Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.mft
File:                     6y7LDykkUqe-lOaWD3znIBa9GAU.mft (raw, json)
Hash identifier:          D7RAQzxX3vMXlyWsUKmlpYqs2vc3a+CFuHlWc8Iw+tw=
Subject key identifier:   96:28:BB:D1:0C:2C:73:2B:96:8D:6A:A2:27:CF:F5:44:83:62:61:29
Authority key identifier: EB:2E:CB:0F:29:24:52:A7:BE:94:E6:96:0F:7C:E7:20:16:BD:18:05
Certificate issuer:       /CN=eb2ecb0f292452a7be94e6960f7ce72016bd1805
Certificate serial:       01965537CB1BBBEF383BE27561ED629D5649
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6y7LDykkUqe-lOaWD3znIBa9GAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.mft
Manifest number:          02AA
Signing time:             Sun 20 Apr 2025 22:00:41 +0000
Manifest this update:     Sun 20 Apr 2025 22:00:41 +0000
Manifest next update:     Mon 21 Apr 2025 22:00:41 +0000
Files and hashes:         1: 6y7LDykkUqe-lOaWD3znIBa9GAU.crl (hash: F/JMwuAgZoJ/xOonLTwhCIpK4Tphi1eHPp0FoUUwCRw=)
                          2: Aa0efsIBSZxQ_4T_iZQY03PtXFg.roa (hash: OuiSoz74OGRgJiBoShoGAfl/wamUvwrfazeBnaRaH+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6y7LDykkUqe-lOaWD3znIBa9GAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:37:cb:1b:bb:ef:38:3b:e2:75:61:ed:62:9d:56:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2ecb0f292452a7be94e6960f7ce72016bd1805
        Validity
            Not Before: Apr 20 22:00:41 2025 GMT
            Not After : Apr 21 22:00:41 2025 GMT
        Subject: CN=9628bbd10c2c732b968d6aa227cff54483626129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:78:c1:0d:a0:74:28:62:90:cf:50:f8:b0:f6:
                    b1:f3:90:bd:21:32:a8:22:b3:de:1e:d4:33:d1:7f:
                    c2:5e:a8:92:a1:2f:ef:59:89:cb:b6:16:96:c9:62:
                    dc:aa:62:2d:95:1a:a6:a9:8a:ab:cd:2e:04:4f:28:
                    73:98:c6:3d:44:f6:85:fc:93:eb:3d:fa:bc:f2:be:
                    59:f5:39:e4:bc:93:17:fc:04:22:92:f0:58:66:89:
                    2b:02:24:9c:1a:46:07:6c:fd:52:53:1c:85:21:06:
                    31:4f:69:96:ac:68:55:de:03:26:91:f6:c9:7d:5d:
                    30:4f:76:ff:82:58:a8:1f:5e:bd:82:d2:49:9f:8e:
                    bb:48:d3:33:0c:94:c3:bd:df:03:5f:d5:e3:7b:aa:
                    2b:e6:ce:6f:14:8b:ae:24:4e:10:8a:10:d2:89:7c:
                    0a:f5:98:cd:54:bd:35:03:3c:a3:bd:78:79:2a:02:
                    07:aa:12:4c:7b:47:3e:45:4e:ec:6c:db:1b:16:37:
                    1d:5b:53:a4:24:19:0f:97:a9:a8:4b:21:81:b8:14:
                    e2:de:18:12:22:18:ce:8e:12:31:17:99:db:32:9f:
                    8f:26:7d:99:ea:7d:86:c9:1d:8e:ae:76:37:48:77:
                    d5:b3:17:d1:80:37:31:5c:d5:d0:38:b7:23:19:32:
                    48:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:28:BB:D1:0C:2C:73:2B:96:8D:6A:A2:27:CF:F5:44:83:62:61:29
            X509v3 Authority Key Identifier:
                keyid:EB:2E:CB:0F:29:24:52:A7:BE:94:E6:96:0F:7C:E7:20:16:BD:18:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6y7LDykkUqe-lOaWD3znIBa9GAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:2b:3f:ca:d7:72:32:89:a5:8e:37:09:96:f2:c6:cc:b9:00:
         ff:1e:2b:47:2b:dd:71:70:7a:2a:23:e5:4e:2a:99:dc:ed:ff:
         0a:e3:90:5e:26:b2:a2:fc:37:8d:a1:71:a1:15:dc:92:1a:f7:
         10:40:61:32:c5:11:49:12:e8:0c:2f:44:78:ea:0d:a9:f3:ca:
         02:15:a2:d1:98:ab:ee:41:79:78:c7:17:31:61:6d:42:38:2d:
         1e:0e:70:fc:2b:dd:37:b8:d0:6c:8e:f5:66:99:b1:6d:4f:2c:
         ef:92:aa:33:da:2b:65:25:de:54:e8:a2:a3:e7:d3:85:b4:78:
         7a:b8:76:4c:10:48:62:fa:a5:1f:60:a5:34:71:cc:f9:ea:31:
         e7:75:f3:8b:01:e0:dc:13:bc:bc:98:0a:f7:82:6a:04:65:37:
         07:88:4b:59:aa:b3:48:c1:ad:83:b0:ae:29:04:f4:91:67:98:
         6a:bd:e7:83:9c:02:1f:78:48:17:0c:66:b0:47:ca:f0:e1:c3:
         73:69:37:d8:a9:f8:6c:be:92:e8:5a:23:1a:5b:9f:ce:27:5e:
         0b:1b:11:c6:16:6c:f4:13:09:5c:0c:7f:bf:60:99:7c:9a:42:
         10:9a:87:b1:7e:ac:3c:cc:4d:59:2d:27:a6:7e:97:25:25:19:
         d3:25:f6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:35:20 2025 by rpki-client