Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
File:                     9u6hCvrPOpwm6hsexIjpVeTfoGo.mft (raw, json)
Hash identifier:          5FwNGOcgJJ4eLYDo+fNs2rEWjvdcfc9nQvvTYz6fg8Q=
Subject key identifier:   98:B0:E1:F9:8B:C8:A6:EC:CE:3A:55:9A:F8:37:5D:88:E9:1B:40:66
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Certificate issuer:       /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial:       0197B70F0DDE6B7FB7707EC557D6253C4FC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
Manifest number:          15C1
Signing time:             Sat 28 Jun 2025 15:01:46 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:46 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:46 +0000
Files and hashes:         1: 0dNTZEq5DptnOPF9GxThQS9Incc.roa (hash: K3IDAOMZPtmDCUQG3o12zOPhER5UUHk6V0HVvvgUY+o=)
                          2: 1-GxQlBlFGJHcAazyAB7qxk49nFI.roa (hash: yCRlBJcQvTSDvuFtmYL9PAU1XEpTTz+YcM3/wQq8UL8=)
                          3: 4hsUqbd5LO4D6fnhO5qnh7yhqiM.roa (hash: F6zXQe351qelx+n33SXMqdZeB26na5v5s049a/YTZAk=)
                          4: 50wlov8H9aGngNudVMECszFS424.roa (hash: dLbggdfmrZy1eiBfCQXwFBEHCRJg6l6VnjvskjOec80=)
                          5: 76NAlm9TjFUCcmC50dxOYbJ3ibM.roa (hash: dyjeL6g6+zSZa2KMeYm0hKmHzgduNDSoQiug/KbB7TM=)
                          6: 9u6hCvrPOpwm6hsexIjpVeTfoGo.crl (hash: ov9OFdt2o9iObUHNPv2b+lxjDL7IdGC0fINGP+s+Ogc=)
                          7: ah_GqTDVEWe_m_2XtA3CSK4WCBU.roa (hash: 4djoGuBcLzuWoLbXW+w8ctuVZlV6u7Q5gx4nhG+aFUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:0d:de:6b:7f:b7:70:7e:c5:57:d6:25:3c:4f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
        Validity
            Not Before: Jun 28 15:01:46 2025 GMT
            Not After : Jun 29 15:01:46 2025 GMT
        Subject: CN=98b0e1f98bc8a6ecce3a559af8375d88e91b4066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fc:e5:f9:ba:5f:ce:3a:f6:b5:c1:17:f5:1f:
                    4c:ef:29:78:ff:0e:28:a6:ee:97:7b:be:29:c7:61:
                    69:19:5b:76:59:39:16:2a:e0:57:67:3a:0c:e7:e3:
                    a5:ab:2d:92:bf:65:31:7e:4a:5d:20:a1:0b:98:89:
                    ff:79:65:4d:d8:a9:87:fd:fd:42:d0:e4:02:96:b6:
                    62:fd:1d:a7:36:7a:4b:50:99:96:8e:b6:09:3e:6d:
                    b0:f9:94:c6:24:12:1d:6d:2d:73:4f:34:41:2c:f1:
                    ef:6f:c9:ce:05:7a:5d:e1:89:32:ef:14:7c:9d:a1:
                    8c:1e:cb:29:e5:08:d9:66:c2:71:fc:90:c4:7b:4c:
                    c2:ba:af:35:23:da:2f:22:04:1d:81:c8:20:82:0b:
                    59:10:2d:10:a3:31:fe:3c:84:95:00:74:01:84:eb:
                    51:bd:4c:51:72:ab:46:61:75:33:fc:77:56:79:ac:
                    58:8e:e9:41:a2:f4:bb:ca:f9:6f:85:ac:65:67:c9:
                    80:91:ae:9e:68:80:ff:9d:33:4e:b9:ae:dc:98:f9:
