Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
File:                     x6gkb3CuGOc25OU5gUgNWGFq8ug.mft (raw, json)
Hash identifier:          eES12Y5YYjCMPf/NkGLj0jup0SlhQapQvs8+vZQO3Pc=
Subject key identifier:   73:E9:7C:84:94:60:17:81:73:54:F7:FC:99:E3:B7:25:DA:A9:9C:60
Authority key identifier: C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8
Certificate issuer:       /CN=c7a8246f70ae18e736e4e53981480d58616af2e8
Certificate serial:       019649A1853289D8880CC88B3DF030BE5697
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
Manifest number:          0EB4
Signing time:             Fri 18 Apr 2025 16:00:44 +0000
Manifest this update:     Fri 18 Apr 2025 16:00:44 +0000
Manifest next update:     Sat 19 Apr 2025 16:00:44 +0000
Files and hashes:         1: jtTgOvbCDl5pHHYwdtzWehbpOW4.roa (hash: JDaZtuKzg04dO4qGDBxTTkPz4qMFiZdAuP8puNSxSpM=)
                          2: x6gkb3CuGOc25OU5gUgNWGFq8ug.crl (hash: p+MKEAexXwqyvy2HPx0jPvWLK1t5gPyPAq36KQNqaro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 16:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:a1:85:32:89:d8:88:0c:c8:8b:3d:f0:30:be:56:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a8246f70ae18e736e4e53981480d58616af2e8
        Validity
            Not Before: Apr 18 16:00:44 2025 GMT
            Not After : Apr 19 16:00:44 2025 GMT
        Subject: CN=73e97c84946017817354f7fc99e3b725daa99c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ed:2a:70:43:e6:a8:ba:13:98:55:ad:57:89:
                    e0:c1:6b:0f:8a:04:4d:a4:95:88:25:c2:c4:6b:b9:
                    46:f2:09:b9:55:6d:82:77:46:a4:e2:5a:af:01:b4:
                    f3:34:b8:d4:c0:3e:19:cb:b3:b6:1b:5d:25:2a:8b:
                    b2:ec:5e:6f:4f:4b:5c:46:d2:e0:24:aa:af:de:a0:
                    e6:f7:6c:4b:3a:ff:25:cd:0c:88:95:e9:ac:56:3b:
                    56:0c:cc:23:61:04:53:64:42:11:a3:a7:67:19:e3:
                    11:15:21:62:ee:dc:0f:2f:e4:92:45:5a:0a:ec:f8:
                    47:ab:e5:e0:15:d1:fc:ab:31:f9:18:e2:89:55:8a:
                    f7:ce:45:a6:58:6f:17:58:6b:b0:84:3a:7b:57:63:
                    46:ac:c9:53:38:1b:87:ae:2e:c6:92:3d:48:7c:67:
                    40:41:a2:a8:c5:c9:b0:02:6f:d7:d6:9b:a4:26:73:
                    f7:de:3b:eb:f2:36:59:fa:ef:7b:72:94:d7:8c:12:
                    0c:ed:87:1f:18:bd:15:68:6e:2c:7f:3d:a3:c4:95:
                    6c:40:a7:c9:cd:a5:3e:30:b6:ea:74:25:82:9d:98:
                    74:d6:b2:af:fb:c3:dc:ec:b0:66:b5:03:1e:d9:72:
                    a4:8f:16:a5:2d:28:af:17:7a:70:52:5a:50:df:d4:
                    f5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E9:7C:84:94:60:17:81:73:54:F7:FC:99:E3:B7:25:DA:A9:9C:60
            X509v3 Authority Key Identifier:
                keyid:C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:34:7e:f3:3c:2e:bd:69:10:53:07:e1:3c:55:66:e8:d2:71:
         3e:11:ad:31:48:29:72:3c:69:f1:33:bd:b1:41:85:56:24:bc:
         40:3d:a6:5b:d3:f7:cb:8a:07:be:bf:85:2a:94:a5:b0:0e:4f:
         8d:da:35:9f:a8:e0:2e:a3:bd:c8:82:9d:18:42:08:10:eb:4c:
         ae:6d:42:9a:7d:88:e6:88:33:cb:e4:dc:6e:d9:c4:10:40:3b:
         42:df:29:6a:26:57:fe:e9:25:a2:3d:8a:2b:5f:11:f6:2d:10:
         a0:d3:08:fc:51:e7:7c:16:9e:7c:f2:ed:22:48:1b:0a:64:8f:
         df:15:a5:72:ea:5e:d0:74:9d:54:8c:43:e3:79:3b:92:da:c3:
         1c:78:fa:88:53:8e:4a:26:77:cf:86:b9:4a:83:9a:2e:2e:4e:
         3d:53:c6:9d:39:ee:4f:c2:de:b7:f1:c3:0e:ab:b1:0f:af:c8:
         34:19:95:35:bc:fa:68:8e:ba:57:a8:e4:51:68:90:5e:e4:95:
         2f:da:c5:4b:1a:30:f9:73:cd:01:9c:d8:db:c2:70:02:03:19:
         b6:ca:d7:3a:b0:d3:93:67:20:69:bf:a4:b5:f6:46:68:33:f2:
         c1:1a:88:75:d6:16:3c:ea:86:35:93:f3:ba:28:49:82:8f:4d:
         c7:77:9b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:20:40 2025 by rpki-client