Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
File:                     b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft (raw, json)
Hash identifier:          0VcgRU5/9/nDRydNkKFz44TsyMaAVlbbvU9XHMkU3vg=
Subject key identifier:   AD:87:B6:5B:B9:3E:FD:3B:48:5A:A0:78:9B:82:3A:2E:82:AA:B5:BA
Authority key identifier: 6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22
Certificate issuer:       /CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
Certificate serial:       0197B6A138737D88106E8F44F8DEDFAE6F7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 13:01:48 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:48 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:48 +0000
Files and hashes:         1: b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl (hash: /cHivTW/lIjjbQMhkOu0AGQgQgPPLTXhYHBfiVNpntg=)
                          2: pBaxgCqTyeze3hcIp2M83HQrP4U.roa (hash: MsncevRB1zh5gU5+B31LnCwg/AwVLsxlHu2XQLm34Hs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:38:73:7d:88:10:6e:8f:44:f8:de:df:ae:6f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
        Validity
            Not Before: Jun 28 13:01:48 2025 GMT
            Not After : Jun 29 13:01:48 2025 GMT
        Subject: CN=ad87b65bb93efd3b485aa0789b823a2e82aab5ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c7:a6:d4:c3:ac:4b:aa:5c:a4:62:6a:75:60:
                    e9:b7:f2:78:62:8c:2a:be:70:89:22:bf:d9:6b:2f:
                    bd:9a:e6:79:73:ad:d9:71:71:3b:40:cc:9f:93:20:
                    85:92:d0:cf:b2:06:4a:0f:be:8b:19:3c:01:5b:da:
                    1f:34:fd:94:52:e4:51:35:d2:a2:c1:6e:7a:3d:b5:
                    10:c0:f5:e0:e4:56:bf:5f:43:d3:c1:ae:f7:a0:85:
                    a5:85:81:ae:f6:5d:fa:54:88:ea:27:07:4c:93:02:
                    f1:45:e1:49:9e:07:fa:49:f8:fc:1d:bb:cf:1b:1b:
                    e3:51:bf:73:b7:d9:33:6e:ad:a1:aa:d1:4e:5c:36:
                    9b:37:06:a7:66:5c:24:20:d6:c2:87:4b:67:25:22:
                    f2:07:6f:dd:7e:9f:e5:79:e3:05:77:4c:58:fb:d4:
                    d7:fd:6e:6a:4f:e1:07:db:0f:4e:f2:a4:50:ce:28:
                    ee:8f:4a:a8:ab:48:53:53:10:69:fc:ca:01:03:25:
                    91:2a:3d:b0:43:3a:c0:82:48:f7:b9:d8:49:51:80:
                    5a:c5:8f:6a:37:03:06:92:9c:39:94:7a:f9:6f:a2:
                    2a:e8:d2:bf:9d:d4:ee:f3:3f:f8:23:f6:2b:7b:ed:
                    0e:13:78:d8:e1:05:e4:66:a2:6a:45:4f:85:83:9b:
                    47:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:87:B6:5B:B9:3E:FD:3B:48:5A:A0:78:9B:82:3A:2E:82:AA:B5:BA
            X509v3 Authority Key Identifier:
