Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
File:                     a6acO9yS1oEUijWKE6bm9T37d1g.mft (raw, json)
Hash identifier:          6tlyAzLsO7QuKXazKmv9AO3hBI/h3HqWDKgM42gygW4=
Subject key identifier:   E1:90:11:44:6D:3C:25:5E:08:42:86:57:5C:35:01:A1:50:EA:86:6D
Authority key identifier: 6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58
Certificate issuer:       /CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
Certificate serial:       019654256D1B64A922D8B8D1466E6BC50867
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
Manifest number:          03C9
Signing time:             Sun 20 Apr 2025 17:01:00 +0000
Manifest this update:     Sun 20 Apr 2025 17:01:00 +0000
Manifest next update:     Mon 21 Apr 2025 17:01:00 +0000
Files and hashes:         1: 0bVZzhMFVS1g8jzWdISxg74CDIY.roa (hash: 0CO5Cokq43YXaFcPiFBIU+s3WfK4TaB7E8kyWwFMXGc=)
                          2: a6acO9yS1oEUijWKE6bm9T37d1g.crl (hash: MD/o7KWWoULFHrPkeWlnrub4FsNLG+iXIXlpzQV6OK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 17:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:25:6d:1b:64:a9:22:d8:b8:d1:46:6e:6b:c5:08:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
        Validity
            Not Before: Apr 20 17:01:00 2025 GMT
            Not After : Apr 21 17:01:00 2025 GMT
        Subject: CN=e19011446d3c255e084286575c3501a150ea866d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:38:55:18:06:b8:19:60:b4:99:33:5a:de:a4:
                    ab:e9:60:59:af:15:51:c2:2e:d0:f5:8e:03:ef:08:
                    f8:da:f5:ac:32:8f:71:58:d1:a0:7d:c9:a9:1c:b8:
                    08:ad:a6:27:e9:f4:75:73:15:95:ae:88:51:b4:4f:
                    5c:52:d7:c4:45:e4:b6:b1:5d:97:09:de:34:1a:56:
                    64:59:53:12:c8:37:1f:a6:f6:2c:1c:c3:b0:65:b0:
                    ae:da:ea:cf:d0:33:41:fe:2c:3c:c7:56:fc:cb:cf:
                    78:9c:59:b0:b0:0e:90:e9:32:e3:bf:12:78:05:f3:
                    83:3a:4e:06:b6:8b:b0:6f:9d:b7:79:41:e4:12:31:
                    31:27:6a:47:99:23:43:e1:d4:02:6b:fe:5d:c0:dd:
                    ae:91:55:39:56:80:b2:e7:51:23:7c:d7:79:39:b5:
                    91:10:41:ff:7d:7e:62:b0:42:52:cd:3e:2c:e4:a1:
                    48:d6:0f:65:73:ce:fc:33:17:1c:bd:79:e9:ef:58:
                    5d:11:3e:f0:de:56:d6:68:c5:1d:8c:8e:07:58:51:
                    96:c4:96:8c:57:37:9e:4d:e6:c7:ef:1b:a4:85:32:
                    8f:8a:69:15:32:01:02:84:47:15:04:81:7d:59:79:
                    cd:d9:0c:1d:f7:a7:f4:ad:a6:b0:06:8b:f3:4b:25:
                    2f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:90:11:44:6D:3C:25:5E:08:42:86:57:5C:35:01:A1:50:EA:86:6D
            X509v3 Authority Key Identifier:
                keyid:6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e0:45:2e:00:9a:df:aa:de:cf:71:44:87:45:91:f7:f0:a3:
         ce:34:75:7e:27:d7:10:8a:c2:6a:9e:14:d9:06:5e:2d:b2:be:
         54:e3:76:9d:a9:1c:98:fc:ef:a3:fc:8c:43:c7:0a:87:aa:06:
         5e:be:2e:2d:99:86:ac:a3:2b:4f:0b:df:19:72:3a:f5:ea:24:
         5b:22:94:3b:c4:fa:a9:7d:cb:f6:c1:38:e6:c3:00:7f:4e:b0:
         58:b6:46:04:09:b0:3e:78:21:9e:5f:81:48:af:5b:dd:e2:57:
         41:61:f5:7c:a1:8b:e0:45:f2:e4:9d:2c:66:5d:4a:2c:e6:7a:
         77:41:8a:e2:a9:51:d8:57:11:30:5e:f0:e8:91:2a:73:51:9e:
         50:4d:56:7a:a2:b0:d4:20:e1:4e:c1:39:94:4d:4e:a6:77:27:
         f3:ef:21:80:96:4e:7d:bf:68:32:99:5f:55:c7:04:d9:68:d5:
         65:9c:f2:32:48:9c:6b:58:8e:3b:64:50:e1:c2:e5:12:e4:c0:
         38:b9:ae:d9:ec:55:61:cb:a6:9f:4d:f6:eb:26:6e:66:f5:3b:
         71:37:39:52:f0:de:9b:28:df:37:ad:96:d1:bb:c6:50:86:19:
         40:f6:f0:6d:c1:3d:6a:4b:cd:1f:0b:f5:ba:7f:a5:fe:75:38:
         e7:58:7e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:43:36 2025 by rpki-client