Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
File:                     6aqxRGEAqPzgPfGddV4GMp7iRxM.mft (raw, json)
Hash identifier:          uOYResr5kP5uCffVoFBbzQjepHlcNfd6tbGq7TrKFG4=
Subject key identifier:   8F:CC:40:97:EA:2C:97:88:A9:2C:1B:A5:A0:B9:8F:24:AA:0A:BA:49
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Certificate issuer:       /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial:       019749D628EC0E8801BCD437B8D4FDAF623B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
Manifest number:          1588
Signing time:             Sat 07 Jun 2025 10:01:01 +0000
Manifest this update:     Sat 07 Jun 2025 10:01:01 +0000
Manifest next update:     Sun 08 Jun 2025 10:01:01 +0000
Files and hashes:         1: 6aqxRGEAqPzgPfGddV4GMp7iRxM.crl (hash: Pg5qs8uqWwfbHGe72CIQaUKJ7T017skhd0TvPoWWuzo=)
                          2: QkQP_fe9Qbaw_h7Gyszbo7ypS-0.roa (hash: RFUIAsDNjezppynlHDg3Yb1GDBSbUKtltRoi+VjSqN8=)
                          3: fLRTTBlGuXvzenVsLXjVIru2ZhY.roa (hash: K+Pyp4HdZQZlYpDx7COlUM/X5sosLmMqlyaPbzQnWwQ=)
                          4: m3gXujpVCrLpKlGaZZVKGdX7bVs.roa (hash: uZ4Pf6R3TRRDYB1bD3rWYxiLeW6EkMyazvCn4ZXP57Q=)
                          5: mlsN5JNowac1d7ZpQD1BZ-DZoyI.roa (hash: 18rSoxMsfSZRIEFe2Gj+h7BjnwCeSt199DHvViicRCg=)
                          6: pqacqNCldBSnhIBD0D7GqNdirRA.roa (hash: wRFidqB3JkBPQf/uxHF54KwEhS5EFfyJb9MtlsfkioM=)
                          7: ql3I8l6cLh1Cnd-QRruZmhB8qY4.roa (hash: 0n2wtsItY6EXyYhZk/oculHNPoyTZ+0itali9el5fBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d6:28:ec:0e:88:01:bc:d4:37:b8:d4:fd:af:62:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
        Validity
            Not Before: Jun  7 10:01:01 2025 GMT
            Not After : Jun  8 10:01:01 2025 GMT
        Subject: CN=8fcc4097ea2c9788a92c1ba5a0b98f24aa0aba49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e9:da:d1:b5:99:c9:d2:6e:aa:15:ad:b5:8f:
                    c6:4f:d1:91:76:7a:19:4e:47:b1:10:c4:5b:9a:5e:
                    df:37:6b:e8:af:79:e2:12:bc:a7:e7:02:07:2f:ee:
                    12:5a:3a:54:35:7c:9a:78:47:5d:65:02:08:1c:dc:
                    f0:59:2b:28:77:60:9f:bc:21:8d:9d:ad:0f:28:07:
                    ae:63:5b:60:f1:52:c1:12:99:8c:73:10:f1:39:17:
                    67:89:1e:3f:e2:26:c3:6b:09:2a:8e:43:45:db:2c:
                    1e:e1:0e:40:50:26:4f:38:0b:6f:df:3c:83:0b:72:
                    15:71:58:00:33:fb:4d:fd:db:05:9b:75:1c:50:8d:
                    10:c3:db:f4:73:0f:2a:42:21:04:6a:06:0d:a8:63:
                    bd:1b:de:36:67:2d:46:62:1e:7d:eb:42:55:fa:23:
                    20:1a:5d:4b:12:e2:a7:00:8c:2d:ec:6f:5d:eb:bf:
                    c9:62:cf:f7:ab:64:51:2c:75:06:93:31:b8:95:a4:
                    43:36:4c:b9:c6:0f:f1:49:41:a6:b1:88:08:d5:27:
                    6d:cb:2e:c7:9a:c3:81:93:3b:46:36:77:a7:e0:6a:
                    c2:31:1e:64:b2:a8:eb:bc:4c:e0:e2:fe:ce:ec:06:
                    d5:08:03:32:ae:02:a6:6b:68:0f:11:03:ac:bd:fc:
                    42:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:CC:40:97:EA:2C:97:88:A9:2C:1B:A5:A0:B9:8F:24:AA:0A:BA:49
            X509v3 Authority Key Identifier:
                keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:03:57:e7:62:66:96:e0:77:e5:09:70:cd:24:eb:c5:fc:09:
         bc:2e:38:46:c7:70:53:08:cb:ee:f4:31:e6:8c:96:ca:1d:f6:
         82:33:8b:86:7d:5b:c7:e0:73:75:bd:a6:61:3f:5c:de:b8:68:
         21:c9:a9:3c:62:49:fe:fc:dd:91:1c:ea:52:59:d2:84:84:e4:
         02:4d:bf:b9:e6:a1:59:eb:3a:a8:79:34:ad:50:3d:4a:a7:87:
         8d:00:03:13:47:e3:50:27:8b:04:19:80:89:97:1d:64:2a:6f:
         7b:b5:2e:90:f5:4f:84:bf:14:20:dd:87:07:5d:6d:eb:c3:4d:
         5e:d9:d2:67:a2:19:29:58:7b:fd:ba:ab:95:f0:94:2b:8b:d8:
         79:d5:ce:e6:e8:af:b3:12:b9:eb:fa:e6:10:fd:4c:92:13:4d:
         ec:7e:58:04:ef:90:cd:01:14:92:c5:41:ae:2e:64:38:09:c6:
         a5:58:25:a5:4f:e5:3f:d0:ae:4f:de:c7:4b:52:00:a3:35:54:
         0a:dc:67:32:b1:30:b5:73:ae:65:68:f1:34:3a:c8:64:8f:8f:
         7f:b8:b8:79:71:01:7c:94:f5:2e:78:87:7e:a7:24:5b:88:05:
         e6:b2:cf:b9:dd:49:51:94:f4:4e:0a:cd:b4:1a:32:23:be:34:
         17:3f:aa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:32:43 2025 by rpki-client