Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft
File:                     j6c6fMHk0392QDaHfEKB2osAkH8.mft (raw, json)
Hash identifier:          WjA7omm2cMBgMqLOc5xsSMNJCcVxLZYBnW4IkoSrayg=
Subject key identifier:   32:9F:F0:6A:91:0D:C0:60:07:D2:DF:B9:84:AF:1D:0D:A7:7E:F5:6B
Authority key identifier: 8F:A7:3A:7C:C1:E4:D3:7F:76:40:36:87:7C:42:81:DA:8B:00:90:7F
Certificate issuer:       /CN=8fa73a7cc1e4d37f764036877c4281da8b00907f
Certificate serial:       0197470C1592C81C9AD3A9A59F5383EA0D15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft
Manifest number:          0A5B
Signing time:             Fri 06 Jun 2025 21:01:03 +0000
Manifest this update:     Fri 06 Jun 2025 21:01:03 +0000
Manifest next update:     Sat 07 Jun 2025 21:01:03 +0000
Files and hashes:         1: j6c6fMHk0392QDaHfEKB2osAkH8.crl (hash: jsGlsQDa1J5OpjnB2etFJQs0+jNS0i8FBD+l/wPkbbg=)
                          2: olor_tHkoN8k1oKb8ve7r7Hwc2c.roa (hash: tMtLnjRmuVNk2beOyn14AwFTbvwBpk2hW+VYjVtGIZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0c:15:92:c8:1c:9a:d3:a9:a5:9f:53:83:ea:0d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fa73a7cc1e4d37f764036877c4281da8b00907f
        Validity
            Not Before: Jun  6 21:01:03 2025 GMT
            Not After : Jun  7 21:01:03 2025 GMT
        Subject: CN=329ff06a910dc06007d2dfb984af1d0da77ef56b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:33:57:a3:8c:82:e2:42:3f:04:3d:0a:0c:7e:
                    18:95:04:a5:d2:a3:84:ab:c3:2b:1f:ee:34:ac:11:
                    56:84:08:5c:54:7e:f2:d6:f7:be:e6:3a:c9:3f:70:
                    50:8e:77:88:42:63:3e:13:46:91:e7:74:bf:ad:4f:
                    fa:8e:e7:31:96:d7:f4:3d:70:5e:ca:33:da:68:47:
                    fb:36:59:6a:27:9e:7f:ea:45:af:ec:f2:62:61:2a:
                    ba:07:cb:c1:5e:ab:62:70:ae:54:69:22:ea:17:e0:
                    1d:db:b6:cc:e6:76:d3:9f:63:24:c3:b9:2a:dc:67:
                    43:8d:b1:e1:e6:fe:43:79:2e:ce:86:07:4b:c9:6e:
                    ae:3b:23:da:e3:33:96:e3:03:e0:b0:ed:63:20:fa:
                    e8:ec:73:3c:f7:af:ad:75:2f:5f:ed:14:e8:39:ca:
                    b7:26:68:43:b5:39:47:f3:55:1b:ca:a9:c2:af:d5:
                    d5:90:d0:ad:7c:c0:65:f0:60:29:3b:27:e4:cd:58:
                    4d:ca:6a:21:2d:14:1d:79:a0:59:73:b2:63:48:4c:
                    d5:88:6e:34:a0:a1:23:e1:6e:27:79:73:fa:cd:5e:
                    51:20:6c:57:58:59:b5:e6:ea:80:43:ea:78:85:ca:
                    72:5b:39:b0:f8:c8:a6:28:5d:ce:15:1a:ff:14:13:
                    83:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9F:F0:6A:91:0D:C0:60:07:D2:DF:B9:84:AF:1D:0D:A7:7E:F5:6B
            X509v3 Authority Key Identifier:
                keyid:8F:A7:3A:7C:C1:E4:D3:7F:76:40:36:87:7C:42:81:DA:8B:00:90:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:68:5a:3c:2c:f9:10:97:72:f1:78:40:c3:63:26:17:74:f3:
         88:1f:04:64:04:51:24:94:36:d2:e5:be:14:50:98:a5:bd:44:
         9b:77:2b:0b:96:db:13:3a:42:97:bb:bb:1f:85:02:49:71:4a:
         73:11:37:8a:4e:bf:b7:89:f3:1d:1d:d1:5c:c3:94:c0:31:7e:
         25:1a:a7:12:02:48:4d:95:54:9f:c7:08:e7:3c:7b:64:c2:7c:
         e6:9d:13:32:27:b6:4b:1c:1c:b6:1b:31:50:24:a5:40:80:30:
         df:63:4b:d1:c5:1d:12:08:2c:f5:ed:47:f5:81:3f:b7:14:0e:
         b8:34:b8:b7:0e:13:72:31:c2:2d:43:41:69:3f:fd:c1:2c:38:
         fa:00:33:b7:c1:cb:2c:ee:28:a9:7f:4a:e4:4e:c6:91:51:98:
         43:c9:6f:57:1c:b0:c6:bd:d8:9f:3d:05:c6:c5:05:6e:dd:99:
         7b:3a:68:62:ed:e3:2d:99:08:55:b3:4a:f2:10:14:12:68:20:
         8e:4c:01:ec:7f:b5:78:4d:82:68:b1:4f:1b:78:d8:37:94:32:
         1f:d0:be:fd:38:d2:33:eb:41:9d:4f:18:c0:3b:9f:4f:ad:85:
         52:d0:9b:bd:8a:0d:88:c4:7a:ea:aa:bc:24:60:a6:58:1b:17:
         db:40:76:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:56 2025 by rpki-client