Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
File:                     Y4H3IILjEgadg9mvTzGc8K-ANkc.mft (raw, json)
Hash identifier:          AltLJG1mPH/1irfRO4CVimUXnS52okmzt/8ygD/9ENI=
Subject key identifier:   6F:CF:2B:E9:A5:51:74:36:69:90:85:68:C4:5E:83:A5:DC:6F:3E:68
Authority key identifier: 63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47
Certificate issuer:       /CN=6381f72082e312069d83d9af4f319cf0af803647
Certificate serial:       0197B7EAC8F247AA90F5AFA75E706C095BC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 19:01:46 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:46 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:46 +0000
Files and hashes:         1: Y4H3IILjEgadg9mvTzGc8K-ANkc.crl (hash: 7ddSjLZgkz7nnFy7CnE7lwLpITTbeYrB6AD0tGMuJX4=)
                          2: dOaeIHruifCT3_Y-NZ9ouvbnhuc.roa (hash: PG+NsqO34TjeMURDoubqwQXu9F/XY0vJGA8jsdkgloo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:c8:f2:47:aa:90:f5:af:a7:5e:70:6c:09:5b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6381f72082e312069d83d9af4f319cf0af803647
        Validity
            Not Before: Jun 28 19:01:46 2025 GMT
            Not After : Jun 29 19:01:46 2025 GMT
        Subject: CN=6fcf2be9a551743669908568c45e83a5dc6f3e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d2:09:40:3b:76:75:af:a9:a8:73:56:cc:9f:
                    ba:b7:a1:8a:b7:a6:72:71:b7:47:b5:ce:da:e2:ab:
                    8e:4d:08:eb:7e:1a:5d:6b:d4:5c:df:d9:e2:cf:1a:
                    73:19:8d:90:de:17:03:8e:9f:0f:1c:e5:16:7b:ca:
                    01:01:67:37:98:8a:12:da:ab:9d:4d:78:61:74:ef:
                    0f:10:3c:a6:b9:4a:93:e0:1b:47:a9:43:b8:d3:9e:
                    d3:32:54:67:08:43:07:07:ee:b2:5d:18:c9:ab:27:
                    5b:83:38:cc:ae:a0:e4:f9:5a:52:56:4a:70:fe:2c:
                    74:e4:dd:c7:d2:94:47:79:1f:3a:94:75:9f:eb:06:
                    dc:69:dd:44:2e:76:7f:4c:8a:cf:ef:2d:7f:7b:6b:
                    e9:5d:fd:c3:ff:02:82:99:64:6f:4e:02:26:f1:4d:
                    69:92:38:de:ac:9c:90:e8:22:5d:e1:a8:70:be:a4:
                    68:c1:97:5a:6d:0e:a7:0a:6e:ea:6d:2d:01:fe:40:
                    03:e6:d7:ed:79:53:a1:3e:07:67:ec:b7:76:d1:b5:
                    3b:23:67:50:ba:b4:0d:56:46:1b:03:32:95:e7:27:
                    81:81:3f:c7:a1:36:7d:ca:1d:ac:df:75:3c:37:f7:
                    6b:87:ac:a4:4b:5b:90:86:15:d4:26:ef:3a:2a:76:
                    14:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CF:2B:E9:A5:51:74:36:69:90:85:68:C4:5E:83:A5:DC:6F:3E:68
            X509v3 Authority Key Identifier:
