Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
File:                     6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft (raw, json)
Hash identifier:          Qod5RUflGlJMRavyLXwO1O6dspIWE5sBaICVYVQkMIA=
Subject key identifier:   00:6F:43:7E:5A:53:D6:F6:E1:7A:FD:46:DB:F7:88:A4:A4:EA:B8:48
Authority key identifier: E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1
Certificate issuer:       /CN=e994e74064158e97904990947510eb9941986ca1
Certificate serial:       0197B632912A3A1C421B4EFD81A2720EA575
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
Manifest number:          0550
Signing time:             Sat 28 Jun 2025 11:00:56 +0000
Manifest this update:     Sat 28 Jun 2025 11:00:56 +0000
Manifest next update:     Sun 29 Jun 2025 11:00:56 +0000
Files and hashes:         1: 6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl (hash: iau8M+s6vc3/4bBqeXQCq8yKABx9RVxx7x3oalpfajg=)
                          2: ADjr28xDnqYwCSe2YSx596u1Q58.roa (hash: ny7Wak3ibQOHmIHDaed11LtkQKFtuzxAsC/NXeIXupI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:91:2a:3a:1c:42:1b:4e:fd:81:a2:72:0e:a5:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e994e74064158e97904990947510eb9941986ca1
        Validity
            Not Before: Jun 28 11:00:56 2025 GMT
            Not After : Jun 29 11:00:56 2025 GMT
        Subject: CN=006f437e5a53d6f6e17afd46dbf788a4a4eab848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:62:1e:84:74:aa:63:20:1f:5c:a7:a7:78:d0:
                    95:15:b8:3e:2a:51:92:73:05:10:92:35:ec:8f:63:
                    0c:53:da:16:ce:13:4a:ed:fa:1b:2e:db:2f:9d:18:
                    f5:5a:e7:ab:24:46:d1:16:3c:97:26:4e:2f:f0:25:
                    18:5d:ea:51:b5:53:44:74:cd:4c:76:bf:57:cb:04:
                    99:1b:c9:1b:7b:32:66:d0:da:7b:9f:10:f4:3d:79:
                    db:e4:74:17:69:0b:56:e3:05:26:c0:f2:3c:9f:dd:
                    c0:05:ea:a5:ba:a0:cc:b9:78:e1:30:1a:91:aa:23:
                    ea:73:25:58:99:1a:0e:12:85:ce:82:df:ca:e8:19:
                    78:5d:d8:9f:4b:f3:be:4d:80:91:c7:f8:62:50:d2:
                    8d:3c:f8:30:b7:81:b3:9d:b1:d1:5a:c5:0c:f2:6d:
                    3b:72:6d:f6:77:e3:02:cd:4d:94:8f:ff:64:e6:cc:
                    bb:6c:3e:7c:b7:a6:fb:99:9d:eb:d1:30:e0:31:22:
                    0e:60:42:38:d2:8f:99:16:df:99:bd:4a:9e:7d:f0:
                    24:6c:cd:df:22:55:91:19:ae:a1:66:a1:76:5f:7b:
                    af:cc:32:21:c3:37:5f:3e:3a:73:63:c5:d7:44:7a:
                    f0:82:7f:26:2f:49:52:72:1f:7a:cf:c7:cd:05:b9:
                    3d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6F:43:7E:5A:53:D6:F6:E1:7A:FD:46:DB:F7:88:A4:A4:EA:B8:48
