Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
File:                     btAxXocokhqZ_GNGtM6PELXbhnw.mft (raw, json)
Hash identifier:          hYQTWNrMwJEbOURXhHc+R6S8Y9SaT2tKXJxticzuFgU=
Subject key identifier:   5F:EF:4B:DD:CE:47:BF:3E:96:C9:63:34:76:B5:E9:CD:64:EE:59:F1
Authority key identifier: 6E:D0:31:5E:87:28:92:1A:99:FC:63:46:B4:CE:8F:10:B5:DB:86:7C
Certificate issuer:       /CN=6ed0315e8728921a99fc6346b4ce8f10b5db867c
Certificate serial:       0197B88FFB235F47FCE050ADE8A36E4FC452
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
Manifest number:          0BF6
Signing time:             Sat 28 Jun 2025 22:02:13 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:13 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:13 +0000
Files and hashes:         1: btAxXocokhqZ_GNGtM6PELXbhnw.crl (hash: La/ACqTqS211iueulEB3V4fxttOjfT24M0CW1GdfnHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:fb:23:5f:47:fc:e0:50:ad:e8:a3:6e:4f:c4:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed0315e8728921a99fc6346b4ce8f10b5db867c
        Validity
            Not Before: Jun 28 22:02:13 2025 GMT
            Not After : Jun 29 22:02:13 2025 GMT
        Subject: CN=5fef4bddce47bf3e96c9633476b5e9cd64ee59f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9e:e1:75:68:63:56:40:dd:c3:09:0c:83:d6:
                    81:0e:77:64:98:6b:39:60:12:94:8d:31:0e:39:c7:
                    87:28:04:04:61:59:b7:4c:1d:a5:a4:4a:17:cf:ab:
                    53:4d:9d:c5:47:35:b1:e6:0c:41:3c:50:63:bc:54:
                    43:6e:86:da:82:c0:d2:4d:57:e2:22:d6:f8:4d:c1:
                    df:9f:a3:93:67:ab:1f:bb:df:28:e5:1a:4b:79:22:
                    74:91:d3:04:68:e3:c6:59:85:32:70:9f:d1:af:6c:
                    11:a5:63:94:e5:b2:04:ce:3a:a6:46:4f:9d:12:10:
                    80:95:e6:59:48:a3:ff:d6:69:86:da:0e:3a:78:81:
                    41:1d:15:dc:c8:83:1c:c5:7f:66:84:5c:ee:7c:23:
                    0e:81:72:58:d5:94:02:b1:26:2d:1d:19:57:98:df:
                    48:a8:81:e5:ec:1a:5f:09:fb:c6:f6:72:42:fc:01:
                    b8:4d:c8:a2:bc:52:96:28:b6:52:fc:8b:31:d9:b1:
                    39:f9:45:40:15:05:91:1c:99:eb:50:c5:6f:ac:83:
                    2b:e1:0c:24:fc:74:38:57:a9:9c:91:76:be:5d:22:
                    07:f3:57:7e:76:a9:fe:33:d2:a0:06:69:92:f6:20:
                    88:0d:12:88:91:3c:45:3a:da:6b:6a:2b:21:7d:a1:
                    d6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EF:4B:DD:CE:47:BF:3E:96:C9:63:34:76:B5:E9:CD:64:EE:59:F1
            X509v3 Authority Key Identifier:
