Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
File:                     6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft (raw, json)
Hash identifier:          XtKnvzHLQqpr1XPmmU6S5ec9K8dmLpZests1IXRgCbk=
Subject key identifier:   AA:EE:A5:53:7E:33:AE:2A:4D:1A:85:F5:39:AE:80:5B:4E:4F:B2:14
Authority key identifier: EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC
Certificate issuer:       /CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
Certificate serial:       01974EC575183677DB1CA9E6F655A734C1CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
Manifest number:          0C60
Signing time:             Sun 08 Jun 2025 09:00:52 +0000
Manifest this update:     Sun 08 Jun 2025 09:00:52 +0000
Manifest next update:     Mon 09 Jun 2025 09:00:52 +0000
Files and hashes:         1: 6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl (hash: P3b8VbIPOS2GPg9gNlsSs1SV3s9PkrsD/5YiAV1mLhg=)
                          2: DXb8g5-PypIL6EwTwBa5JTnxBKo.roa (hash: tOPfESlkZC7S5BHJvSJ7lgd26XQAVlBllx5t/n2Rb7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 09:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:c5:75:18:36:77:db:1c:a9:e6:f6:55:a7:34:c1:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
        Validity
            Not Before: Jun  8 09:00:52 2025 GMT
            Not After : Jun  9 09:00:52 2025 GMT
        Subject: CN=aaeea5537e33ae2a4d1a85f539ae805b4e4fb214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8d:02:dd:93:9c:72:e6:5f:b3:c0:10:0c:ea:
                    29:77:d7:66:84:8a:4f:aa:9e:00:95:68:0c:11:31:
                    1d:43:14:e9:bf:7b:9b:38:20:ae:98:a2:c7:e3:f3:
                    3c:2f:4f:a1:e5:64:98:c1:f5:73:45:ac:1f:ee:56:
                    72:bd:2c:be:f0:5f:e9:4f:42:5e:7c:f6:b2:6d:d9:
                    bc:83:db:55:4a:8b:a0:06:22:f7:45:4c:ca:ff:22:
                    e0:b7:28:87:01:25:ce:2c:86:6c:41:f9:99:01:cb:
                    b1:cf:16:f5:3e:ad:7a:8f:90:51:03:4f:f6:a2:f0:
                    48:a1:7b:60:87:91:5c:5c:be:57:6f:2a:c1:42:33:
                    15:f6:21:e8:fa:c2:2c:83:c6:09:d3:80:b8:4f:33:
                    44:2c:c2:c6:5e:c4:ef:24:de:91:3d:82:b9:2f:90:
                    fe:f7:4d:d7:d0:77:55:c7:9b:88:5c:f4:b2:d6:c1:
                    89:f0:00:53:d9:72:ac:3f:ac:b2:76:b9:7e:fa:f6:
                    fe:7d:0f:ed:eb:5f:59:88:02:b6:79:d6:99:06:c2:
                    fb:18:c9:3d:28:49:de:15:a6:0a:cb:66:50:7d:87:
                    fb:ce:3d:02:20:44:3d:14:a8:ac:db:a5:a7:52:ea:
                    8d:e7:7a:90:bf:a1:df:23:9d:81:b9:c5:67:1d:2a:
                    12:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EE:A5:53:7E:33:AE:2A:4D:1A:85:F5:39:AE:80:5B:4E:4F:B2:14
            X509v3 Authority Key Identifier:
                keyid:EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:56:47:e8:9a:aa:ae:03:cb:cf:30:98:f9:e3:ac:88:fd:33:
         b4:23:5b:18:78:3b:da:e9:32:4f:84:c6:cb:8a:00:cc:01:00:
         6d:59:ce:7d:c5:ee:c5:12:34:d5:a1:cd:f5:a6:cc:82:10:8d:
         d9:9e:c7:dd:e8:c2:6a:d0:4d:46:05:86:b8:c9:b8:d0:0f:94:
         fe:cd:9f:24:c1:ce:13:8d:45:a7:d9:f7:69:6b:5a:cb:b7:86:
         35:16:b5:87:92:7d:41:68:a3:17:46:1e:2e:08:de:7b:15:83:
         85:3a:b5:92:f0:a1:5e:01:a8:f8:5d:2b:e9:c4:49:36:e3:4e:
         46:77:68:ec:1b:31:5e:48:69:fd:ff:4c:e1:26:83:84:08:be:
         03:32:80:5b:76:b6:fd:12:78:fa:39:6f:3c:9d:7a:14:0a:af:
         16:03:39:b8:f1:a9:5e:5a:b3:2c:2c:8e:11:aa:0a:56:29:c6:
         69:25:90:97:e0:44:ec:7b:3e:1d:bb:3b:35:74:64:c8:ae:6b:
         09:78:17:5f:17:29:f5:ee:3a:38:f8:37:25:b2:3e:8c:d2:6e:
         ee:3c:11:c5:ee:2c:dc:89:02:98:3f:3f:57:71:95:b6:1d:64:
         43:e4:44:92:c7:2a:d0:60:2a:4c:47:eb:fe:7e:ea:0b:77:98:
         ec:04:b1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:40:48 2025 by rpki-client