Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft
File:                     6E2Uguxo01d9kwSMmPoFUXOAoqg.mft (raw, json)
Hash identifier:          oqEgDIDjEmielttuJiGZCSEx6t4IWPa4h6AjRWr+0Mk=
Subject key identifier:   51:5A:2A:5F:D8:80:70:75:1C:29:30:22:A4:11:18:0D:4F:1A:D8:6A
Authority key identifier: E8:4D:94:82:EC:68:D3:57:7D:93:04:8C:98:FA:05:51:73:80:A2:A8
Certificate issuer:       /CN=e84d9482ec68d3577d93048c98fa05517380a2a8
Certificate serial:       0197B7B2FD8673AE85247AFDBD095A7B5B4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft
Manifest number:          015E
Signing time:             Sat 28 Jun 2025 18:00:50 +0000
Manifest this update:     Sat 28 Jun 2025 18:00:50 +0000
Manifest next update:     Sun 29 Jun 2025 18:00:50 +0000
Files and hashes:         1: 6E2Uguxo01d9kwSMmPoFUXOAoqg.crl (hash: vgYmnQuH53L8prPoTEhaqZB+BPQ0i9aPL4n+nprJ/xY=)
                          2: nwRwy-984bbHflwKusiJIVmAkq4.roa (hash: tOQkT5BXAu3wfc5aKZscWA4O4C5nLe2NnLsQNNV6duI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b2:fd:86:73:ae:85:24:7a:fd:bd:09:5a:7b:5b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84d9482ec68d3577d93048c98fa05517380a2a8
        Validity
            Not Before: Jun 28 18:00:50 2025 GMT
            Not After : Jun 29 18:00:50 2025 GMT
        Subject: CN=515a2a5fd88070751c293022a411180d4f1ad86a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3a:ac:37:83:01:2b:6e:6f:d6:28:b8:0d:f4:
                    37:a7:30:d8:61:19:e2:3c:06:58:38:1c:e8:b1:d7:
                    53:dc:02:dd:11:c0:9f:b4:9b:2b:e3:e5:1b:e6:2c:
                    52:67:86:2b:55:a5:17:7b:cd:d7:f4:4c:0b:87:97:
                    64:91:ca:1b:33:a1:d0:9c:37:8c:78:43:8b:9c:53:
                    ae:b0:08:8a:0e:bb:58:d0:f5:c6:54:37:aa:18:5e:
                    0a:ce:e6:17:45:15:60:32:bc:cc:78:3c:40:95:35:
                    b3:a4:10:03:9e:e7:ed:3d:9c:23:44:d5:0d:d5:54:
                    b3:bb:8b:d9:c4:5b:4a:a5:83:2b:f5:f4:b6:ec:e5:
                    12:19:40:b0:47:e5:a1:cf:36:e5:f9:12:48:94:5f:
                    da:e8:0e:b3:ec:82:df:d7:ee:b9:ab:a8:16:81:20:
                    e4:5f:73:2d:ee:49:3a:51:4f:86:e3:b8:0c:b7:41:
                    f0:33:a6:16:dc:6a:1f:bf:bc:ec:fc:6a:cc:cd:48:
                    40:b3:6d:ad:53:69:9f:f0:e9:66:dc:03:d1:7d:15:
                    c4:ec:4a:7d:63:4d:2e:7b:69:4b:be:8f:e4:c9:45:
                    9d:40:21:c8:14:78:07:6f:3d:0d:8c:a3:f5:ae:d0:
                    05:01:c2:5d:98:1b:be:a2:19:6f:fd:b9:23:e7:b1:
                    49:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5A:2A:5F:D8:80:70:75:1C:29:30:22:A4:11:18:0D:4F:1A:D8:6A
            X509v3 Authority Key Identifier:
