Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
File:                     6z1v54fFBVOwcxcRLhnmW09nWTE.mft (raw, json)
Hash identifier:          4u34xkKaJO8G9JHlxfyORWz8MgQ7p88ydnSEplcrTN8=
Subject key identifier:   EC:60:73:E8:A3:F7:71:83:A0:8A:39:19:33:D6:37:36:C4:58:13:EF
Authority key identifier: EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31
Certificate issuer:       /CN=eb3d6fe787c50553b07317112e19e65b4f675931
Certificate serial:       0196C94DE1BED02CF76A6A85C4DF93AC9C8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
Manifest number:          14FD
Signing time:             Tue 13 May 2025 11:00:46 +0000
Manifest this update:     Tue 13 May 2025 11:00:46 +0000
Manifest next update:     Wed 14 May 2025 11:00:46 +0000
Files and hashes:         1: 6z1v54fFBVOwcxcRLhnmW09nWTE.crl (hash: ogPThqMHQTVQeKEdpNBYOX+0fQAIQW4ON+yJUlboP9Q=)
                          2: jcrTKRLVafxbmhoPzjEKfBszAmk.roa (hash: dZzjw0X45T+if5mYD87H3+tKeMoeDlrA485y+6aDQxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 11:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:4d:e1:be:d0:2c:f7:6a:6a:85:c4:df:93:ac:9c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb3d6fe787c50553b07317112e19e65b4f675931
        Validity
            Not Before: May 13 11:00:46 2025 GMT
            Not After : May 14 11:00:46 2025 GMT
        Subject: CN=ec6073e8a3f77183a08a391933d63736c45813ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:35:34:5d:28:32:49:ad:28:86:51:b9:83:1e:
                    e9:22:25:b4:56:f5:01:9d:03:f5:14:4d:98:73:59:
                    e9:1c:40:06:83:cc:05:77:3d:6c:90:71:e7:6f:51:
                    32:8b:01:30:2a:ea:04:c9:64:08:79:02:29:d1:d2:
                    ec:cd:88:19:d4:48:c1:41:18:8d:b4:11:23:87:63:
                    e6:60:7e:37:b6:c3:44:2f:9c:bb:af:8a:d3:2e:7b:
                    d1:42:1c:14:f9:16:bf:7a:55:69:bf:bb:65:8b:ca:
                    87:6b:a5:09:03:0c:d5:33:9c:e9:e5:db:4d:df:e8:
                    4e:87:13:a2:0b:e0:ea:c3:51:59:4b:c8:ad:c8:f7:
                    a3:97:1a:21:34:37:7a:1b:e5:98:b4:d7:03:6f:10:
                    ec:0c:2c:cf:f1:44:b4:74:4e:55:d9:74:e5:28:0a:
                    87:5b:e9:f9:e1:65:13:51:de:14:71:e9:9e:7d:67:
                    16:33:8e:13:da:29:c9:93:0a:5d:bb:1b:e3:6c:3d:
                    23:99:54:57:bc:2a:64:57:69:34:c1:02:51:58:35:
                    e5:31:71:84:0a:1d:d2:6a:da:20:ae:d2:aa:bb:2c:
                    4c:4c:c4:cc:6e:32:b1:16:b9:ca:46:3c:37:a7:9b:
                    d5:1d:80:ca:22:13:a5:73:92:c6:df:48:2a:83:53:
                    0c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:60:73:E8:A3:F7:71:83:A0:8A:39:19:33:D6:37:36:C4:58:13:EF
