Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft
File:                     6mQereGVXdS5B5FrmeAhA57MM-g.mft (raw, json)
Hash identifier:          0Pvg4xeig6RBJEXEJt/QdVXfWrgx5b1ojgkdbwp40tA=
Subject key identifier:   46:E1:74:AD:D2:83:64:0D:98:CA:A2:C0:8C:52:B3:2F:5C:47:6C:84
Authority key identifier: EA:64:1E:AD:E1:95:5D:D4:B9:07:91:6B:99:E0:21:03:9E:CC:33:E8
Certificate issuer:       /CN=ea641eade1955dd4b907916b99e021039ecc33e8
Certificate serial:       01974BC440EB17A5DEDC832AF10D8C4CCBD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6mQereGVXdS5B5FrmeAhA57MM-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 19:00:42 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:42 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:42 +0000
Files and hashes:         1: 6mQereGVXdS5B5FrmeAhA57MM-g.crl (hash: 4kMdDi+9AfOqXjMxec2gpgzHqxAik8kE5h4yUPOYNfQ=)
                          2: yMsvkbq8K0IM2cns7HVpjbtpaM8.roa (hash: TJjLQAcsYRitHc7okesLeLJv1CF6d2BgyzzxAXCqX+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6mQereGVXdS5B5FrmeAhA57MM-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:40:eb:17:a5:de:dc:83:2a:f1:0d:8c:4c:cb:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea641eade1955dd4b907916b99e021039ecc33e8
        Validity
            Not Before: Jun  7 19:00:42 2025 GMT
            Not After : Jun  8 19:00:42 2025 GMT
        Subject: CN=46e174add283640d98caa2c08c52b32f5c476c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:c8:69:6f:8e:1c:5f:ec:0b:e5:3f:6a:7c:
                    d0:de:ef:9e:7c:35:d6:89:2f:75:a4:5a:6f:63:ea:
                    f6:25:a9:3d:b0:ae:8a:81:5a:20:da:cf:e5:3a:0e:
                    38:ff:9e:43:36:1f:de:3a:fe:3c:fb:65:7a:0e:74:
                    ec:8c:e2:69:f2:92:c4:36:2a:00:1c:8f:eb:71:0d:
                    d6:fc:4c:f1:67:1d:76:34:86:f4:43:0b:e4:cc:b2:
                    4e:12:e6:cf:bd:e6:88:a8:5d:ef:9e:29:8d:40:14:
                    ab:53:96:ad:fb:65:f7:02:7b:09:be:48:7f:10:1a:
                    99:a0:ee:9f:3a:92:14:f6:2a:3d:d0:aa:10:e7:aa:
                    96:b5:3a:2b:ea:e4:08:8c:61:9c:71:7a:ae:4a:1b:
                    99:61:87:23:57:05:31:fd:b8:d8:ab:21:42:5a:d3:
                    d0:1c:7e:e4:fd:7e:5c:ec:b7:4f:ff:16:eb:96:29:
                    03:0c:2b:78:cc:8a:1b:2c:07:d7:5a:f8:4c:a3:29:
                    aa:07:40:1c:eb:34:70:24:c7:51:b0:82:98:66:02:
                    3e:4c:91:0a:dd:81:7d:2b:e1:e4:74:85:a5:6a:c4:
                    fb:fc:be:87:18:bd:ea:98:4d:29:2f:c1:5f:77:41:
                    ab:66:d2:64:2b:1d:e5:3a:0e:06:53:44:56:3b:05:
                    37:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E1:74:AD:D2:83:64:0D:98:CA:A2:C0:8C:52:B3:2F:5C:47:6C:84
            X509v3 Authority Key Identifier:
                keyid:EA:64:1E:AD:E1:95:5D:D4:B9:07:91:6B:99:E0:21:03:9E:CC:33:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6mQereGVXdS5B5FrmeAhA57MM-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:f6:a6:3a:5d:72:a2:5f:3a:06:80:af:39:bd:6e:7e:5b:d8:
         da:c9:32:6e:0d:39:10:bd:a6:e7:52:f6:d4:6a:eb:f0:c5:5a:
         78:bb:07:a8:67:7a:3f:31:2a:71:29:1b:e3:b2:cb:4d:da:4b:
         13:bc:ef:91:3a:33:5b:28:27:4e:38:05:b0:38:2e:ed:fe:3f:
         5c:61:ba:34:90:d9:85:e7:33:68:26:05:b3:e5:05:b4:ad:13:
         98:c3:7a:54:98:8f:7c:da:e4:46:b9:80:04:b7:c3:a3:4e:b1:
         29:aa:8b:d8:76:e9:db:51:db:59:3a:42:f8:89:f6:18:67:3c:
         bf:2e:9b:90:cf:5a:d4:cc:2e:f8:d4:57:57:d4:fe:24:15:57:
         4c:89:91:c9:e8:c2:d5:7a:9e:d7:57:c0:d2:59:6e:93:a5:5e:
         5e:86:f5:2c:5d:05:17:9d:a2:ec:e8:04:9c:33:b1:b0:52:55:
         3b:8b:8a:90:91:3d:f9:16:f3:18:de:dc:8a:6f:d1:93:92:e2:
         dc:be:62:4f:58:ca:2d:f4:ff:12:b7:64:d1:82:f2:59:60:2d:
         09:00:de:0b:41:b4:65:b7:a7:07:9c:bf:6d:b6:17:65:74:ca:
         a7:dd:ce:7c:59:e2:fd:7c:57:38:7e:8c:2e:7f:77:db:b7:88:
         21:b1:8a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:28:05 2025 by rpki-client