Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
File:                     6ZQF7o9djnZOkL1mvdHomsEoCeg.mft (raw, json)
Hash identifier:          AoJT/aLN2//4vweDN3BruEi1KvhMP7q0vVYhIxe8V7E=
Subject key identifier:   19:4D:C6:E8:EB:8B:95:0B:AF:8D:FE:E1:01:74:BC:3E:83:DF:EE:D8
Authority key identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
Certificate issuer:       /CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Certificate serial:       0197B7EA30D6C9F6FFA60A1DE0D2AACFAE03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
Manifest number:          090C
Signing time:             Sat 28 Jun 2025 19:01:07 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:07 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:07 +0000
Files and hashes:         1: 6ZQF7o9djnZOkL1mvdHomsEoCeg.crl (hash: 8u8MjH0XJGJ0+SZ9acvI9VL/9HJvgFPNYi4Lsa5DTD4=)
                          2: vDzT1MfGHy3qiiGgUF2NvHG69NY.roa (hash: /QoWZln+ZcMlohGoxqm79B+9B4Oq5GX6wiGGVl8wkGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:30:d6:c9:f6:ff:a6:0a:1d:e0:d2:aa:cf:ae:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
        Validity
            Not Before: Jun 28 19:01:07 2025 GMT
            Not After : Jun 29 19:01:07 2025 GMT
        Subject: CN=194dc6e8eb8b950baf8dfee10174bc3e83dfeed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1e:10:9d:d6:59:b3:4f:7a:95:8d:d6:cd:61:
                    dd:9c:66:ac:63:14:27:1a:01:8e:ca:c1:68:0c:11:
                    d9:ec:d3:14:b2:3e:ad:e6:ea:08:41:99:03:af:54:
                    37:16:0e:2f:bd:45:32:fc:fa:e1:4e:ce:12:ea:85:
                    90:5d:76:b2:fd:07:8c:11:cf:ef:b2:4b:d7:a5:a9:
                    cd:e6:77:3a:11:6e:68:5e:d4:15:36:af:dc:b1:5d:
                    66:25:f7:56:50:24:87:79:7a:38:27:93:9e:04:c7:
                    b2:aa:43:69:ac:f7:b7:ef:42:0b:f5:21:2d:1f:b1:
                    b4:48:95:72:54:07:78:cb:ff:1a:4a:06:ce:66:34:
                    f8:e6:2a:fc:96:12:74:4b:64:6a:d1:52:82:ce:c7:
                    46:14:37:55:8a:f8:0f:66:8f:c9:c8:0e:2d:84:f5:
                    23:55:95:31:bc:74:d9:31:98:d7:58:dc:e4:36:5d:
                    b2:2f:34:7c:7a:11:af:af:69:ba:a9:cc:61:7c:b6:
                    a8:9e:94:a1:b8:5d:12:e6:88:a4:49:bf:f1:94:f5:
                    29:24:8b:c8:29:c3:d4:5b:53:fe:6b:57:bc:8d:95:
                    3b:5f:7f:9c:be:d4:d5:2b:92:bf:ee:2f:df:1c:7f:
                    d9:10:ee:10:86:ed:23:0e:87:41:02:ee:4d:c9:13:
                    25:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:4D:C6:E8:EB:8B:95:0B:AF:8D:FE:E1:01:74:BC:3E:83:DF:EE:D8
            X509v3 Authority Key Identifier:
