Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
File:                     6ch0aZeAldiv9jJygEuy810UkQM.mft (raw, json)
Hash identifier:          eJkuzHCrAVm1LNGdvreG5w49fyXbaDMmPQD9lQUMGoc=
Subject key identifier:   6B:A8:98:75:07:58:2A:B1:FE:82:7D:12:08:0B:A8:AB:11:60:91:20
Authority key identifier: E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03
Certificate issuer:       /CN=e9c87469978095d8aff63272804bb2f35d149103
Certificate serial:       01962AF2C95EDA580B187EAFBA37D9E244CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
Manifest number:          0823
Signing time:             Sat 12 Apr 2025 17:01:16 +0000
Manifest this update:     Sat 12 Apr 2025 17:01:16 +0000
Manifest next update:     Sun 13 Apr 2025 17:01:16 +0000
Files and hashes:         1: 6ch0aZeAldiv9jJygEuy810UkQM.crl (hash: ox/YAC1+8DIOUpqWua02GmpwKchNLkigfPcXrEo8iyU=)
                          2: zUJ5qWVbr4pmer3m739HNMffZjg.roa (hash: NJqHyM9HbL1+6lpUhrutNRFZX2Z30cCNuSy/2q+fWs4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2a:f2:c9:5e:da:58:0b:18:7e:af:ba:37:d9:e2:44:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c87469978095d8aff63272804bb2f35d149103
        Validity
            Not Before: Apr 12 17:01:16 2025 GMT
            Not After : Apr 13 17:01:16 2025 GMT
        Subject: CN=6ba8987507582ab1fe827d12080ba8ab11609120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a7:27:96:1d:4f:5b:12:8e:35:9c:8e:80:bb:
                    0b:ef:f4:94:ae:88:f8:eb:3e:ce:6a:f8:fa:41:0c:
                    5d:39:ab:78:fc:9c:96:d7:06:d5:a0:40:af:2e:1b:
                    28:38:7b:d0:35:a8:59:6e:48:0c:72:d0:be:a8:d7:
                    ab:df:46:d0:c3:ae:89:71:da:d0:13:56:8e:c4:5d:
                    59:cb:55:56:fe:97:22:37:c5:d7:18:f1:f9:7d:1f:
                    8b:59:fa:c8:8c:cf:6a:0d:2b:d4:97:2c:c9:e8:f9:
                    80:d5:7d:c2:1b:99:5d:7a:7f:0d:f2:d4:fc:15:9d:
                    82:2e:81:5c:26:c8:cb:7b:8c:5f:ad:a9:b8:f6:19:
                    84:95:34:02:92:bf:5c:8d:bb:14:b9:7b:4f:85:49:
                    6d:fd:f2:d7:48:ab:42:af:13:e8:e7:3c:b9:a0:c4:
                    81:4e:21:a0:24:8d:53:48:d2:53:b8:7f:09:4d:54:
                    12:97:60:b6:51:08:74:37:54:93:e8:87:c5:df:53:
                    eb:dd:18:e7:fd:34:38:46:73:71:16:d3:0c:a9:40:
                    de:3e:7b:91:f6:74:1b:2d:6c:08:34:63:7d:dc:83:
                    ad:0f:67:02:aa:51:7e:89:6a:bc:3f:83:4a:ab:53:
                    ce:4f:5c:33:1b:8b:61:cb:26:4a:7d:a6:8c:80:8d:
                    b1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A8:98:75:07:58:2A:B1:FE:82:7D:12:08:0B:A8:AB:11:60:91:20
            X509v3 Authority Key Identifier:
                keyid:E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:39:84:ad:a0:d2:33:a7:58:b6:3c:cb:5d:aa:74:1b:2e:5a:
         71:48:8f:4f:08:c9:2b:c6:24:06:4a:91:9c:41:80:de:3c:db:
         01:80:56:db:0b:6f:6a:d6:00:e6:0b:42:04:4a:c9:94:30:45:
         7a:63:6b:39:34:29:9d:21:d6:a4:f5:e0:c4:ce:21:ad:70:33:
         82:11:39:c0:0c:26:ea:d9:ad:4e:2c:3a:9f:6d:6a:15:9e:3b:
         56:79:6b:12:42:d7:8c:49:68:65:bc:33:c7:a9:3f:66:09:05:
         44:c8:96:93:49:be:60:ff:b7:16:ad:6e:a7:ef:92:0c:d9:2f:
         12:70:c7:11:74:53:1f:69:89:76:23:3a:4b:9f:c9:0d:3b:d5:
         6e:fc:af:0b:ba:09:9f:07:e7:56:56:9b:fa:f5:50:1b:69:09:
         30:47:b0:3a:2a:a3:ff:b4:e6:ca:84:b6:09:42:44:92:82:55:
         1d:00:79:28:5a:2f:b8:d5:fc:d1:6c:44:02:79:90:f4:fc:68:
         12:c4:a9:4a:5f:3c:8a:28:5f:01:54:30:fa:c0:cc:a1:91:1d:
         45:3b:69:16:e4:60:43:4e:71:3a:b8:71:e7:9f:3b:3c:8f:ee:
         82:74:f3:46:36:ae:27:4c:86:67:cd:b1:9e:1b:9a:c3:5d:5c:
         bc:f9:c0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:55:57 2025 by rpki-client