Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
File:                     e6Ix0pxKI7PpixSBPawJg-OjQFk.mft (raw, json)
Hash identifier:          wmgED2qA94i25W1EXjeTsg6FvCaYk6scSX9/8frUdCg=
Subject key identifier:   86:E2:68:5F:EC:8C:49:6E:3B:79:84:56:3E:F5:6D:08:5B:89:90:A5
Authority key identifier: 7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59
Certificate issuer:       /CN=7ba231d29c4a23b3e98b14813dac0983e3a34059
Certificate serial:       0198D960A47397BD140150332C44AFA29059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
Manifest number:          0623
Signing time:             Sun 24 Aug 2025 00:00:45 +0000
Manifest this update:     Sun 24 Aug 2025 00:00:45 +0000
Manifest next update:     Mon 25 Aug 2025 00:00:45 +0000
Files and hashes:         1: e6Ix0pxKI7PpixSBPawJg-OjQFk.crl (hash: dNR4ztDmoxGSxmDtCnXXVR7JXrUXkyrbDsFSFfvMmZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 17:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d9:60:a4:73:97:bd:14:01:50:33:2c:44:af:a2:90:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba231d29c4a23b3e98b14813dac0983e3a34059
        Validity
            Not Before: Aug 24 00:00:45 2025 GMT
            Not After : Aug 25 00:00:45 2025 GMT
        Subject: CN=86e2685fec8c496e3b7984563ef56d085b8990a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:69:ee:9c:12:32:b0:f6:63:c5:1b:72:e6:
                    92:fe:2a:da:4e:a4:4f:52:72:49:e1:7c:96:3e:d5:
                    57:aa:30:12:ec:97:86:a3:23:00:ee:db:18:6a:a3:
                    b3:80:b4:b6:56:59:4f:e9:11:ed:63:52:e6:84:13:
                    e7:d1:00:be:2e:ba:33:1e:84:8f:c2:db:ce:f2:30:
                    53:09:1d:fb:5b:2b:b9:80:a7:63:99:58:f1:ea:c2:
                    55:a7:d5:e1:ba:11:74:fc:dc:e9:19:2b:6f:c7:93:
                    74:38:c9:2c:bd:0b:ce:40:ab:e3:b9:a1:08:e4:cc:
                    79:c5:59:8c:9b:d3:a5:43:09:d9:0f:eb:7d:d0:a7:
                    c5:90:54:84:d4:0a:a9:89:b8:ed:7b:8b:65:fe:dd:
                    04:c4:94:e4:52:5f:a1:8d:87:61:73:ef:98:02:06:
                    9a:3b:4b:e0:64:19:e4:90:19:94:cc:85:9d:cd:9b:
                    c3:17:fc:37:4c:8d:19:99:e8:9d:e9:4a:97:a9:a6:
                    72:56:e5:94:18:dc:3b:82:6f:a2:60:82:5f:87:d2:
                    15:29:12:64:b5:9a:25:49:6a:87:8c:39:d9:fd:c2:
                    c5:30:3f:59:a8:ce:01:60:c1:05:23:ed:b4:4e:e4:
                    7e:04:78:4b:78:6f:7f:6f:1d:4b:07:37:d8:bf:a0:
                    b6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E2:68:5F:EC:8C:49:6E:3B:79:84:56:3E:F5:6D:08:5B:89:90:A5
            X509v3 Authority Key Identifier:
