Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
File:                     C6ZznUryCYWXGQqgkoMN6pwXpwA.mft (raw, json)
Hash identifier:          yoS2YBImU+xYi8+VxU6HQiXtNmn2X2Bcj6kL6LpELdA=
Subject key identifier:   11:7B:66:96:CC:D1:92:66:37:1B:CC:7B:EB:93:CA:C5:1A:B3:A1:53
Authority key identifier: 0B:A6:73:9D:4A:F2:09:85:97:19:0A:A0:92:83:0D:EA:9C:17:A7:00
Certificate issuer:       /CN=0ba6739d4af2098597190aa092830dea9c17a700
Certificate serial:       0196BAED69BA15F7A60752E59DFF1E64F4FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
Manifest number:          0B45
Signing time:             Sat 10 May 2025 16:00:43 +0000
Manifest this update:     Sat 10 May 2025 16:00:43 +0000
Manifest next update:     Sun 11 May 2025 16:00:43 +0000
Files and hashes:         1: C6ZznUryCYWXGQqgkoMN6pwXpwA.crl (hash: lAAlVy5uKXw2rflPa9hvXRF90Z9/Xo7a7LUbuOHpo1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:ed:69:ba:15:f7:a6:07:52:e5:9d:ff:1e:64:f4:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba6739d4af2098597190aa092830dea9c17a700
        Validity
            Not Before: May 10 16:00:43 2025 GMT
            Not After : May 11 16:00:43 2025 GMT
        Subject: CN=117b6696ccd19266371bcc7beb93cac51ab3a153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9a:f2:76:55:95:f2:07:8a:b2:37:fe:ee:e7:
                    c8:54:d0:21:b3:63:6b:72:0f:47:c6:16:fe:f0:ce:
                    91:34:fc:8f:33:ec:e7:ed:43:cc:74:2b:6f:9d:75:
                    60:89:0a:7f:a0:3b:dd:c9:ec:df:0e:c7:32:ef:9e:
                    80:12:63:67:52:b9:4a:be:c6:84:2f:34:78:f1:33:
                    10:a5:e0:c8:68:fd:24:62:9e:7c:ff:72:ee:4f:f3:
                    53:a6:9d:d1:35:73:e7:c6:85:ba:72:b2:1e:17:11:
                    68:88:cb:d1:6d:91:53:df:fb:13:3f:b0:15:69:bc:
                    6d:11:32:50:db:25:09:a1:c8:75:4b:b1:6f:3b:72:
                    0e:43:62:3f:a8:1a:11:36:16:c9:1d:f7:a1:bb:be:
                    b4:03:f7:68:48:55:15:d9:ea:3e:e2:9d:19:42:d9:
                    24:bb:3e:23:98:e6:d0:14:8f:65:39:dd:4b:16:04:
                    40:cc:ca:2a:ac:a5:2e:dc:76:5a:ec:1e:8d:9a:63:
                    f5:f9:01:b8:2e:f5:1d:24:ad:cd:53:98:b9:ce:4d:
                    96:d1:64:c3:9d:61:17:08:64:33:22:ba:31:5a:a2:
                    94:30:3b:39:70:9d:c1:2e:d5:54:89:2c:b1:fb:51:
                    56:43:7c:fa:a8:ff:70:45:c1:98:0e:1b:95:2e:51:
                    20:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7B:66:96:CC:D1:92:66:37:1B:CC:7B:EB:93:CA:C5:1A:B3:A1:53
            X509v3 Authority Key Identifier:
