Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
File:                     a6acO9yS1oEUijWKE6bm9T37d1g.mft (raw, json)
Hash identifier:          ER9QA8gRwotz8FxSSyb3evYDOfQjE67gXbLNQ8DzS58=
Subject key identifier:   C3:0E:BA:1B:05:DB:0E:17:89:2C:CD:08:6C:DC:9A:11:0B:41:3E:2C
Authority key identifier: 6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58
Certificate issuer:       /CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
Certificate serial:       01974967C0A3A008E26653EF63FE71F6A8BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
Manifest number:          0448
Signing time:             Sat 07 Jun 2025 08:00:25 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:25 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:25 +0000
Files and hashes:         1: 0bVZzhMFVS1g8jzWdISxg74CDIY.roa (hash: 0CO5Cokq43YXaFcPiFBIU+s3WfK4TaB7E8kyWwFMXGc=)
                          2: a6acO9yS1oEUijWKE6bm9T37d1g.crl (hash: wDGHRQkXgbimfTICSeD+stOddeyulsiGKwtuDPqLj+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:c0:a3:a0:08:e2:66:53:ef:63:fe:71:f6:a8:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
        Validity
            Not Before: Jun  7 08:00:25 2025 GMT
            Not After : Jun  8 08:00:25 2025 GMT
        Subject: CN=c30eba1b05db0e17892ccd086cdc9a110b413e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:17:dd:78:2f:15:79:ed:be:51:8e:6c:3e:62:
                    97:1e:49:b9:ac:f6:9f:2b:9a:dc:e7:d8:6b:b8:7a:
                    48:40:73:b8:2b:e7:39:cf:0d:0b:fe:3a:67:0b:32:
                    e4:4b:8e:30:20:60:b6:2b:e1:ca:7f:c2:dc:75:56:
                    01:72:71:ee:01:da:34:89:7b:2a:48:40:a7:a9:39:
                    93:a1:8e:90:84:f7:29:63:5a:c5:84:db:f5:64:52:
                    b6:c2:50:2b:66:ba:42:70:41:25:df:d3:ab:04:3b:
                    3f:a7:c4:bf:bf:c3:6f:e0:4a:78:c9:4c:51:4f:73:
                    fa:74:fd:00:90:8b:8e:ba:0d:01:58:6f:4f:af:ce:
                    91:fc:3a:ad:e3:8a:29:c6:ab:3e:e6:63:76:57:4f:
                    16:59:d0:8f:36:de:01:46:4f:00:86:a0:5b:a5:de:
                    b4:82:3e:3e:75:84:50:32:28:e0:71:aa:6c:f9:73:
                    2c:cf:0f:42:8b:23:d9:51:03:a6:1a:1e:d3:68:84:
                    a6:d5:78:0d:4a:7e:4a:6a:7d:f3:43:a1:d3:bf:26:
                    c3:9c:eb:63:b5:eb:8e:c9:ec:c7:7d:55:5f:46:f4:
                    62:f0:54:6c:76:09:3c:8c:92:e1:6b:aa:11:c5:53:
                    82:09:c8:a2:8c:c3:d1:97:03:da:a7:a7:75:55:46:
                    10:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0E:BA:1B:05:DB:0E:17:89:2C:CD:08:6C:DC:9A:11:0B:41:3E:2C
            X509v3 Authority Key Identifier:
                keyid:6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:54:33:91:b8:04:35:a6:d2:d9:6b:2d:15:62:b5:c3:cf:d1:
         34:84:b8:e5:ee:a3:64:bf:14:03:c5:39:55:4b:fb:78:47:7f:
         df:e6:12:bc:71:e1:96:d9:7d:60:98:cf:5a:3e:6e:f0:88:38:
         7e:7a:12:63:bc:21:3a:15:c7:6f:d3:67:87:19:76:2c:31:a9:
         1c:29:47:5f:1d:3b:62:35:09:96:df:92:68:7e:88:e1:20:fa:
         88:56:d5:21:91:af:c6:df:34:80:44:a7:9f:96:52:21:11:a3:
         6c:9e:c7:ff:09:e5:be:59:02:0d:d7:58:b4:f1:8f:da:be:7f:
         52:e4:95:7b:72:3b:7e:f0:c5:39:a5:8b:31:4d:5e:7c:31:ac:
         25:ca:f6:96:8d:09:8e:4f:de:fd:b9:46:b5:51:39:a4:33:49:
         dc:4d:d5:d3:1c:b1:45:58:de:a9:21:1e:71:83:44:74:62:db:
         68:ea:04:ab:61:f6:fa:d1:d0:a6:6f:c8:3a:15:60:a9:f8:f7:
         a8:cb:5d:d7:49:8f:64:62:47:14:e7:6b:75:4f:25:f4:c1:ef:
         9d:3c:66:0f:ac:f2:c7:01:c7:b2:be:35:d4:69:e8:92:92:47:
         1a:7a:86:20:67:8b:6c:34:22:39:23:6e:22:ce:bb:ff:cb:d5:
         da:c8:82:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:41 2025 by rpki-client