Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.mft
File:                     6EdxWdZbIlaAmLlZUkhzAHcbPOU.mft (raw, json)
Hash identifier:          wmgXzOPhD22BLWLAlmD5EcQ6pgPcK62puwxBD98K0nM=
Subject key identifier:   56:CE:F8:80:78:0B:87:C1:95:E0:E3:69:DB:90:6A:6F:E5:74:0F:01
Authority key identifier: E8:47:71:59:D6:5B:22:56:80:98:B9:59:52:48:73:00:77:1B:3C:E5
Certificate issuer:       /CN=e8477159d65b22568098b95952487300771b3ce5
Certificate serial:       01963C53E5BE780D6826AD9A26EB0A3348DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.mft
Manifest number:          0C85
Signing time:             Wed 16 Apr 2025 02:00:53 +0000
Manifest this update:     Wed 16 Apr 2025 02:00:53 +0000
Manifest next update:     Thu 17 Apr 2025 02:00:53 +0000
Files and hashes:         1: 6EdxWdZbIlaAmLlZUkhzAHcbPOU.crl (hash: 4uPhqKeB+3z50Qa5plf8bX0AvzlGtvIBoGHm5YAFdZE=)
                          2: YWx5LPUxWjVFqacvQPPS5X0JnQo.roa (hash: tQhWNjB+Ou6m9KvKR4e5W4hPzK0Vwe1hIf4sW/iHBAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3c:53:e5:be:78:0d:68:26:ad:9a:26:eb:0a:33:48:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8477159d65b22568098b95952487300771b3ce5
        Validity
            Not Before: Apr 16 02:00:53 2025 GMT
            Not After : Apr 17 02:00:53 2025 GMT
        Subject: CN=56cef880780b87c195e0e369db906a6fe5740f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:45:1e:b8:2a:33:b4:2f:3e:80:77:f6:d1:ce:
                    16:8b:a6:78:2b:99:6e:b7:56:42:51:3e:7c:c4:44:
                    d8:57:b7:42:24:3b:52:77:d1:5e:77:e2:af:8b:89:
                    db:ad:08:34:6d:d4:2a:31:06:6d:03:9a:32:5f:a2:
                    e2:a1:2b:a7:37:15:29:c8:66:a8:f5:77:09:20:94:
                    9f:3f:0b:62:0b:75:74:49:1a:56:78:a2:12:63:d2:
                    b8:45:0e:50:a2:42:6e:5c:62:33:99:8b:02:73:dc:
                    3e:e9:40:55:8e:08:31:ad:2f:0f:c3:16:f4:23:35:
                    da:d8:f8:59:f9:b2:d2:d3:1e:6b:82:4e:02:d7:2b:
                    92:2b:75:42:d1:21:40:f2:64:3c:fa:96:11:33:d4:
                    50:2d:c5:02:e0:87:fa:ba:d7:e7:22:27:ae:92:9c:
                    cd:d9:e4:1d:74:83:01:ac:92:80:aa:85:8b:01:4e:
                    cb:44:0a:21:d5:db:c3:7e:09:36:d6:ad:cd:33:5a:
                    f9:66:46:41:49:c9:df:a8:24:a1:ba:f8:a9:0d:20:
                    3e:16:c3:33:c8:7a:9d:ae:a0:6d:81:78:82:6f:80:
                    c9:50:7d:13:41:95:0e:71:6d:2f:e3:40:cf:5d:dc:
                    da:df:5c:47:8d:00:59:bc:ff:06:c2:93:a7:5b:db:
                    e5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CE:F8:80:78:0B:87:C1:95:E0:E3:69:DB:90:6A:6F:E5:74:0F:01
            X509v3 Authority Key Identifier:
                keyid:E8:47:71:59:D6:5B:22:56:80:98:B9:59:52:48:73:00:77:1B:3C:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:9f:d8:55:9d:b5:b7:8b:b4:30:20:db:d9:be:9c:56:89:73:
         af:c5:98:d2:b5:00:0d:d3:64:36:d9:36:9b:dc:03:b6:94:a4:
         34:93:cc:0d:04:97:c7:e5:18:4a:77:a7:9e:24:5e:f9:4e:08:
         70:4e:c3:c9:94:ac:21:92:71:d0:7a:dd:d2:d1:e5:6e:bf:73:
         d3:89:d1:ef:20:a5:57:58:b7:95:06:6c:f4:af:60:44:7a:ce:
         c4:02:f1:1c:a5:6c:2f:16:5c:95:29:d8:d9:4d:db:c7:d3:b3:
         20:2f:a8:05:8e:df:85:18:00:f5:ec:37:5a:08:eb:01:5b:05:
         1c:69:9c:02:5f:d5:a7:07:53:97:45:e9:65:a6:02:7c:19:b3:
         a8:83:77:95:87:a3:22:e9:05:15:ec:6e:02:d6:ee:49:53:f3:
         7e:f8:64:26:cf:62:35:8d:a8:eb:de:b3:ef:20:33:7e:2d:25:
         cd:49:d4:00:25:4b:86:f4:03:e1:49:0d:56:38:a3:e5:e9:e1:
         8d:9a:bd:bf:b0:5c:ec:d7:d0:84:44:39:3d:1b:b7:00:8c:6e:
         a3:e5:1e:8c:81:58:0b:55:c6:62:9b:7d:43:5f:d7:a2:a9:84:
         5d:84:07:aa:a0:30:e5:98:73:1f:24:e9:8d:28:ae:e4:13:64:
         d8:be:06:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:40:19 2025 by rpki-client