Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.mft
File:                     6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.mft (raw, json)
Hash identifier:          aPWb8GZJtNIfbeZsGxJn9yv4wRXFrPsav6ristqzCZY=
Subject key identifier:   2D:8F:D6:17:61:19:12:C3:F0:4C:D0:02:97:4E:DB:7A:B1:F5:F0:2A
Authority key identifier: EA:60:32:7C:9E:2A:4E:3E:37:D5:47:B5:36:14:35:00:D0:A5:DC:B9
Certificate issuer:       /CN=ea60327c9e2a4e3e37d547b536143500d0a5dcb9
Certificate serial:       01976B180D6945EAA09865F60EFA10912AA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.mft
Manifest number:          08AA
Signing time:             Fri 13 Jun 2025 21:00:27 +0000
Manifest this update:     Fri 13 Jun 2025 21:00:27 +0000
Manifest next update:     Sat 14 Jun 2025 21:00:27 +0000
Files and hashes:         1: 6IQHtBCS1JE9_VEW3BeNg7TDXiE.roa (hash: 6uQ/4oFYw1xhoqw3/qkx1eHe1uT4WuqtHU7wwwKQl2Q=)
                          2: 6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.crl (hash: XrroHefvHMvaEcO7UcWR/QGnIW57dPA3QQNw5NK9sIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 21:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:18:0d:69:45:ea:a0:98:65:f6:0e:fa:10:91:2a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea60327c9e2a4e3e37d547b536143500d0a5dcb9
        Validity
            Not Before: Jun 13 21:00:27 2025 GMT
            Not After : Jun 14 21:00:27 2025 GMT
        Subject: CN=2d8fd617611912c3f04cd002974edb7ab1f5f02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6d:46:8b:f9:87:d2:f8:21:8b:dd:d8:cf:38:
                    2f:1d:60:e8:19:7a:40:a8:29:4f:c4:c4:8d:9d:e5:
                    ea:42:e1:ce:0e:3f:e4:5d:70:64:1c:af:f1:66:77:
                    53:ac:1f:5c:ba:f1:89:bb:78:bb:2c:c5:92:7f:68:
                    13:c8:df:40:ee:89:68:d1:4f:71:30:50:88:cd:da:
                    70:2c:96:4d:7b:95:c8:78:b4:33:14:14:2b:be:80:
                    fa:5a:6a:7f:80:1b:dc:40:01:88:e0:ea:87:3e:60:
                    9a:2f:e3:c4:93:0d:1f:5a:ed:d9:d9:05:c8:c7:fd:
                    bf:5b:fe:65:4c:51:08:0c:a4:e6:09:40:d5:61:ab:
                    b1:fd:49:da:de:06:ec:10:4d:e2:5d:13:78:9f:07:
                    28:18:b9:9b:33:c3:58:d1:e7:f9:11:64:d3:8a:69:
                    ba:07:11:18:3d:7a:39:39:37:91:80:47:29:72:63:
                    3d:63:b6:cc:f9:32:e4:a8:18:3b:7d:12:0f:47:46:
                    fe:b9:a5:8d:51:1a:49:cd:df:da:45:7d:11:bc:9b:
                    11:d6:31:7b:82:a7:b7:52:c1:48:b6:28:53:b0:a1:
                    bd:a3:2a:fb:3b:ab:b4:02:25:c9:57:32:d7:b0:74:
                    36:1f:25:d2:d8:94:3d:1c:d7:62:7b:89:50:70:cf:
                    8a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8F:D6:17:61:19:12:C3:F0:4C:D0:02:97:4E:DB:7A:B1:F5:F0:2A
            X509v3 Authority Key Identifier:
                keyid:EA:60:32:7C:9E:2A:4E:3E:37:D5:47:B5:36:14:35:00:D0:A5:DC:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:37:51:70:8c:a2:21:82:d9:e8:2a:82:bb:64:25:c9:f4:3d:
         43:9c:78:a5:9b:ea:e1:35:51:67:b2:b2:94:9d:d2:93:ee:63:
         ca:82:bf:c6:b5:9e:2e:20:cf:ce:2f:7e:86:ea:4c:9e:2c:09:
         8c:15:91:cb:d9:f4:d1:56:92:d8:4a:13:76:53:d5:8a:4e:7e:
         41:ef:a5:eb:28:17:80:71:da:f6:40:71:81:29:52:fe:8a:81:
         0f:95:74:fe:97:e1:28:f9:2a:58:f1:92:4a:1f:b9:48:db:bf:
         7d:ae:c5:df:0b:89:d5:0d:5b:f2:4c:62:90:26:80:f5:4e:c4:
         0d:83:91:7b:c5:77:66:9f:d7:ac:98:82:e0:78:67:45:4c:f6:
         38:bd:93:e3:c0:f6:95:b5:33:b0:4e:53:0d:9e:de:53:71:29:
         40:2d:47:39:51:95:ce:c3:15:c2:e2:ad:f9:eb:0d:05:f2:e6:
         9c:64:c3:67:2a:9e:d6:85:7a:ad:74:ea:0e:8b:f8:87:3a:29:
         e4:ff:2e:09:22:b8:2a:97:77:c2:89:49:0c:16:92:9e:ff:d4:
         71:53:d9:34:ab:a7:53:c0:bc:c5:a8:cf:33:6a:29:15:fc:76:
         ab:01:66:43:d3:9a:97:d4:6b:14:05:3a:3a:f4:cc:46:fe:33:
         37:86:77:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 08:26:53 2025 by rpki-client