Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
File:                     6xbhcPebsF58Dew-xgZD5ym-Ts0.mft (raw, json)
Hash identifier:          LGTuSyD0NyRUtEgtXAHSSIGD1LWhH1HKGnr+BAMUz/w=
Subject key identifier:   D1:68:07:3C:B9:03:49:97:89:81:E9:17:82:6D:93:5D:AD:64:6F:F3
Authority key identifier: EB:16:E1:70:F7:9B:B0:5E:7C:0D:EC:3E:C6:06:43:E7:29:BE:4E:CD
Certificate issuer:       /CN=eb16e170f79bb05e7c0dec3ec60643e729be4ecd
Certificate serial:       01974A0C9C56FA7204E48F1A4DEAFDD728D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
Manifest number:          04D7
Signing time:             Sat 07 Jun 2025 11:00:29 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:29 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:29 +0000
Files and hashes:         1: 6xbhcPebsF58Dew-xgZD5ym-Ts0.crl (hash: f795Dv3waC40kjANg1G1F8TFKN94AeGJUlh8DOhjysc=)
                          2: PRoUF_nI3QR5YCF3oP9-TeW8-7M.roa (hash: 8cgALraVTSl/WpvIBY9Xw/fiXrmhiHG/rLuS82zfXFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:9c:56:fa:72:04:e4:8f:1a:4d:ea:fd:d7:28:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16e170f79bb05e7c0dec3ec60643e729be4ecd
        Validity
            Not Before: Jun  7 11:00:29 2025 GMT
            Not After : Jun  8 11:00:29 2025 GMT
        Subject: CN=d168073cb90349978981e917826d935dad646ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2a:9b:01:99:6c:ad:ad:c7:e6:5d:4d:71:66:
                    9c:4e:d9:05:fd:cb:d1:3f:23:73:90:1b:d5:13:af:
                    db:9a:77:db:0d:11:c4:7d:76:4e:93:9a:18:8d:2e:
                    e8:c1:c1:7b:f6:ef:eb:1f:8f:a9:8f:e0:5d:ac:b3:
                    5c:b8:63:04:e2:5b:40:53:6a:7d:88:3e:aa:a4:dd:
                    4c:0c:27:91:24:f7:bc:90:30:c6:4b:1e:11:41:ad:
                    07:7c:c2:72:80:09:99:44:e2:d7:82:63:75:de:b8:
                    94:51:17:e8:16:d5:3a:9b:c2:1c:ed:04:26:8c:8a:
                    78:82:1c:3c:ec:69:b2:8b:ec:6b:3b:c7:18:c3:48:
                    60:11:65:a8:f3:83:52:b6:1d:80:62:47:7e:4a:64:
                    6f:af:91:3a:43:9f:e3:19:2e:45:c1:c6:61:b5:0e:
                    90:8d:b7:95:a8:a5:c5:8a:bd:dc:e5:6e:98:b3:54:
                    21:6b:6b:e2:ee:67:a3:28:5f:22:11:1a:4c:a6:fa:
                    1c:d0:1e:5d:a6:8b:1f:77:3a:96:d9:e8:98:d5:ad:
                    00:c0:b9:eb:91:4b:83:43:2e:5a:70:7b:ac:4f:d9:
                    35:35:94:48:60:8b:78:ec:fd:51:f1:94:67:78:cf:
                    6a:d7:30:19:b5:a2:6d:5b:4a:90:09:34:9a:80:1c:
                    cd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:68:07:3C:B9:03:49:97:89:81:E9:17:82:6D:93:5D:AD:64:6F:F3
            X509v3 Authority Key Identifier:
                keyid:EB:16:E1:70:F7:9B:B0:5E:7C:0D:EC:3E:C6:06:43:E7:29:BE:4E:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:3b:a8:05:13:98:d5:e8:70:ef:95:a0:84:4a:7f:b3:0a:0c:
         ba:ac:f0:dd:4a:6e:3e:f1:a4:f4:bc:3e:d2:d2:ee:70:ae:3a:
         c2:97:e3:c1:30:83:a1:42:e8:0d:de:c6:c4:8a:4b:c0:ca:b7:
         e2:13:74:6a:bb:73:c9:86:64:61:ce:b1:de:ec:52:10:02:78:
         a2:ff:e9:f0:18:2f:19:a6:c5:73:d4:80:f8:c6:4a:f7:1b:ac:
         1d:83:95:a4:d5:de:8e:54:19:af:bb:43:21:fd:05:15:bf:64:
         7c:7d:00:26:5b:32:7e:51:0a:a7:74:c2:3c:07:30:c5:59:f4:
         dd:4f:b4:7c:c8:e0:b8:d0:ac:47:4e:bc:be:f3:c2:2f:9f:44:
         81:6a:33:70:c2:94:23:69:6b:a8:03:e5:a7:5c:7b:4c:16:6c:
         6f:56:e2:5d:a1:65:d8:6c:95:ff:0b:f1:6e:52:d7:23:5b:2c:
         1c:27:0b:b0:78:dc:4c:e7:02:32:7a:4a:c1:b3:0f:17:fa:d2:
         6c:dc:c6:04:29:17:69:21:3c:75:81:2d:b1:6e:af:12:ac:b2:
         1b:f8:90:c9:0c:15:f7:b4:d2:96:06:93:8b:3b:79:ee:0c:67:
         72:15:ba:10:bc:80:26:f4:38:f1:18:34:bf:aa:33:dc:45:18:
         58:69:63:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:31 2025 by rpki-client