            X509v3 Authority Key Identifier:
                keyid:EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:1e:f1:dd:6d:11:d6:98:88:c9:bf:c2:12:bc:31:91:0e:7c:
         da:5c:49:01:18:40:6d:5a:24:41:86:f1:f3:08:0c:57:83:cc:
         fd:3c:2d:3b:1c:45:f3:c4:a1:57:56:c8:3b:86:91:91:94:4c:
         f3:b0:03:66:c3:12:49:b6:6e:8b:89:ac:89:5e:17:67:97:f7:
         4f:71:e2:3e:e9:8c:ba:3a:23:d8:08:2b:20:10:7b:94:7f:35:
         c5:1c:5f:91:ae:c3:95:26:2e:a7:50:e9:81:10:ff:98:21:cc:
         e2:b3:93:ba:0a:ae:3a:82:3c:64:88:7d:0c:48:32:3a:e4:ad:
         7d:e5:07:7d:47:34:91:27:2f:69:f2:db:f0:84:d1:6f:18:14:
         d9:6d:3c:78:2b:62:5b:e2:9c:75:7b:7f:05:82:71:72:f4:b3:
         90:64:14:e7:87:f5:53:91:46:4e:62:cc:f3:a5:37:5c:44:f0:
         ee:a2:20:b8:9b:b6:38:67:97:6e:1b:ee:38:2b:58:ed:aa:38:
         38:7f:9e:b5:52:40:4f:90:c5:6b:55:13:5e:2e:eb:e3:c5:3d:
         b0:8c:a7:46:65:58:09:29:1b:25:2e:2c:61:88:c3:e3:6b:6c:
         70:24:ef:21:03:ef:de:e5:b3:d1:f9:78:10:b2:57:d9:8d:63:
         73:47:10:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJTeG+0Cz3amqFxN+TrJyMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViM2Q2ZmU3ODdjNTA1NTNiMDczMTcxMTJlMTllNjViNGY2
NzU5MzEwHhcNMjUwNTEzMTEwMDQ2WhcNMjUwNTE0MTEwMDQ2WjAzMTEwLwYDVQQD
EyhlYzYwNzNlOGEzZjc3MTgzYTA4YTM5MTkzM2Q2MzczNmM0NTgxM2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTU0XSgySa0ohlG5gx7pIiW0VvUB
nQP1FE2Yc1npHEAGg8wFdz1skHHnb1EyiwEwKuoEyWQIeQIp0dLszYgZ1EjBQRiN
tBEjh2PmYH43tsNEL5y7r4rTLnvRQhwU+Ra/elVpv7tli8qHa6UJAwzVM5zp5dtN
3+hOhxOiC+Dqw1FZS8ityPejlxohNDd6G+WYtNcDbxDsDCzP8US0dE5V2XTlKAqH
W+n54WUTUd4UcemefWcWM44T2inJkwpduxvjbD0jmVRXvCpkV2k0wQJRWDXlMXGE
Ch3SatogrtKquyxMTMTMbjKxFrnKRjw3p5vVHYDKIhOlc5LG30gqg1MMTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxgc+ij93GDoIo5GTPWNzbEWBPvMB8GA1UdIwQY
MBaAFOs9b+eHxQVTsHMXES4Z5ltPZ1kxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnoxdjU0ZkZCVk93Y3hjUkxobm1XMDluV1RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wN2NlN2UtNDY0MS00OTg1LTk4NDUt
MWEwMDcxNTdkNTlhLzEvNnoxdjU0ZkZCVk93Y3hjUkxobm1XMDluV1RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wN2NlN2UtNDY0MS00OTg1LTk4NDUtMWEwMDcxNTdkNTlh
LzEvNnoxdjU0ZkZCVk93Y3hjUkxobm1XMDluV1RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYx7x3W0R
1piIyb/CErwxkQ582lxJARhAbVokQYbx8wgMV4PM/TwtOxxF88ShV1bIO4aRkZRM
87ADZsMSSbZui4msiV4XZ5f3T3HiPumMujoj2AgrIBB7lH81xRxfka7DlSYup1Dp
gRD/mCHM4rOTugquOoI8ZIh9DEgyOuStfeUHfUc0kScvafLb8ITRbxgU2W08eCti
W+KcdXt/BYJxcvSzkGQU54f1U5FGTmLM86U3XETw7qIguJu2OGeXbhvuOCtY7ao4
OH+etVJAT5DFa1UTXi7r48U9sIynRmVYCSkbJS4sYYjD42tscCTvIQPv3uWz0fl4
ELJX2Y1jc0cQRA==
-----END CERTIFICATE-----
Generated at Tue May 13 16:25:10 2025 by rpki-client