                keyid:6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d6:c1:96:f5:9e:0c:99:37:88:83:b4:89:f8:47:49:29:be:
         71:71:4a:33:99:e7:9e:b3:a8:0d:1c:3b:b2:ac:03:73:1f:71:
         6b:2e:23:09:c2:d9:22:e4:20:f5:11:f8:1d:44:82:27:08:8e:
         51:3e:cf:13:37:a8:19:34:23:e5:7f:f5:7a:11:8a:05:2f:9c:
         d7:14:f3:01:7e:9a:bf:12:28:54:47:02:84:5d:22:9b:43:1d:
         61:1b:75:06:e2:42:b8:49:e9:53:ac:2b:f9:34:21:73:a7:16:
         1b:c6:c1:a5:07:32:72:69:65:80:86:fa:b6:5b:b9:84:eb:a0:
         70:10:3e:1b:b5:54:e0:b7:6b:cf:77:b3:79:27:8b:71:8d:7b:
         52:2b:2c:19:f1:81:79:c9:5b:91:8d:ad:35:17:7c:78:79:11:
         48:98:ec:c3:84:f6:85:15:2e:a1:09:e2:64:23:4d:7a:4a:a0:
         05:e6:d9:5d:97:0a:36:bd:d9:be:9b:ab:be:b4:1c:76:ac:7d:
         fe:93:f9:ca:38:32:55:67:24:e5:df:16:9b:84:2e:7a:41:52:
         d0:56:b5:37:93:95:fb:2c:77:43:51:e4:13:a2:a8:57:5c:e5:
         ed:7e:96:e4:2f:a1:7e:04:40:8d:ba:47:d5:23:18:7d:27:bb:
         9c:29:93:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oThzfYgQbo9E+N7frm98MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZWUyN2Q1OTRkZGIyZjA5YzhjYjU5MjQ1ODAxYzlhZjVh
MzRjMjIwHhcNMjUwNjI4MTMwMTQ4WhcNMjUwNjI5MTMwMTQ4WjAzMTEwLwYDVQQD
EyhhZDg3YjY1YmI5M2VmZDNiNDg1YWEwNzg5YjgyM2EyZTgyYWFiNWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucem1MOsS6pcpGJqdWDpt/J4Yowq
vnCJIr/Zay+9muZ5c63ZcXE7QMyfkyCFktDPsgZKD76LGTwBW9ofNP2UUuRRNdKi
wW56PbUQwPXg5Fa/X0PTwa73oIWlhYGu9l36VIjqJwdMkwLxReFJngf6Sfj8HbvP
GxvjUb9zt9kzbq2hqtFOXDabNwanZlwkINbCh0tnJSLyB2/dfp/leeMFd0xY+9TX
/W5qT+EH2w9O8qRQzijuj0qoq0hTUxBp/MoBAyWRKj2wQzrAgkj3udhJUYBaxY9q
NwMGkpw5lHr5b6Iq6NK/ndTu8z/4I/Yre+0OE3jY4QXkZqJqRU+Fg5tHlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2Htlu5Pv07SFqgeJuCOi6CqrW6MB8GA1UdIwQY
MBaAFG/uJ9WU3bLwnIy1kkWAHJr1o0wiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYi00bjFaVGRzdkNjakxXU1JZQWNtdldqVENJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi84OTZhNDgtZGNhNC00ZDIzLThmMDct
ODc1NGExYzkwNjBiLzEvYi00bjFaVGRzdkNjakxXU1JZQWNtdldqVENJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi84OTZhNDgtZGNhNC00ZDIzLThmMDctODc1NGExYzkwNjBi
LzEvYi00bjFaVGRzdkNjakxXU1JZQWNtdldqVENJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNbBlvWe
DJk3iIO0ifhHSSm+cXFKM5nnnrOoDRw7sqwDcx9xay4jCcLZIuQg9RH4HUSCJwiO
UT7PEzeoGTQj5X/1ehGKBS+c1xTzAX6avxIoVEcChF0im0MdYRt1BuJCuEnpU6wr
+TQhc6cWG8bBpQcycmllgIb6tlu5hOugcBA+G7VU4Ldrz3ezeSeLcY17UissGfGB
eclbkY2tNRd8eHkRSJjsw4T2hRUuoQniZCNNekqgBebZXZcKNr3ZvpurvrQcdqx9
/pP5yjgyVWck5d8Wm4QuekFS0Fa1N5OV+yx3Q1HkE6KoV1zl7X6W5C+hfgRAjbpH
1SMYfSe7nCmTGA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:31 2025 by rpki-client