4d:c2:7b:
                    7e:f7:2c:0e:2b:a9:64:97:72:5d:42:c5:04:a3:de:
                    a9:4d:43:74:9d:a2:be:9e:a1:81:0c:a5:f5:02:80:
                    e3:13:5d:95:e0:6a:82:14:67:f6:6a:b5:e4:4c:e2:
                    55:8e:26:3d:9e:3b:27:07:80:1e:97:46:48:37:17:
                    e5:ee:12:f6:a9:39:83:f3:bd:08:10:3b:c4:1d:39:
                    58:6c:96:df:a8:ac:99:be:99:00:a1:09:ab:63:e9:
                    b7:71:68:1f:2e:a5:ed:c0:92:36:02:c9:23:e3:3b:
                    a2:7d:8c:9b:76:f7:37:1f:42:b6:7d:d8:f1:c9:d6:
                    0b:a7:cd:cd:1e:c3:72:a2:9b:90:19:c4:ec:6d:19:
                    46:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D1:23:33:44:0E:B1:87:DD:74:7D:D7:B2:B1:CD:58:D6:F4:0A:ED
            X509v3 Authority Key Identifier:
                keyid:6F:C5:C4:73:F9:B7:B0:1E:9C:24:85:C4:6B:F5:69:CC:E0:81:6F:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:0b:fb:ec:a7:52:88:0f:21:fc:68:6c:e7:1a:e1:67:5a:ed:
         53:69:df:bc:b2:c6:00:ad:1c:f8:92:9d:2e:5b:e3:d3:0e:2e:
         73:87:f6:23:8e:9e:e0:f2:13:05:1a:2d:a5:96:94:f1:7b:5d:
         90:e4:a2:90:93:f0:6a:9f:89:6a:95:14:22:88:c3:2e:6e:a8:
         bd:be:36:a6:cd:fa:dd:d9:9c:d4:20:27:98:f8:90:8d:e2:de:
         18:31:b2:1e:2b:4a:ed:3d:71:c6:f4:c5:72:85:f7:5b:ec:42:
         d5:50:29:19:04:aa:b5:ee:0b:3c:38:81:8e:8e:f9:13:ec:76:
         74:6e:dc:78:1b:df:f7:7c:94:38:56:b8:c1:08:a7:d8:ad:60:
         1d:ec:c6:2c:43:59:ab:66:1a:95:d7:e1:74:40:22:ce:37:e3:
         3f:85:f4:51:3f:7f:66:79:15:9a:e5:79:14:0e:5a:34:50:58:
         8e:d1:9c:b1:fc:61:6c:35:a6:1e:fe:c3:19:cd:22:3c:67:17:
         f3:92:7e:98:e2:e5:a6:56:6e:a5:b0:ec:ab:3a:93:eb:cf:e9:
         25:fd:6d:36:40:31:73:4b:da:8b:6b:87:7f:9a:b3:d8:b5:8d:
         fb:b3:b6:37:21:59:17:23:ec:21:fe:95:59:13:31:fc:b2:58:
         2c:56:19:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RRX4VtST1xmbEZmRdsfsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzVjNDczZjliN2IwMWU5YzI0ODVjNDZiZjU2OWNjZTA4
MTZmMDIwHhcNMjUwNjI4MTYwMDQ3WhcNMjUwNjI5MTYwMDQ3WjAzMTEwLwYDVQQD
EygyOGQxMjMzMzQ0MGViMTg3ZGQ3NDdkZDdiMmIxY2Q1OGQ2ZjQwYWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN7rvnVBqS3uwjo/ZamNXVCeTCd6
FgxV7hJf/rwss/WuXB6NZc6m40c/RyqyC9t0uv3c5QC4sUzkMhaBqTdpFJgsnxm8
kwWv+SO2ZSKIkoiIpeC5h6XS980RLPFprVHzFvQW47oNyEX7Oc5kYUtDiEeXFTFN
wnt+9ywOK6lkl3JdQsUEo96pTUN0naK+nqGBDKX1AoDjE12V4GqCFGf2arXkTOJV
jiY9njsnB4Ael0ZINxfl7hL2qTmD870IEDvEHTlYbJbfqKyZvpkAoQmrY+m3cWgf
LqXtwJI2Askj4zuifYybdvc3H0K2fdjxydYLp83NHsNyopuQGcTsbRlGVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjRIzNEDrGH3XR917KxzVjW9ArtMB8GA1UdIwQY
MBaAFG/FxHP5t7AenCSFxGv1aczggW8CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhYRWNfbTNzQjZjSklYRWFfVnB6T0NCYndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZTZhYzYtZWRlZi00OTVlLWI2YTIt
OWNmMDQwNTc0NzY1LzEvYjhYRWNfbTNzQjZjSklYRWFfVnB6T0NCYndJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS81ZTZhYzYtZWRlZi00OTVlLWI2YTItOWNmMDQwNTc0NzY1
LzEvYjhYRWNfbTNzQjZjSklYRWFfVnB6T0NCYndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjwv77KdS
iA8h/Ghs5xrhZ1rtU2nfvLLGAK0c+JKdLlvj0w4uc4f2I46e4PITBRotpZaU8Xtd
kOSikJPwap+JapUUIojDLm6ovb42ps363dmc1CAnmPiQjeLeGDGyHitK7T1xxvTF
coX3W+xC1VApGQSqte4LPDiBjo75E+x2dG7ceBvf93yUOFa4wQin2K1gHezGLENZ
q2YaldfhdEAizjfjP4X0UT9/ZnkVmuV5FA5aNFBYjtGcsfxhbDWmHv7DGc0iPGcX
85J+mOLlplZupbDsqzqT68/pJf1tNkAxc0vai2uHf5qz2LWN+7O2NyFZFyPsIf6V
WRMx/LJYLFYZxg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:12 2025 by rpki-client