                keyid:6E:D0:31:5E:87:28:92:1A:99:FC:63:46:B4:CE:8F:10:B5:DB:86:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d6:6d:fd:0d:3b:4d:43:3a:95:a4:e5:07:ec:9a:95:8f:0f:
         01:e8:3e:20:23:6d:f2:1d:71:08:0c:9b:63:39:f9:67:e0:5c:
         f9:47:0e:f2:74:53:69:52:d2:0b:64:23:9b:67:15:16:55:24:
         7f:0c:ee:78:14:b2:d7:21:0d:1e:bf:45:31:e1:31:a4:03:e6:
         b8:ad:00:8e:b2:13:21:80:05:42:8a:0e:ee:97:68:9d:65:e8:
         a6:6c:b3:6c:23:b9:aa:2b:65:f4:97:98:d9:78:be:a5:60:de:
         ea:e2:c1:4f:cc:79:09:23:e2:27:53:d9:be:b1:f8:a4:97:5d:
         a0:a4:82:e4:0a:66:76:20:0e:4c:c1:86:35:c0:b3:26:b1:6b:
         9f:5d:e8:95:8b:49:8c:65:27:89:19:a2:2f:ec:44:dd:af:00:
         87:88:d7:8a:bf:0f:48:74:0c:59:fc:e4:02:68:73:03:d2:8c:
         9a:0c:dc:e3:bf:07:ea:51:ab:e5:64:da:7e:3b:53:4e:fa:39:
         e3:5f:03:f1:6a:53:78:3e:4c:15:3e:f9:d0:e7:37:79:b5:05:
         86:c8:23:75:0b:52:b4:29:9c:d8:12:d6:ed:ec:63:68:ab:2d:
         0a:5a:3c:26:b7:2b:f0:c1:8b:1b:88:e9:45:b5:31:a2:d7:02:
         5c:b8:56:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j/sjX0f84FCt6KNuT8RSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZDAzMTVlODcyODkyMWE5OWZjNjM0NmI0Y2U4ZjEwYjVk
Yjg2N2MwHhcNMjUwNjI4MjIwMjEzWhcNMjUwNjI5MjIwMjEzWjAzMTEwLwYDVQQD
Eyg1ZmVmNGJkZGNlNDdiZjNlOTZjOTYzMzQ3NmI1ZTljZDY0ZWU1OWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Z7hdWhjVkDdwwkMg9aBDndkmGs5
YBKUjTEOOceHKAQEYVm3TB2lpEoXz6tTTZ3FRzWx5gxBPFBjvFRDbobagsDSTVfi
Itb4TcHfn6OTZ6sfu98o5RpLeSJ0kdMEaOPGWYUycJ/Rr2wRpWOU5bIEzjqmRk+d
EhCAleZZSKP/1mmG2g46eIFBHRXcyIMcxX9mhFzufCMOgXJY1ZQCsSYtHRlXmN9I
qIHl7BpfCfvG9nJC/AG4TciivFKWKLZS/Isx2bE5+UVAFQWRHJnrUMVvrIMr4Qwk
/HQ4V6mckXa+XSIH81d+dqn+M9KgBmmS9iCIDRKIkTxFOtpraishfaHWWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/vS93OR78+lsljNHa16c1k7lnxMB8GA1UdIwQY
MBaAFG7QMV6HKJIamfxjRrTOjxC124Z8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnRBeFhvY29raHFaX0dOR3RNNlBFTFhiaG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yYTYyYzItMTdkNS00NGNkLTkwZWYt
NWIzMzdhYzJlZjc5LzEvYnRBeFhvY29raHFaX0dOR3RNNlBFTFhiaG53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8yYTYyYzItMTdkNS00NGNkLTkwZWYtNWIzMzdhYzJlZjc5
LzEvYnRBeFhvY29raHFaX0dOR3RNNlBFTFhiaG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtZt/Q07
TUM6laTlB+yalY8PAeg+ICNt8h1xCAybYzn5Z+Bc+UcO8nRTaVLSC2Qjm2cVFlUk
fwzueBSy1yENHr9FMeExpAPmuK0AjrITIYAFQooO7pdonWXopmyzbCO5qitl9JeY
2Xi+pWDe6uLBT8x5CSPiJ1PZvrH4pJddoKSC5ApmdiAOTMGGNcCzJrFrn13olYtJ
jGUniRmiL+xE3a8Ah4jXir8PSHQMWfzkAmhzA9KMmgzc478H6lGr5WTafjtTTvo5
418D8WpTeD5MFT750Oc3ebUFhsgjdQtStCmc2BLW7exjaKstClo8Jrcr8MGLG4jp
RbUxotcCXLhWyw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:40:44 2025 by rpki-client