Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
File:                     RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft (raw, json)
Hash identifier:          JGktlIFhiZXO97OsNv76G2LtnH2UbLbvw0Bai74hg1s=
Subject key identifier:   65:A1:BD:C6:16:AF:B5:78:33:F7:05:02:3D:99:D6:56:1A:EB:4B:3A
Authority key identifier: 46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73
Certificate issuer:       /CN=463260e45ee1521c6aab83f21d5b69e810c1e073
Certificate serial:       0197B6A1E14EB0E40B9E6FDC10BF466FCA17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
Manifest number:          15B0
Signing time:             Sat 28 Jun 2025 13:02:31 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:31 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:31 +0000
Files and hashes:         1: RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl (hash: 0av0WpjEHNX3MjhHYM6fCn9wU/dQhG0MX8Fe8V9pY9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:e1:4e:b0:e4:0b:9e:6f:dc:10:bf:46:6f:ca:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463260e45ee1521c6aab83f21d5b69e810c1e073
        Validity
            Not Before: Jun 28 13:02:31 2025 GMT
            Not After : Jun 29 13:02:31 2025 GMT
        Subject: CN=65a1bdc616afb57833f705023d99d6561aeb4b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fb:52:cd:5d:73:5a:a2:38:f7:e9:87:c2:d6:
                    7f:9a:6e:65:5a:a6:70:74:b5:25:93:f7:9f:06:87:
                    98:e5:f5:fc:55:f7:75:dd:e5:70:7d:c1:35:8f:f4:
                    a9:17:fb:cf:80:17:f0:86:06:0d:90:29:3a:61:08:
                    d7:85:39:1d:8a:24:db:75:dc:c5:82:f1:e6:d1:a8:
                    e6:bf:98:c1:df:d1:7d:e4:fa:c5:f2:ec:ff:e9:80:
                    70:cb:ca:54:b0:a6:ad:72:99:a4:b2:46:7b:64:ad:
                    cf:7d:2b:64:e5:00:0d:35:f4:32:8f:bc:1d:a1:5f:
                    3b:27:4c:27:65:52:a4:0f:67:f8:8e:af:cc:af:f2:
                    2d:77:cc:aa:83:78:d8:20:47:8d:07:5b:f4:c9:83:
                    e7:83:77:91:33:18:21:c7:62:eb:9d:8c:25:57:7b:
                    92:ac:f5:48:25:50:fc:34:4c:da:c0:0d:2c:46:f4:
                    38:65:08:37:48:c3:a7:f1:13:ee:25:4b:d9:8b:22:
                    e0:42:72:48:64:08:0c:f3:fe:b2:82:7b:52:ef:5d:
                    9f:83:f7:ad:bb:bf:7b:75:8e:33:ff:22:30:47:7d:
                    89:1e:e1:74:31:2e:01:a0:81:49:24:74:3c:2e:2b:
                    eb:93:d2:1a:58:dc:41:82:5f:97:1a:ef:f1:fa:80:
                    1a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A1:BD:C6:16:AF:B5:78:33:F7:05:02:3D:99:D6:56:1A:EB:4B:3A
            X509v3 Authority Key Identifier:
                keyid:46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:1a:b4:e6:e9:f5:87:26:ee:bb:4d:b6:b7:cc:e4:30:1b:d9:
         b8:df:ff:ba:09:56:22:08:55:f4:bb:18:a6:7d:21:51:22:30:
         89:ad:38:29:c7:65:d2:d7:08:c9:15:5b:0c:da:29:90:75:4b:
         61:6e:69:43:3b:89:6d:76:a7:f2:61:34:b9:7c:40:d1:6c:39:
         f6:2d:e7:96:dc:e7:87:cb:f4:70:da:88:14:1a:7e:67:cf:5e:
         c9:1d:97:8a:3d:f3:77:38:04:ce:08:f7:58:1d:b1:e5:71:3e:
         75:01:98:22:22:ef:50:c7:c0:03:af:c7:a5:da:ee:55:05:69:
         e8:88:7a:b1:4d:de:ac:dd:77:8e:41:d3:50:8f:4b:49:49:a4:
         2a:6e:d5:ea:09:7d:bd:f9:c8:11:1d:a8:cb:a1:bc:bc:98:a8:
         f1:3b:3e:bc:0a:4d:d7:e8:f3:a5:00:ae:bc:20:ba:50:8a:ff:
         25:9a:98:1d:cd:52:10:84:58:07:84:30:48:36:2c:5d:12:f6:
         ac:a0:07:4b:f2:61:73:5f:8c:09:a8:6e:34:1c:5a:93:cc:c0:
         64:be:b3:56:87:f3:51:ed:a2:22:66:d8:c1:af:e4:d1:c0:6f:
         10:b9:af:2d:34:d3:2f:8b:46:37:07:98:09:67:b5:23:a9:23:
         25:f6:a5:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oeFOsOQLnm/cEL9Gb8oXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MzI2MGU0NWVlMTUyMWM2YWFiODNmMjFkNWI2OWU4MTBj
MWUwNzMwHhcNMjUwNjI4MTMwMjMxWhcNMjUwNjI5MTMwMjMxWjAzMTEwLwYDVQQD
Eyg2NWExYmRjNjE2YWZiNTc4MzNmNzA1MDIzZDk5ZDY1NjFhZWI0YjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPtSzV1zWqI49+mHwtZ/mm5lWqZw
dLUlk/efBoeY5fX8Vfd13eVwfcE1j/SpF/vPgBfwhgYNkCk6YQjXhTkdiiTbddzF
gvHm0ajmv5jB39F95PrF8uz/6YBwy8pUsKatcpmkskZ7ZK3PfStk5QANNfQyj7wd
oV87J0wnZVKkD2f4jq/Mr/Itd8yqg3jYIEeNB1v0yYPng3eRMxghx2LrnYwlV3uS
rPVIJVD8NEzawA0sRvQ4ZQg3SMOn8RPuJUvZiyLgQnJIZAgM8/6ygntS712fg/et
u797dY4z/yIwR32JHuF0MS4BoIFJJHQ8Livrk9IaWNxBgl+XGu/x+oAabQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWhvcYWr7V4M/cFAj2Z1lYa60s6MB8GA1UdIwQY
MBaAFEYyYORe4VIcaquD8h1baegQweBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmpKZzVGN2hVaHhxcTRQeUhWdHA2QkRCNEhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNjM1NDYtNjg5Mi00ZjRkLWI4MDAt
OGZkNDVjZDUxMzhhLzEvUmpKZzVGN2hVaHhxcTRQeUhWdHA2QkRCNEhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mNjM1NDYtNjg5Mi00ZjRkLWI4MDAtOGZkNDVjZDUxMzhh
LzEvUmpKZzVGN2hVaHhxcTRQeUhWdHA2QkRCNEhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnBq05un1
hybuu022t8zkMBvZuN//uglWIghV9LsYpn0hUSIwia04Kcdl0tcIyRVbDNopkHVL
YW5pQzuJbXan8mE0uXxA0Ww59i3nltznh8v0cNqIFBp+Z89eyR2Xij3zdzgEzgj3
WB2x5XE+dQGYIiLvUMfAA6/HpdruVQVp6Ih6sU3erN13jkHTUI9LSUmkKm7V6gl9
vfnIER2oy6G8vJio8Ts+vApN1+jzpQCuvCC6UIr/JZqYHc1SEIRYB4QwSDYsXRL2
rKAHS/Jhc1+MCahuNBxak8zAZL6zVofzUe2iImbYwa/k0cBvELmvLTTTL4tGNweY
CWe1I6kjJfal0A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:36 2025 by rpki-client