                keyid:E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:68:f5:12:48:ac:2b:da:ad:3e:ba:a6:5b:01:a9:b3:6c:42:
         c7:b8:27:1c:29:b6:67:71:f3:7a:9a:8c:21:52:47:4f:5d:f5:
         c3:76:6c:ac:ed:f1:79:e4:97:15:f2:65:a0:0e:66:1a:d0:0a:
         53:b0:c1:ef:dc:fe:91:79:98:48:82:0f:85:58:5f:98:f4:52:
         22:b1:0e:f1:f5:09:a2:10:5e:a8:10:57:41:bc:c3:62:ca:2a:
         5f:a4:dd:a2:3b:f1:12:3e:c4:23:95:f6:2c:66:13:c0:6b:e4:
         1b:b0:30:9b:92:79:3f:98:14:c0:10:96:05:43:15:34:5f:e1:
         37:71:a0:5d:4c:47:51:98:c3:5b:4a:dd:27:f3:c3:7d:e2:00:
         82:bf:47:0a:f1:b8:8c:2f:c6:fb:18:09:59:f5:ec:ae:f9:09:
         9d:6c:03:15:66:6f:a0:8f:87:05:0d:26:62:55:b0:ef:13:99:
         d0:ed:5d:d0:58:4f:48:76:05:8c:86:d8:1a:f2:54:d9:b8:c5:
         16:be:8d:0f:65:45:ff:b1:d2:d6:fa:ed:e9:7d:62:51:45:36:
         fd:91:d1:dc:96:2c:10:75:2f:75:1f:93:6c:51:cb:bc:d4:9f:
         9f:e2:e6:ab:ce:3d:b9:83:ad:63:33:6a:ef:e3:36:d0:f9:68:
         d8:cc:1c:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36jDWyfb/pgod4NKqz64DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5OTQwNWVlOGY1ZDhlNzY0ZTkwYmQ2NmJkZDFlODlhYzEy
ODA5ZTgwHhcNMjUwNjI4MTkwMTA3WhcNMjUwNjI5MTkwMTA3WjAzMTEwLwYDVQQD
EygxOTRkYzZlOGViOGI5NTBiYWY4ZGZlZTEwMTc0YmMzZTgzZGZlZWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0x4QndZZs096lY3WzWHdnGasYxQn
GgGOysFoDBHZ7NMUsj6t5uoIQZkDr1Q3Fg4vvUUy/PrhTs4S6oWQXXay/QeMEc/v
skvXpanN5nc6EW5oXtQVNq/csV1mJfdWUCSHeXo4J5OeBMeyqkNprPe370IL9SEt
H7G0SJVyVAd4y/8aSgbOZjT45ir8lhJ0S2Rq0VKCzsdGFDdVivgPZo/JyA4thPUj
VZUxvHTZMZjXWNzkNl2yLzR8ehGvr2m6qcxhfLaonpShuF0S5oikSb/xlPUpJIvI
KcPUW1P+a1e8jZU7X3+cvtTVK5K/7i/fHH/ZEO4Qhu0jDodBAu5NyRMlewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlNxujri5ULr43+4QF0vD6D3+7YMB8GA1UdIwQY
MBaAFOmUBe6PXY52TpC9Zr3R6JrBKAnoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlpRRjdvOWRqblpPa0wxbXZkSG9tc0VvQ2VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xYjkyMDItNDg2OS00ZDQ1LTk1MjEt
ZWIxMWI0OTU0ZjMzLzEvNlpRRjdvOWRqblpPa0wxbXZkSG9tc0VvQ2VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8xYjkyMDItNDg2OS00ZDQ1LTk1MjEtZWIxMWI0OTU0ZjMz
LzEvNlpRRjdvOWRqblpPa0wxbXZkSG9tc0VvQ2VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmj1Ekis
K9qtPrqmWwGps2xCx7gnHCm2Z3HzepqMIVJHT131w3ZsrO3xeeSXFfJloA5mGtAK
U7DB79z+kXmYSIIPhVhfmPRSIrEO8fUJohBeqBBXQbzDYsoqX6TdojvxEj7EI5X2
LGYTwGvkG7Awm5J5P5gUwBCWBUMVNF/hN3GgXUxHUZjDW0rdJ/PDfeIAgr9HCvG4
jC/G+xgJWfXsrvkJnWwDFWZvoI+HBQ0mYlWw7xOZ0O1d0FhPSHYFjIbYGvJU2bjF
Fr6ND2VF/7HS1vrt6X1iUUU2/ZHR3JYsEHUvdR+TbFHLvNSfn+Lmq849uYOtYzNq
7+M20Plo2MwcfQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:08 2025 by rpki-client