                keyid:E8:4D:94:82:EC:68:D3:57:7D:93:04:8C:98:FA:05:51:73:80:A2:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:52:24:d8:fa:57:a2:c6:29:fe:ee:81:a6:90:c7:1c:df:c7:
         26:66:d5:be:cb:1a:4f:fe:77:de:8a:ad:fb:a0:54:7f:4c:c0:
         3f:1f:73:73:1f:c1:e9:8a:55:70:c6:60:b2:60:80:27:35:cd:
         6e:55:b9:12:ed:bf:8c:8a:e8:1f:2f:66:70:c4:22:bb:88:a9:
         c9:6b:34:17:fb:1a:94:26:b6:64:41:0a:7a:c3:02:2f:7d:f4:
         30:ca:e6:72:f5:1d:52:1b:66:c1:ea:f6:ad:13:41:ed:6d:16:
         7e:28:03:d9:63:ae:95:e7:18:29:4a:75:f1:52:e5:8b:3c:23:
         09:f5:b2:23:67:d4:5f:0c:1c:4b:3b:4c:9a:5f:9e:cb:c4:72:
         1d:6d:3f:d1:04:06:71:33:ec:45:33:3b:79:1a:9d:0c:17:62:
         44:79:f9:a8:cc:d8:df:bd:75:b7:42:a6:23:a7:83:86:d8:54:
         8d:4e:0d:12:83:b6:a6:2d:8c:3d:43:2c:2d:98:be:b7:bf:e4:
         cd:1d:e7:ed:29:f7:23:13:72:51:65:20:8e:7b:04:83:ae:13:
         56:8f:08:50:b7:4a:47:39:e9:17:fa:e6:fb:5e:27:18:be:75:
         16:61:18:1c:f2:18:88:c6:f4:39:4c:05:b5:3c:fe:4e:c9:82:
         ae:19:71:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3sv2Gc66FJHr9vQlae1tOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGQ5NDgyZWM2OGQzNTc3ZDkzMDQ4Yzk4ZmEwNTUxNzM4
MGEyYTgwHhcNMjUwNjI4MTgwMDUwWhcNMjUwNjI5MTgwMDUwWjAzMTEwLwYDVQQD
Eyg1MTVhMmE1ZmQ4ODA3MDc1MWMyOTMwMjJhNDExMTgwZDRmMWFkODZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DqsN4MBK25v1ii4DfQ3pzDYYRni
PAZYOBzosddT3ALdEcCftJsr4+Ub5ixSZ4YrVaUXe83X9EwLh5dkkcobM6HQnDeM
eEOLnFOusAiKDrtY0PXGVDeqGF4KzuYXRRVgMrzMeDxAlTWzpBADnuftPZwjRNUN
1VSzu4vZxFtKpYMr9fS27OUSGUCwR+Whzzbl+RJIlF/a6A6z7ILf1+65q6gWgSDk
X3Mt7kk6UU+G47gMt0HwM6YW3Gofv7zs/GrMzUhAs22tU2mf8Olm3APRfRXE7Ep9
Y00ue2lLvo/kyUWdQCHIFHgHbz0NjKP1rtAFAcJdmBu+ohlv/bkj57FJjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFaKl/YgHB1HCkwIqQRGA1PGthqMB8GA1UdIwQY
MBaAFOhNlILsaNNXfZMEjJj6BVFzgKKoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkUyVWd1eG8wMWQ5a3dTTW1Qb0ZVWE9Bb3FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82NGJkZWYtNWI1ZC00ZDEzLWFlOGUt
MDgzNWU2YjFlMzlhLzEvNkUyVWd1eG8wMWQ5a3dTTW1Qb0ZVWE9Bb3FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82NGJkZWYtNWI1ZC00ZDEzLWFlOGUtMDgzNWU2YjFlMzlh
LzEvNkUyVWd1eG8wMWQ5a3dTTW1Qb0ZVWE9Bb3FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAclIk2PpX
osYp/u6BppDHHN/HJmbVvssaT/533oqt+6BUf0zAPx9zcx/B6YpVcMZgsmCAJzXN
blW5Eu2/jIroHy9mcMQiu4ipyWs0F/salCa2ZEEKesMCL330MMrmcvUdUhtmwer2
rRNB7W0WfigD2WOulecYKUp18VLlizwjCfWyI2fUXwwcSztMml+ey8RyHW0/0QQG
cTPsRTM7eRqdDBdiRHn5qMzY3711t0KmI6eDhthUjU4NEoO2pi2MPUMsLZi+t7/k
zR3n7Sn3IxNyUWUgjnsEg64TVo8IULdKRznpF/rm+14nGL51FmEYHPIYiMb0OUwF
tTz+TsmCrhlxzg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:10:48 2025 by rpki-client