Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c176b8-7929-4542-bb32-133f903c64f9/1/R6GA6fZdeI0WzuafVNYgZDvNYOc.mft
File:                     R6GA6fZdeI0WzuafVNYgZDvNYOc.mft (raw, json)
Hash identifier:          kyZSJ69XGsNwULKES+Nfxi4K28tLl8mSF42s04aSxEA=
Subject key identifier:   69:A6:41:9F:97:46:89:3E:1F:DD:90:AC:70:07:FA:0F:E7:17:DE:A1
Authority key identifier: 47:A1:80:E9:F6:5D:78:8D:16:CE:E6:9F:54:D6:20:64:3B:CD:60:E7
Certificate issuer:       /CN=47a180e9f65d788d16cee69f54d620643bcd60e7
Certificate serial:       0197B70E879320298D5A68A43A4AE642A40F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R6GA6fZdeI0WzuafVNYgZDvNYOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/c176b8-7929-4542-bb32-133f903c64f9/1/R6GA6fZdeI0WzuafVNYgZDvNYOc.mft
Manifest number:          0A5A
Signing time:             Sat 28 Jun 2025 15:01:12 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:12 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:12 +0000
Files and hashes:         1: R6GA6fZdeI0WzuafVNYgZDvNYOc.crl (hash: VTxyVXJrLWuXHBjKkWlR2nkOB7UtMp9YkzhsFPvn2zc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/c176b8-7929-4542-bb32-133f903c64f9/1/R6GA6fZdeI0WzuafVNYgZDvNYOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/c176b8-7929-4542-bb32-133f903c64f9/1/R6GA6fZdeI0WzuafVNYgZDvNYOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R6GA6fZdeI0WzuafVNYgZDvNYOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:87:93:20:29:8d:5a:68:a4:3a:4a:e6:42:a4:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47a180e9f65d788d16cee69f54d620643bcd60e7
        Validity
            Not Before: Jun 28 15:01:12 2025 GMT
            Not After : Jun 29 15:01:12 2025 GMT
        Subject: CN=69a6419f9746893e1fdd90ac7007fa0fe717dea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:eb:90:76:63:89:20:c1:b4:63:e6:e6:b5:b0:
                    18:90:b5:04:10:9c:69:03:c3:3e:fb:4c:0e:2d:af:
                    3b:0f:04:c5:0c:a6:0a:3b:0d:4d:b9:d0:1b:15:90:
                    25:ef:c9:50:00:dd:ac:42:23:69:de:a9:cd:0d:6d:
                    ea:73:c8:46:df:e6:09:cd:f1:6c:00:5d:2d:1b:62:
                    fb:a5:1b:5e:8a:0e:32:d0:35:8b:c2:b5:07:b0:4f:
                    8e:bd:b9:fb:03:c9:95:39:07:3e:b4:4d:57:f5:87:
                    ab:0c:cd:1d:a4:67:48:55:1b:4f:07:6b:57:e2:bd:
                    7e:5e:9f:c9:7e:90:35:be:de:47:89:88:7b:fb:5e:
                    33:84:40:f9:e7:f2:84:d8:4b:25:dc:75:b7:51:7f:
                    be:e8:83:3c:be:7a:5d:f3:b6:9a:7c:04:97:8c:6d:
                    9d:56:47:2c:cc:58:e6:f0:1e:d5:70:06:ef:82:85:
                    95:eb:17:9c:db:b9:9d:fa:0e:a5:c2:d6:12:70:97:
                    cf:c1:66:62:7c:c8:c1:72:b3:5c:90:53:29:80:b5:
                    79:69:20:e8:3b:93:a1:79:38:1e:49:e8:fb:70:e2:
                    a6:b0:f1:fe:bc:7f:32:75:58:e0:ba:c5:47:a5:49:
                    c0:2c:af:64:fe:e0:55:af:b6:00:1d:03:c9:64:e1:
                    70:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A6:41:9F:97:46:89:3E:1F:DD:90:AC:70:07:FA:0F:E7:17:DE:A1
