Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
File:                     j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft (raw, json)
Hash identifier:          M1FCKSzUqeL2PPrKjpU6YbqvYDXeXQK269Dk1QcbXns=
Subject key identifier:   D5:2A:6E:30:47:E9:FF:98:13:CB:18:5D:DE:6A:D9:CE:E0:33:CC:FE
Authority key identifier: 8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32
Certificate issuer:       /CN=8fac851d9982896a765876d311b97b509357ec32
Certificate serial:       0197B7EA87FB4D9AA31CE615B5411901C52A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
Manifest number:          063F
Signing time:             Sat 28 Jun 2025 19:01:30 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:30 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:30 +0000
Files and hashes:         1: j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl (hash: +D3E8P2Iof8o/oH6kliUdeXoWcLqcAb+U95mj1amAS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:87:fb:4d:9a:a3:1c:e6:15:b5:41:19:01:c5:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fac851d9982896a765876d311b97b509357ec32
        Validity
            Not Before: Jun 28 19:01:30 2025 GMT
            Not After : Jun 29 19:01:30 2025 GMT
        Subject: CN=d52a6e3047e9ff9813cb185dde6ad9cee033ccfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:36:12:64:84:12:82:23:83:c8:50:b1:d0:1f:
                    5d:71:72:ce:6b:16:f4:dc:51:7c:c5:cc:62:64:4c:
                    59:cf:a7:22:24:30:76:51:f1:8a:f8:49:d4:70:f5:
                    a5:a9:dd:15:95:33:06:25:68:6e:a3:68:28:40:b0:
                    37:75:bc:b3:55:0e:6b:b2:97:06:1d:a7:c4:6d:03:
                    dc:ef:c2:0b:46:b3:49:b0:f2:32:61:1f:d3:2b:e7:
                    a1:ec:a6:2d:7f:48:4a:39:81:c1:3d:18:98:b1:d3:
                    74:50:6b:90:2d:77:e1:2e:aa:79:ab:b0:04:8f:f5:
                    df:43:cc:fd:fd:0f:9e:09:5d:5f:94:36:41:c4:6c:
                    e9:24:ca:10:8a:94:ea:df:37:f6:ea:1d:93:5c:47:
                    1c:92:db:86:eb:a2:f2:59:d0:5b:eb:33:04:0a:8e:
                    bd:12:1c:96:d3:ec:7e:28:7c:36:1b:25:11:91:8e:
                    af:ec:d8:fc:2e:d5:99:cd:d0:5f:2d:86:4b:98:54:
                    c2:65:fe:93:4f:66:a6:b3:4c:19:6c:7f:ec:1e:b9:
                    07:cd:14:5b:b5:8a:03:94:0c:14:02:b9:74:70:fb:
                    37:91:b2:d5:2d:27:87:bb:52:8e:36:54:a7:e0:75:
                    0c:8b:f7:c6:d9:95:12:1d:26:7e:5d:10:30:d4:bf:
                    1e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2A:6E:30:47:E9:FF:98:13:CB:18:5D:DE:6A:D9:CE:E0:33:CC:FE
            X509v3 Authority Key Identifier:
                keyid:8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:c5:73:f4:13:49:04:5b:2c:36:0f:af:ba:3d:53:db:0a:a9:
         16:e8:e2:f0:b0:bf:91:0b:52:84:1a:af:8c:39:1e:18:d6:36:
         eb:8d:03:4d:4e:1a:c9:69:dc:b6:ce:25:9b:35:c6:fa:60:28:
         52:2c:b2:80:4f:ce:8f:b4:aa:b6:54:72:89:77:29:72:9f:77:
         74:4a:31:e2:c6:d4:56:17:5e:53:81:37:12:45:f7:c8:73:ee:
         43:96:97:9d:79:7a:0a:49:e6:9e:a3:22:6f:61:9c:ed:28:64:
         5b:61:8d:81:8a:b3:5e:0a:9e:4d:b7:c6:cd:84:50:09:b3:bb:
         d1:f1:be:03:49:42:5e:18:ea:90:a7:ff:e3:45:39:6b:a6:bb:
         33:0c:94:29:03:0f:38:2c:54:7e:7a:69:52:ee:58:c9:69:56:
         2f:42:1a:50:7f:68:06:7a:e8:9b:80:e4:01:be:54:b7:a5:c9:
         22:31:fc:bf:8a:18:cf:ac:fa:ae:96:0a:c8:99:40:9b:aa:82:
         7b:a1:35:80:38:27:f2:a9:73:4f:fa:0b:b6:8b:34:6a:65:f5:
         24:00:df:54:da:1c:41:84:bf:c1:0b:52:85:ec:82:22:dd:de:
         03:b6:fd:a5:0e:6d:c1:37:31:8d:34:96:b8:1b:b8:84:4a:21:
         d0:7b:95:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36of7TZqjHOYVtUEZAcUqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYWM4NTFkOTk4Mjg5NmE3NjU4NzZkMzExYjk3YjUwOTM1
N2VjMzIwHhcNMjUwNjI4MTkwMTMwWhcNMjUwNjI5MTkwMTMwWjAzMTEwLwYDVQQD
EyhkNTJhNmUzMDQ3ZTlmZjk4MTNjYjE4NWRkZTZhZDljZWUwMzNjY2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jYSZIQSgiODyFCx0B9dcXLOaxb0
3FF8xcxiZExZz6ciJDB2UfGK+EnUcPWlqd0VlTMGJWhuo2goQLA3dbyzVQ5rspcG
HafEbQPc78ILRrNJsPIyYR/TK+eh7KYtf0hKOYHBPRiYsdN0UGuQLXfhLqp5q7AE
j/XfQ8z9/Q+eCV1flDZBxGzpJMoQipTq3zf26h2TXEccktuG66LyWdBb6zMECo69
EhyW0+x+KHw2GyURkY6v7Nj8LtWZzdBfLYZLmFTCZf6TT2ams0wZbH/sHrkHzRRb
tYoDlAwUArl0cPs3kbLVLSeHu1KONlSn4HUMi/fG2ZUSHSZ+XRAw1L8efQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUqbjBH6f+YE8sYXd5q2c7gM8z+MB8GA1UdIwQY
MBaAFI+shR2Zgolqdlh20xG5e1CTV+wyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajZ5RkhabUNpV3AyV0hiVEVibDdVSk5YN0RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85MmM5ZDUtNTQ2Mi00MTkwLWEzMzAt
MmRmYzRhNmY1ZDBkLzEvajZ5RkhabUNpV3AyV0hiVEVibDdVSk5YN0RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy85MmM5ZDUtNTQ2Mi00MTkwLWEzMzAtMmRmYzRhNmY1ZDBk
LzEvajZ5RkhabUNpV3AyV0hiVEVibDdVSk5YN0RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv8Vz9BNJ
BFssNg+vuj1T2wqpFuji8LC/kQtShBqvjDkeGNY2640DTU4ayWncts4lmzXG+mAo
UiyygE/Oj7SqtlRyiXcpcp93dEox4sbUVhdeU4E3EkX3yHPuQ5aXnXl6CknmnqMi
b2Gc7ShkW2GNgYqzXgqeTbfGzYRQCbO70fG+A0lCXhjqkKf/40U5a6a7MwyUKQMP
OCxUfnppUu5YyWlWL0IaUH9oBnrom4DkAb5Ut6XJIjH8v4oYz6z6rpYKyJlAm6qC
e6E1gDgn8qlzT/oLtos0amX1JADfVNocQYS/wQtSheyCIt3eA7b9pQ5twTcxjTSW
uBu4hEoh0HuVkw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:47:32 2025 by rpki-client