                keyid:0B:A6:73:9D:4A:F2:09:85:97:19:0A:A0:92:83:0D:EA:9C:17:A7:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f3:43:a2:8c:5e:3e:5c:ef:1e:9a:3a:35:10:22:52:b0:b2:
         c9:14:e2:71:ce:e4:1f:3f:10:29:c0:9e:c0:69:28:2e:cb:c3:
         ba:65:3d:38:e3:71:52:64:86:db:d1:dc:aa:de:77:8e:a6:df:
         8f:cf:d3:c2:76:5d:58:a1:65:05:df:31:bc:1f:1b:5d:5c:52:
         d6:5b:a5:19:85:d2:08:15:b6:00:74:5b:05:2e:db:5d:77:0d:
         80:b3:ca:09:f0:13:1d:19:bc:c3:a1:01:33:8f:bc:5f:33:bf:
         1e:83:71:2f:1b:3f:7f:b2:22:75:da:11:fb:27:c4:f6:9e:89:
         d3:e7:5f:f8:7e:6a:f6:00:39:03:fb:22:19:6e:44:91:34:85:
         d6:aa:ff:1a:26:40:43:bf:ac:58:0d:e8:e4:b9:41:97:6e:26:
         86:16:d9:f2:99:be:f3:a9:b3:58:48:03:cc:84:09:e6:79:f0:
         16:fe:8d:80:33:06:a5:fc:03:79:92:19:15:84:2c:4e:d8:38:
         95:c2:48:d9:7c:e3:49:46:14:40:12:a7:30:90:3c:ff:22:34:
         19:8e:e5:28:25:c1:10:fb:cb:a1:69:99:ae:34:d2:f1:43:f0:
         6f:7a:4b:d0:90:11:68:c8:71:36:5b:c5:7b:5a:e2:d7:ae:40:
         99:99:d6:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa67Wm6FfemB1Llnf8eZPT6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYTY3MzlkNGFmMjA5ODU5NzE5MGFhMDkyODMwZGVhOWMx
N2E3MDAwHhcNMjUwNTEwMTYwMDQzWhcNMjUwNTExMTYwMDQzWjAzMTEwLwYDVQQD
EygxMTdiNjY5NmNjZDE5MjY2MzcxYmNjN2JlYjkzY2FjNTFhYjNhMTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZrydlWV8geKsjf+7ufIVNAhs2Nr
cg9Hxhb+8M6RNPyPM+zn7UPMdCtvnXVgiQp/oDvdyezfDscy756AEmNnUrlKvsaE
LzR48TMQpeDIaP0kYp58/3LuT/NTpp3RNXPnxoW6crIeFxFoiMvRbZFT3/sTP7AV
abxtETJQ2yUJoch1S7FvO3IOQ2I/qBoRNhbJHfehu760A/doSFUV2eo+4p0ZQtkk
uz4jmObQFI9lOd1LFgRAzMoqrKUu3HZa7B6NmmP1+QG4LvUdJK3NU5i5zk2W0WTD
nWEXCGQzIroxWqKUMDs5cJ3BLtVUiSyx+1FWQ3z6qP9wRcGYDhuVLlEg2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBF7ZpbM0ZJmNxvMe+uTysUas6FTMB8GA1UdIwQY
MBaAFAumc51K8gmFlxkKoJKDDeqcF6cAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzZaem5VcnlDWVdYR1FxZ2tvTU42cHdYcHdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yZWM1YjItNDZmNi00MTFiLWI5MGYt
YTQzYWVjNjIzMmFhLzEvQzZaem5VcnlDWVdYR1FxZ2tvTU42cHdYcHdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yZWM1YjItNDZmNi00MTFiLWI5MGYtYTQzYWVjNjIzMmFh
LzEvQzZaem5VcnlDWVdYR1FxZ2tvTU42cHdYcHdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifNDooxe
PlzvHpo6NRAiUrCyyRTicc7kHz8QKcCewGkoLsvDumU9OONxUmSG29Hcqt53jqbf
j8/TwnZdWKFlBd8xvB8bXVxS1lulGYXSCBW2AHRbBS7bXXcNgLPKCfATHRm8w6EB
M4+8XzO/HoNxLxs/f7IiddoR+yfE9p6J0+df+H5q9gA5A/siGW5EkTSF1qr/GiZA
Q7+sWA3o5LlBl24mhhbZ8pm+86mzWEgDzIQJ5nnwFv6NgDMGpfwDeZIZFYQsTtg4
lcJI2XzjSUYUQBKnMJA8/yI0GY7lKCXBEPvLoWmZrjTS8UPwb3pL0JARaMhxNlvF
e1ri165AmZnWIA==
-----END CERTIFICATE-----
Generated at Sat May 10 21:15:08 2025 by rpki-client