            X509v3 Authority Key Identifier:
                keyid:E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:d6:49:23:12:b8:e1:d2:79:d4:e7:82:01:60:bd:65:7f:d6:
         c6:cc:e9:6a:82:7e:fc:39:d4:c5:df:9e:ae:06:f7:5d:83:b6:
         50:49:b8:ea:73:64:5e:af:6d:b8:4a:75:42:67:3a:7c:2a:3d:
         b8:82:bb:3a:a5:c7:34:24:68:b1:85:cc:31:e0:c4:34:d9:02:
         a2:a5:36:4a:c6:1d:4a:45:29:e5:92:4b:07:48:f0:8f:4b:d6:
         99:60:55:0f:4f:4e:1a:2f:72:c1:f3:98:d1:19:90:f0:76:46:
         e5:0d:cf:0e:ff:ee:13:23:ef:e9:14:7a:5b:60:e7:1f:7c:8a:
         52:9d:3a:70:90:a8:09:b1:89:0a:af:9c:19:b4:85:a6:24:03:
         d9:11:b6:c4:94:2a:c7:87:02:6e:a0:c4:9b:b2:4f:d1:b8:4b:
         e8:61:45:bc:22:2d:19:d8:2a:d8:be:30:07:6d:52:60:42:6e:
         0d:6a:99:24:6e:cc:9b:06:a2:c6:cb:cf:d8:02:c0:27:7c:58:
         e8:8a:f4:f6:54:08:08:7f:cf:9c:79:a2:c4:da:06:cb:52:c3:
         94:7b:53:f9:96:7b:74:d0:8a:f6:8b:04:64:01:ed:eb:a7:c0:
         5b:76:63:38:ac:3d:41:f8:42:11:4f:34:62:e0:59:1a:bf:a6:
         9b:2e:7d:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MpEqOhxCG079gaJyDqV1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5OTRlNzQwNjQxNThlOTc5MDQ5OTA5NDc1MTBlYjk5NDE5
ODZjYTEwHhcNMjUwNjI4MTEwMDU2WhcNMjUwNjI5MTEwMDU2WjAzMTEwLwYDVQQD
EygwMDZmNDM3ZTVhNTNkNmY2ZTE3YWZkNDZkYmY3ODhhNGE0ZWFiODQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGIehHSqYyAfXKeneNCVFbg+KlGS
cwUQkjXsj2MMU9oWzhNK7fobLtsvnRj1WuerJEbRFjyXJk4v8CUYXepRtVNEdM1M
dr9XywSZG8kbezJm0Np7nxD0PXnb5HQXaQtW4wUmwPI8n93ABeqluqDMuXjhMBqR
qiPqcyVYmRoOEoXOgt/K6Bl4XdifS/O+TYCRx/hiUNKNPPgwt4GznbHRWsUM8m07
cm32d+MCzU2Uj/9k5sy7bD58t6b7mZ3r0TDgMSIOYEI40o+ZFt+ZvUqeffAkbM3f
IlWRGa6hZqF2X3uvzDIhwzdfPjpzY8XXRHrwgn8mL0lSch96z8fNBbk9kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABvQ35aU9b24Xr9Rtv3iKSk6rhIMB8GA1UdIwQY
MBaAFOmU50BkFY6XkEmQlHUQ65lBmGyhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlpUblFHUVZqcGVRU1pDVWRSRHJtVUdZYktFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xYzEyZTUtYzgwZC00NzMzLWJjNGEt
MzYyMGNlZmNjNzI0LzEvNlpUblFHUVZqcGVRU1pDVWRSRHJtVUdZYktFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8xYzEyZTUtYzgwZC00NzMzLWJjNGEtMzYyMGNlZmNjNzI0
LzEvNlpUblFHUVZqcGVRU1pDVWRSRHJtVUdZYktFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNZJIxK4
4dJ51OeCAWC9ZX/WxszpaoJ+/DnUxd+ergb3XYO2UEm46nNkXq9tuEp1Qmc6fCo9
uIK7OqXHNCRosYXMMeDENNkCoqU2SsYdSkUp5ZJLB0jwj0vWmWBVD09OGi9ywfOY
0RmQ8HZG5Q3PDv/uEyPv6RR6W2DnH3yKUp06cJCoCbGJCq+cGbSFpiQD2RG2xJQq
x4cCbqDEm7JP0bhL6GFFvCItGdgq2L4wB21SYEJuDWqZJG7MmwaixsvP2ALAJ3xY
6Ir09lQICH/PnHmixNoGy1LDlHtT+ZZ7dNCK9osEZAHt66fAW3ZjOKw9QfhCEU80
YuBZGr+mmy597Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:07:37 2025 by rpki-client