                    0d:ee:1c:68:11:73:93:82:ed:1c:d6:fb:1e:32:e5:
                    3a:de:f4:72:7c:09:a0:2c:6d:ba:c7:93:fb:6e:97:
                    97:20:01:aa:c5:96:d5:d9:e6:36:d6:dd:c2:30:f3:
                    ae:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B0:E1:F9:8B:C8:A6:EC:CE:3A:55:9A:F8:37:5D:88:E9:1B:40:66
            X509v3 Authority Key Identifier:
                keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:48:8c:db:58:95:38:86:84:be:c3:a6:d5:a0:05:87:2e:cc:
         27:50:f8:98:04:97:8c:84:d3:eb:f0:a7:17:6b:a9:06:c2:27:
         bf:f1:0f:a7:fc:10:7d:4e:59:c0:b6:da:90:c6:3b:5a:96:38:
         d9:bd:be:13:07:5b:6a:b1:a7:e6:d7:46:75:14:a3:bc:f9:c1:
         94:7e:63:3a:7d:e8:e1:fa:01:8a:58:38:24:e8:cd:c9:fb:d3:
         ea:c3:1e:31:84:09:e8:9d:70:b1:3e:68:23:c3:76:d0:f9:ad:
         56:69:61:c8:af:2b:8c:ec:35:a7:ff:e8:53:57:5c:96:a8:9e:
         41:7d:08:56:3b:e3:30:80:27:21:be:ce:93:96:63:57:46:2b:
         cf:63:48:b7:17:bf:03:95:16:31:d3:56:34:8b:d6:d3:61:b2:
         20:68:8f:88:e9:32:b9:4e:3a:40:bf:25:b8:4e:c8:57:49:38:
         0c:ac:af:6d:c6:61:1c:1b:27:51:6e:5b:d0:33:f5:7b:58:81:
         1e:44:fd:62:fc:27:15:d9:6d:d4:e5:24:79:88:a0:32:c8:b2:
         01:77:fa:c8:8d:b8:bf:e8:b9:21:dc:9d:b3:31:cd:ac:35:4c:
         a3:13:c7:d7:ba:84:0c:88:cc:23:5b:33:af:8a:2b:b3:85:25:
         c1:1c:50:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dw3ea3+3cH7FV9YlPE/BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZWVhMTBhZmFjZjNhOWMyNmVhMWIxZWM0ODhlOTU1ZTRk
ZmEwNmEwHhcNMjUwNjI4MTUwMTQ2WhcNMjUwNjI5MTUwMTQ2WjAzMTEwLwYDVQQD
Eyg5OGIwZTFmOThiYzhhNmVjY2UzYTU1OWFmODM3NWQ4OGU5MWI0MDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvzl+bpfzjr2tcEX9R9M7yl4/w4o
pu6Xe74px2FpGVt2WTkWKuBXZzoM5+Olqy2Sv2UxfkpdIKELmIn/eWVN2KmH/f1C
0OQClrZi/R2nNnpLUJmWjrYJPm2w+ZTGJBIdbS1zTzRBLPHvb8nOBXpd4Yky7xR8
naGMHssp5QjZZsJx/JDEe0zCuq81I9ovIgQdgcggggtZEC0QozH+PISVAHQBhOtR
vUxRcqtGYXUz/HdWeaxYjulBovS7yvlvhaxlZ8mAka6eaID/nTNOua7cmPkN7hxo
EXOTgu0c1vseMuU63vRyfAmgLG26x5P7bpeXIAGqxZbV2eY21t3CMPOurQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJiw4fmLyKbszjpVmvg3XYjpG0BmMB8GA1UdIwQY
MBaAFPbuoQr6zzqcJuobHsSI6VXk36BqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ZjU3NDYtYjQwNi00YzA1LTk3NDEt
NTRkOGY2YjA2YjgzLzEvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS82ZjU3NDYtYjQwNi00YzA1LTk3NDEtNTRkOGY2YjA2Yjgz
LzEvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0iM21iV
OIaEvsOm1aAFhy7MJ1D4mASXjITT6/CnF2upBsInv/EPp/wQfU5ZwLbakMY7WpY4
2b2+EwdbarGn5tdGdRSjvPnBlH5jOn3o4foBilg4JOjNyfvT6sMeMYQJ6J1wsT5o
I8N20PmtVmlhyK8rjOw1p//oU1dclqieQX0IVjvjMIAnIb7Ok5ZjV0Yrz2NItxe/
A5UWMdNWNIvW02GyIGiPiOkyuU46QL8luE7IV0k4DKyvbcZhHBsnUW5b0DP1e1iB
HkT9YvwnFdlt1OUkeYigMsiyAXf6yI24v+i5IdydszHNrDVMoxPH17qEDIjMI1sz
r4ors4UlwRxQgA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:32 2025 by rpki-client