                keyid:63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:52:99:9c:3e:e2:59:35:32:4e:c9:8e:de:41:2c:22:7f:41:
         9a:3b:30:91:d9:19:dd:a3:30:f8:30:29:dd:9d:87:c5:97:c2:
         45:df:ce:73:de:b0:18:f6:9f:b0:22:b4:66:33:7f:24:23:3a:
         de:cc:10:7c:29:16:b9:54:86:99:95:45:8d:3e:55:7b:75:1b:
         43:ff:90:c7:d5:32:81:39:57:f2:f1:18:9a:00:0a:52:be:30:
         27:7b:7e:b2:55:c5:d3:ca:ab:2c:e1:fa:53:1d:fb:00:b0:7e:
         c8:ec:c8:12:1b:d8:09:e5:21:20:15:1d:7d:5d:f7:57:30:99:
         f3:67:c0:2c:0b:ee:80:b5:2f:0b:cd:8e:e0:56:67:53:8c:b0:
         60:2d:ca:6e:a0:67:8e:81:a8:ac:98:68:ff:7d:87:11:54:94:
         62:7a:5a:a0:ca:96:91:7c:95:b8:01:00:c4:48:45:6a:19:a7:
         83:12:e7:0d:96:12:01:51:41:08:39:d2:ac:59:60:37:2f:54:
         5b:81:c0:62:24:40:93:fa:d1:36:8f:f5:8b:14:90:da:20:88:
         c0:6b:82:ac:15:90:1f:31:92:4f:e1:01:3b:5f:4d:26:93:58:
         9f:0b:3f:00:df:ab:ae:2e:b9:ba:be:c3:ae:da:ba:46:a0:b0:
         83:8b:f6:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36sjyR6qQ9a+nXnBsCVvGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzODFmNzIwODJlMzEyMDY5ZDgzZDlhZjRmMzE5Y2YwYWY4
MDM2NDcwHhcNMjUwNjI4MTkwMTQ2WhcNMjUwNjI5MTkwMTQ2WjAzMTEwLwYDVQQD
Eyg2ZmNmMmJlOWE1NTE3NDM2Njk5MDg1NjhjNDVlODNhNWRjNmYzZTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NIJQDt2da+pqHNWzJ+6t6GKt6Zy
cbdHtc7a4quOTQjrfhpda9Rc39nizxpzGY2Q3hcDjp8PHOUWe8oBAWc3mIoS2qud
TXhhdO8PEDymuUqT4BtHqUO4057TMlRnCEMHB+6yXRjJqydbgzjMrqDk+VpSVkpw
/ix05N3H0pRHeR86lHWf6wbcad1ELnZ/TIrP7y1/e2vpXf3D/wKCmWRvTgIm8U1p
kjjerJyQ6CJd4ahwvqRowZdabQ6nCm7qbS0B/kAD5tfteVOhPgdn7Ld20bU7I2dQ
urQNVkYbAzKV5yeBgT/HoTZ9yh2s33U8N/drh6ykS1uQhhXUJu86KnYUuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/PK+mlUXQ2aZCFaMReg6Xcbz5oMB8GA1UdIwQY
MBaAFGOB9yCC4xIGnYPZr08xnPCvgDZHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTRIM0lJTGpFZ2FkZzltdlR6R2M4Sy1BTmtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS81ZWJjNWQtODY4My00YzM3LWEwNTAt
MjBlZjQyYzliYzM4LzEvWTRIM0lJTGpFZ2FkZzltdlR6R2M4Sy1BTmtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS81ZWJjNWQtODY4My00YzM3LWEwNTAtMjBlZjQyYzliYzM4
LzEvWTRIM0lJTGpFZ2FkZzltdlR6R2M4Sy1BTmtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlKZnD7i
WTUyTsmO3kEsIn9BmjswkdkZ3aMw+DAp3Z2HxZfCRd/Oc96wGPafsCK0ZjN/JCM6
3swQfCkWuVSGmZVFjT5Ve3UbQ/+Qx9UygTlX8vEYmgAKUr4wJ3t+slXF08qrLOH6
Ux37ALB+yOzIEhvYCeUhIBUdfV33VzCZ82fALAvugLUvC82O4FZnU4ywYC3KbqBn
joGorJho/32HEVSUYnpaoMqWkXyVuAEAxEhFahmngxLnDZYSAVFBCDnSrFlgNy9U
W4HAYiRAk/rRNo/1ixSQ2iCIwGuCrBWQHzGST+EBO19NJpNYnws/AN+rri65ur7D
rtq6RqCwg4v29Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:31 2025 by rpki-client