Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft
File:                     6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft (raw, json)
Hash identifier:          92YuFD0bwNZj96Wlpj4nuh5OTCrGyK8UXMUC6/kMKCE=
Subject key identifier:   C5:FF:E8:31:30:2B:78:06:84:91:7D:F2:0D:83:6D:42:92:D0:06:B4
Authority key identifier: E8:69:7E:EB:84:67:3D:81:C3:B7:C0:71:66:D9:6C:AC:16:45:F8:33
Certificate issuer:       /CN=e8697eeb84673d81c3b7c07166d96cac1645f833
Certificate serial:       019655DCD6BF49C5F5846E787371938BB627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Gl-64RnPYHDt8BxZtlsrBZF-DM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft
Manifest number:          24
Signing time:             Mon 21 Apr 2025 01:00:58 +0000
Manifest this update:     Mon 21 Apr 2025 01:00:58 +0000
Manifest next update:     Tue 22 Apr 2025 01:00:58 +0000
Files and hashes:         1: 6Gl-64RnPYHDt8BxZtlsrBZF-DM.crl (hash: YyxCkSB7mtd9uiGlEl4cn1DvDSxFvUSfdHorSytTH2A=)
                          2: gPEIYB37Zc_OzakKWk3m7XL2shI.roa (hash: ogeQ+ihI5RkgX54TXQ3mk3J6Yi4w+GDOualWoIRTMes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Gl-64RnPYHDt8BxZtlsrBZF-DM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:dc:d6:bf:49:c5:f5:84:6e:78:73:71:93:8b:b6:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8697eeb84673d81c3b7c07166d96cac1645f833
        Validity
            Not Before: Apr 21 01:00:58 2025 GMT
            Not After : Apr 22 01:00:58 2025 GMT
        Subject: CN=c5ffe831302b780684917df20d836d4292d006b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:23:7b:04:0f:f4:36:82:34:95:4d:51:46:
                    e5:c2:3e:71:7b:81:fb:eb:6f:d6:5e:69:6d:0d:0a:
                    3c:18:35:02:41:99:9c:ee:04:f0:3d:aa:71:69:46:
                    54:fe:94:a7:c0:51:48:9d:6b:65:a7:28:e2:6c:79:
                    fb:d5:51:c7:71:7e:1c:e8:81:22:31:ff:23:43:5e:
                    92:fa:34:35:bf:b3:b6:72:97:ab:52:b1:e2:0f:2b:
                    13:f6:c7:a3:6b:4d:8e:46:fc:40:67:75:c8:42:43:
                    fb:4d:54:d6:6c:3d:08:71:de:10:83:a2:c8:3d:48:
                    9c:0d:45:ee:4b:65:5e:5d:27:d5:50:8a:9f:46:ff:
                    db:1c:74:a1:9e:77:92:36:3f:e1:32:e5:c1:ba:d0:
                    d0:8c:b1:93:81:76:87:f7:57:01:dd:63:0a:65:e4:
                    20:eb:e4:e7:cf:7c:cf:44:0a:fc:0a:87:01:cb:5d:
                    8b:c7:57:5b:e9:51:07:68:4a:28:b3:6a:b6:a8:0d:
                    c1:8c:7b:ec:93:72:6d:2b:72:c4:f8:b8:b2:33:be:
                    cc:58:e0:e7:81:71:55:a0:38:4c:b8:d6:41:8d:53:
                    4b:e3:fc:a3:1a:4c:97:cb:7e:55:b3:8e:43:62:35:
                    d4:c4:b1:11:11:67:91:2a:d7:83:8e:65:38:74:1e:
                    c5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FF:E8:31:30:2B:78:06:84:91:7D:F2:0D:83:6D:42:92:D0:06:B4
            X509v3 Authority Key Identifier:
                keyid:E8:69:7E:EB:84:67:3D:81:C3:B7:C0:71:66:D9:6C:AC:16:45:F8:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Gl-64RnPYHDt8BxZtlsrBZF-DM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:0f:8d:16:b2:70:66:4a:7a:c4:1b:6a:a1:f1:71:1c:16:d2:
         90:68:a5:fd:ec:f4:4c:dc:46:f7:f8:9a:5e:8d:dc:0a:37:fa:
         db:0d:92:d9:bc:27:f1:44:c1:54:5e:ce:49:3a:40:14:83:ef:
         52:c9:a1:ee:fc:56:92:36:64:8b:ad:66:65:66:e3:5b:af:f9:
         2d:5d:36:c2:a8:b9:9b:ba:c3:40:18:8f:a5:cc:55:86:0c:87:
         19:b0:31:6e:d6:2d:e6:2c:04:7a:68:20:89:30:99:d9:38:70:
         d2:32:cf:04:ef:cf:d9:52:cf:33:f4:2f:7b:f4:26:23:76:f3:
         f8:f7:ce:70:65:dc:64:d5:45:74:75:28:38:d7:7f:a6:42:02:
         c8:f4:06:aa:91:12:0d:46:e2:b8:a2:c0:bc:ab:9e:9f:cb:77:
         4f:f8:18:ca:7e:b9:36:8f:ea:a0:55:61:b5:60:3c:f9:cc:8c:
         54:58:be:23:54:73:50:bf:dd:0c:5e:33:95:14:7a:5f:02:2f:
         d1:e7:39:70:39:bd:b5:e8:09:ff:17:35:10:8f:1b:ea:8a:2d:
         9f:de:e4:db:31:ec:b2:a0:f6:57:16:48:cf:37:50:bf:3b:ac:
         d8:59:4b:a1:d5:1c:0e:09:3e:3f:4b:6b:9f:30:93:75:67:3a:
         e2:08:2e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:31:33 2025 by rpki-client