                keyid:7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:41:5f:04:48:37:28:c1:ee:dc:8a:4c:e2:6c:d1:9f:89:5b:
         5d:f3:67:87:18:7b:61:dd:20:a3:39:db:84:ac:0d:22:43:2c:
         1b:df:e4:be:bf:ba:d1:a4:1b:90:9c:19:60:e9:3e:c8:a0:79:
         e6:40:39:13:ef:fe:85:a1:d6:a1:bc:37:e3:f9:99:30:3d:37:
         4d:f2:3b:6c:07:9b:9b:c8:47:1a:42:5b:1f:1f:83:9a:7d:44:
         ca:06:d2:ee:76:73:2a:ba:96:d7:6a:2e:71:e6:0b:83:48:b9:
         45:28:66:c2:87:34:5c:95:bc:98:06:f7:22:09:56:f9:80:75:
         42:6c:bf:2a:13:b1:a6:96:d1:0b:df:16:b5:a1:73:07:99:bc:
         64:e5:61:45:03:f6:4c:7f:62:14:96:6a:6a:1d:9d:14:3c:15:
         a4:d3:b4:91:a3:fe:54:43:a3:b3:7b:96:57:cf:7a:f5:8f:b7:
         38:a6:8e:af:7a:b8:c7:7d:d8:18:a0:04:b0:95:06:97:c0:9c:
         42:0e:52:c0:0e:87:01:26:6a:49:e7:76:31:05:ff:43:cd:57:
         81:d1:eb:fd:64:5e:79:32:b0:fa:03:25:c9:9d:d9:c8:92:67:
         20:ab:a9:ca:9b:5d:ba:44:39:3d:2e:a3:2a:f6:a3:6a:a9:a6:
         f3:2b:7c:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjZYKRzl70UAVAzLESvopBZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYTIzMWQyOWM0YTIzYjNlOThiMTQ4MTNkYWMwOTgzZTNh
MzQwNTkwHhcNMjUwODI0MDAwMDQ1WhcNMjUwODI1MDAwMDQ1WjAzMTEwLwYDVQQD
Eyg4NmUyNjg1ZmVjOGM0OTZlM2I3OTg0NTYzZWY1NmQwODViODk5MGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvlp7pwSMrD2Y8UbcuaS/iraTqRP
UnJJ4XyWPtVXqjAS7JeGoyMA7tsYaqOzgLS2VllP6RHtY1LmhBPn0QC+LrozHoSP
wtvO8jBTCR37Wyu5gKdjmVjx6sJVp9XhuhF0/NzpGStvx5N0OMksvQvOQKvjuaEI
5Mx5xVmMm9OlQwnZD+t90KfFkFSE1Aqpibjte4tl/t0ExJTkUl+hjYdhc++YAgaa
O0vgZBnkkBmUzIWdzZvDF/w3TI0Zmeid6UqXqaZyVuWUGNw7gm+iYIJfh9IVKRJk
tZolSWqHjDnZ/cLFMD9ZqM4BYMEFI+20TuR+BHhLeG9/bx1LBzfYv6C2rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbiaF/sjEluO3mEVj71bQhbiZClMB8GA1UdIwQY
MBaAFHuiMdKcSiOz6YsUgT2sCYPjo0BZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTZJeDBweEtJN1BwaXhTQlBhd0pnLU9qUUZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82NWIxYWUtN2Q5Zi00ZDcwLTlmOGIt
NTEyNGU5NTE1YjE0LzEvZTZJeDBweEtJN1BwaXhTQlBhd0pnLU9qUUZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS82NWIxYWUtN2Q5Zi00ZDcwLTlmOGItNTEyNGU5NTE1YjE0
LzEvZTZJeDBweEtJN1BwaXhTQlBhd0pnLU9qUUZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeEFfBEg3
KMHu3IpM4mzRn4lbXfNnhxh7Yd0goznbhKwNIkMsG9/kvr+60aQbkJwZYOk+yKB5
5kA5E+/+haHWobw34/mZMD03TfI7bAebm8hHGkJbHx+Dmn1EygbS7nZzKrqW12ou
ceYLg0i5RShmwoc0XJW8mAb3IglW+YB1Qmy/KhOxppbRC98WtaFzB5m8ZOVhRQP2
TH9iFJZqah2dFDwVpNO0kaP+VEOjs3uWV8969Y+3OKaOr3q4x33YGKAEsJUGl8Cc
Qg5SwA6HASZqSed2MQX/Q81XgdHr/WReeTKw+gMlyZ3ZyJJnIKupyptdukQ5PS6j
Kvajaqmm8yt85g==
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:32:21 2025 by rpki-client