Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
File:                     6x5t-zkpXJOgRyycE1WUAYqPy1w.mft (raw, json)
Hash identifier:          mY+h5IMmC+c8b9voc+G5rUuhZXFD9hW5yGTJlTNwITY=
Subject key identifier:   ED:E3:1C:A7:63:1D:0A:AB:BC:BB:5B:07:E0:AA:FB:9C:4C:CE:10:69
Authority key identifier: EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C
Certificate issuer:       /CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
Certificate serial:       0196A61CDCA431951EDA416C780063840103
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
Manifest number:          041A
Signing time:             Tue 06 May 2025 15:00:31 +0000
Manifest this update:     Tue 06 May 2025 15:00:31 +0000
Manifest next update:     Wed 07 May 2025 15:00:31 +0000
Files and hashes:         1: 6x5t-zkpXJOgRyycE1WUAYqPy1w.crl (hash: N4ePwKB5qdQAV9cJqNs/9P9v9yAi3tKBHx5jLbMUWiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:1c:dc:a4:31:95:1e:da:41:6c:78:00:63:84:01:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
        Validity
            Not Before: May  6 15:00:31 2025 GMT
            Not After : May  7 15:00:31 2025 GMT
        Subject: CN=ede31ca7631d0aabbcbb5b07e0aafb9c4cce1069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0f:e1:e6:b5:fb:e9:1b:9c:22:a2:45:a8:06:
                    39:89:67:53:4e:3a:e4:6f:c2:78:52:df:58:ad:58:
                    6e:9b:ab:e0:1b:da:3b:db:9b:69:1a:c5:4a:3e:bf:
                    e7:f1:f6:32:c9:0d:55:79:cb:c0:43:ee:38:d5:21:
                    13:c9:26:cf:d6:a3:4a:68:a8:88:a5:ab:1b:f4:86:
                    4f:94:39:77:ca:67:35:12:72:de:9e:33:3a:45:53:
                    12:c0:33:bc:e3:ae:b5:ba:9a:80:c0:7e:cd:56:d1:
                    68:41:f9:04:ca:84:d6:33:bc:5d:30:d9:34:38:52:
                    49:c3:ce:27:cf:b8:f2:2f:7d:a4:08:90:d4:12:ec:
                    1d:1e:77:38:66:06:db:96:89:5b:49:a7:36:e7:27:
                    69:96:a4:ae:6f:2e:e4:54:0f:bc:e3:fe:e4:18:5d:
                    0e:de:f2:0d:50:a7:7a:f0:6c:45:81:32:06:64:83:
                    d6:fb:24:78:40:f7:28:f7:85:6a:71:d1:2b:3a:30:
                    e8:21:90:da:bb:92:c0:03:23:61:a3:d3:bb:24:3e:
                    18:cb:d3:1f:da:93:e7:ee:ca:3c:31:79:b5:f8:6b:
                    b6:72:22:0a:6a:cb:c8:9a:bf:ae:4d:0f:9e:7a:35:
                    49:78:59:32:d1:ab:b2:e5:9d:27:f7:3a:ce:65:28:
                    ba:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E3:1C:A7:63:1D:0A:AB:BC:BB:5B:07:E0:AA:FB:9C:4C:CE:10:69
            X509v3 Authority Key Identifier:
                keyid:EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:16:7d:0a:7f:9c:0f:42:ca:1c:40:ac:0e:37:17:a8:18:6e:
         26:67:6e:1a:b7:69:f8:b8:d7:7d:9e:7e:31:8d:fe:77:4a:17:
         f1:7e:eb:27:9f:6e:46:97:f5:63:c0:e4:5e:45:8d:00:b5:fb:
         3b:46:c5:9a:c3:16:ee:ff:e3:8d:38:50:e0:03:ad:24:ac:5a:
         64:be:a7:86:92:d1:86:5a:1c:45:dd:65:89:e5:b9:a4:89:2a:
         da:cf:32:d4:d9:ef:04:e9:8a:3e:ac:93:20:df:63:2c:ca:8e:
         17:5d:36:79:6e:7f:4b:6c:9e:39:9c:97:79:28:97:42:46:ea:
         76:2e:1f:08:20:62:54:15:6f:02:4d:81:14:68:2f:b0:ed:99:
         b6:f0:9b:77:ee:d1:05:fd:04:65:49:ec:1a:99:71:6d:13:30:
         fb:80:63:a9:70:c8:70:d6:a5:fe:3c:d7:4f:de:ce:1b:0c:58:
         46:dd:f4:3c:0d:ba:17:57:fd:94:7b:5c:bb:f3:63:21:ff:32:
         50:08:31:30:1d:fe:91:f3:c3:18:1f:54:ac:b7:e7:bd:1e:ab:
         5f:78:41:b8:81:5f:08:26:80:9e:98:5b:dc:f8:27:cb:63:95:
         64:4b:93:80:ac:a4:6f:4d:41:dc:cf:d0:b4:5a:f4:76:e6:76:
         9b:0f:ba:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZamHNykMZUe2kFseABjhAEDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMWU2ZGZiMzkyOTVjOTNhMDQ3MmM5YzEzNTU5NDAxOGE4
ZmNiNWMwHhcNMjUwNTA2MTUwMDMxWhcNMjUwNTA3MTUwMDMxWjAzMTEwLwYDVQQD
EyhlZGUzMWNhNzYzMWQwYWFiYmNiYjViMDdlMGFhZmI5YzRjY2UxMDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Q/h5rX76RucIqJFqAY5iWdTTjrk
b8J4Ut9YrVhum6vgG9o725tpGsVKPr/n8fYyyQ1VecvAQ+441SETySbP1qNKaKiI
pasb9IZPlDl3ymc1EnLenjM6RVMSwDO84661upqAwH7NVtFoQfkEyoTWM7xdMNk0
OFJJw84nz7jyL32kCJDUEuwdHnc4ZgbblolbSac25ydplqSuby7kVA+84/7kGF0O
3vINUKd68GxFgTIGZIPW+yR4QPco94VqcdErOjDoIZDau5LAAyNho9O7JD4Yy9Mf
2pPn7so8MXm1+Gu2ciIKasvImr+uTQ+eejVJeFky0auy5Z0n9zrOZSi6SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3jHKdjHQqrvLtbB+Cq+5xMzhBpMB8GA1UdIwQY
MBaAFOsebfs5KVyToEcsnBNVlAGKj8tcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNng1dC16a3BYSk9nUnl5Y0UxV1VBWXFQeTF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yZTEwYjItMjU5Ny00ZWI3LTk2MGEt
ZjA4NWFmOTU3YzhkLzEvNng1dC16a3BYSk9nUnl5Y0UxV1VBWXFQeTF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yZTEwYjItMjU5Ny00ZWI3LTk2MGEtZjA4NWFmOTU3Yzhk
LzEvNng1dC16a3BYSk9nUnl5Y0UxV1VBWXFQeTF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKxZ9Cn+c
D0LKHECsDjcXqBhuJmduGrdp+LjXfZ5+MY3+d0oX8X7rJ59uRpf1Y8DkXkWNALX7
O0bFmsMW7v/jjThQ4AOtJKxaZL6nhpLRhlocRd1lieW5pIkq2s8y1NnvBOmKPqyT
IN9jLMqOF102eW5/S2yeOZyXeSiXQkbqdi4fCCBiVBVvAk2BFGgvsO2ZtvCbd+7R
Bf0EZUnsGplxbRMw+4BjqXDIcNal/jzXT97OGwxYRt30PA26F1f9lHtcu/NjIf8y
UAgxMB3+kfPDGB9UrLfnvR6rX3hBuIFfCCaAnphb3Pgny2OVZEuTgKykb01B3M/Q
tFr0duZ2mw+6aQ==
-----END CERTIFICATE-----
Generated at Tue May 6 18:07:20 2025 by rpki-client