            X509v3 Authority Key Identifier:
                keyid:47:A1:80:E9:F6:5D:78:8D:16:CE:E6:9F:54:D6:20:64:3B:CD:60:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6GA6fZdeI0WzuafVNYgZDvNYOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c176b8-7929-4542-bb32-133f903c64f9/1/R6GA6fZdeI0WzuafVNYgZDvNYOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c176b8-7929-4542-bb32-133f903c64f9/1/R6GA6fZdeI0WzuafVNYgZDvNYOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:b3:5d:e1:e7:a8:d2:df:98:d5:4a:41:04:a1:eb:4c:38:ec:
         df:ee:e8:fd:eb:aa:85:9f:0f:dd:a0:ed:c2:e8:e7:d4:ad:63:
         74:ec:d5:a5:11:f3:93:94:23:7c:ff:c5:57:d1:d6:22:22:fb:
         3c:58:fc:9c:85:a5:b9:94:d8:f2:fa:1c:ff:30:d3:99:49:ab:
         29:07:15:24:c2:1b:07:4d:e7:79:36:c7:48:9c:bb:6c:99:40:
         d7:06:32:83:7e:05:7c:0f:93:ee:1a:6e:53:22:5f:f5:c0:ba:
         19:cc:15:38:b9:25:71:d8:32:cb:a0:a2:2c:fe:8f:f3:b1:62:
         5a:41:77:43:6e:25:22:aa:25:37:2a:1a:aa:78:f1:3f:65:0f:
         ae:27:f9:35:43:81:d2:7b:8c:98:d3:07:a7:3b:9e:a8:36:23:
         f4:72:e5:ee:50:8a:47:e9:2a:1e:78:55:9a:a0:f0:e6:16:3f:
         5b:1b:d4:e3:e2:f6:b1:26:bb:2e:a4:72:27:69:f2:7d:10:45:
         99:12:1c:71:4b:54:ec:33:6a:db:97:65:b0:41:25:96:bb:91:
         44:38:8b:fd:f6:f2:c9:ce:13:da:86:c3:6d:eb:6b:78:ab:3d:
         44:9c:94:b1:10:1d:59:68:e9:52:80:d0:71:fe:1f:7c:8b:13:
         1e:69:b5:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DoeTICmNWmikOkrmQqQPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YTE4MGU5ZjY1ZDc4OGQxNmNlZTY5ZjU0ZDYyMDY0M2Jj
ZDYwZTcwHhcNMjUwNjI4MTUwMTEyWhcNMjUwNjI5MTUwMTEyWjAzMTEwLwYDVQQD
Eyg2OWE2NDE5Zjk3NDY4OTNlMWZkZDkwYWM3MDA3ZmEwZmU3MTdkZWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOuQdmOJIMG0Y+bmtbAYkLUEEJxp
A8M++0wOLa87DwTFDKYKOw1NudAbFZAl78lQAN2sQiNp3qnNDW3qc8hG3+YJzfFs
AF0tG2L7pRteig4y0DWLwrUHsE+Ovbn7A8mVOQc+tE1X9YerDM0dpGdIVRtPB2tX
4r1+Xp/JfpA1vt5HiYh7+14zhED55/KE2Esl3HW3UX++6IM8vnpd87aafASXjG2d
VkcszFjm8B7VcAbvgoWV6xec27md+g6lwtYScJfPwWZifMjBcrNckFMpgLV5aSDo
O5OheTgeSej7cOKmsPH+vH8ydVjgusVHpUnALK9k/uBVr7YAHQPJZOFwwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmmQZ+XRok+H92QrHAH+g/nF96hMB8GA1UdIwQY
MBaAFEehgOn2XXiNFs7mn1TWIGQ7zWDnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjZHQTZmWmRlSTBXenVhZlZOWWdaRHZOWU9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jMTc2YjgtNzkyOS00NTQyLWJiMzIt
MTMzZjkwM2M2NGY5LzEvUjZHQTZmWmRlSTBXenVhZlZOWWdaRHZOWU9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9jMTc2YjgtNzkyOS00NTQyLWJiMzItMTMzZjkwM2M2NGY5
LzEvUjZHQTZmWmRlSTBXenVhZlZOWWdaRHZOWU9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLNd4eeo
0t+Y1UpBBKHrTDjs3+7o/euqhZ8P3aDtwujn1K1jdOzVpRHzk5QjfP/FV9HWIiL7
PFj8nIWluZTY8voc/zDTmUmrKQcVJMIbB03neTbHSJy7bJlA1wYyg34FfA+T7hpu
UyJf9cC6GcwVOLklcdgyy6CiLP6P87FiWkF3Q24lIqolNyoaqnjxP2UPrif5NUOB
0nuMmNMHpzueqDYj9HLl7lCKR+kqHnhVmqDw5hY/WxvU4+L2sSa7LqRyJ2nyfRBF
mRIccUtU7DNq25dlsEEllruRRDiL/fbyyc4T2obDbetreKs9RJyUsRAdWWjpUoDQ
cf4ffIsTHmm1gg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:56 2025 by rpki-client