Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
File:                     9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft (raw, json)
Hash identifier:          419RWnh8v7Jng7TXG9xjBZDKQBL/eUzFvOk9xIDVxwU=
Subject key identifier:   06:77:94:05:33:0B:EE:8D:AC:06:E8:D8:18:7C:EA:2B:AB:3F:B0:F4
Authority key identifier: F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
Certificate issuer:       /CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Certificate serial:       01960AF9B2CE0F8DD78EE8C7603C8EAD41BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
Manifest number:          04A6
Signing time:             Sun 06 Apr 2025 12:00:58 +0000
Manifest this update:     Sun 06 Apr 2025 12:00:58 +0000
Manifest next update:     Mon 07 Apr 2025 12:00:58 +0000
Files and hashes:         1: 9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl (hash: KV8PPDs4iHg4MRvZEpSKOOQt2oAD/VZ4JoqHp0OBvuI=)
                          2: GaOIxHYrGt_x1xNOwfVe1mM1uls.roa (hash: 6h4qg1f7k4UwgHPBRYv76SUwfsVkd9pZo7L1FeBQMpI=)
                          3: HSlsuvX_aWV7qj55zHqBxTYxKjI.roa (hash: RPNU8y7M0Fw75SCJKC5YPWyQlunqmjKvNMrNz+QmV7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Apr 2025 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0a:f9:b2:ce:0f:8d:d7:8e:e8:c7:60:3c:8e:ad:41:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
        Validity
            Not Before: Apr  6 12:00:58 2025 GMT
            Not After : Apr  7 12:00:58 2025 GMT
        Subject: CN=06779405330bee8dac06e8d8187cea2bab3fb0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:85:59:78:fb:90:1f:df:bc:1d:5d:6d:83:95:
                    bd:93:26:f3:be:49:59:53:b6:8d:09:1c:70:eb:a4:
                    12:c1:e7:5f:51:b7:2f:c6:07:82:86:a3:4a:5a:d6:
                    5d:58:03:f3:e8:8e:e8:cc:61:3f:a8:4e:cb:0e:fd:
                    fc:be:7c:50:65:32:73:c2:f9:b2:03:62:e3:85:3a:
                    5c:4a:13:c0:16:b0:58:35:c3:e6:4a:89:c0:06:a9:
                    18:c3:a2:41:f6:27:07:d5:79:b8:fe:e9:5e:42:00:
                    82:bb:ee:47:fe:80:ba:7d:12:d0:5e:c4:6a:84:31:
                    da:a9:16:3d:5b:9a:f5:4e:6f:2f:5c:8c:45:e9:b5:
                    fe:a3:e1:e7:e7:4a:5a:7f:59:93:00:ee:54:32:f7:
                    cd:eb:8a:26:24:b4:2a:ea:a1:7f:9d:bc:8c:a2:4d:
                    e5:1b:67:ed:60:29:d7:f1:05:47:e9:ed:b1:a1:b5:
                    02:60:07:8a:da:1e:ee:a8:1f:75:69:1b:8e:7a:ab:
                    39:ca:a9:32:2f:3c:27:ef:64:88:ee:53:32:c4:60:
                    c1:03:6b:2e:16:6a:76:e7:ca:e7:55:4f:c7:bd:c6:
                    fa:31:8c:6c:27:7f:f0:f4:0a:16:c6:36:16:d2:da:
                    7f:10:bd:c8:4e:4b:86:90:75:e0:61:f3:d4:8d:dd:
                    da:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:77:94:05:33:0B:EE:8D:AC:06:E8:D8:18:7C:EA:2B:AB:3F:B0:F4
            X509v3 Authority Key Identifier:
                keyid:F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:96:60:38:f7:47:aa:eb:dc:99:79:ea:27:1a:a5:55:ba:e1:
         ab:2b:46:6f:30:cf:e3:d7:f3:53:40:8c:66:1c:d3:8f:55:ae:
         46:16:58:37:ba:dc:61:f8:33:94:55:c1:ca:05:63:52:6a:17:
         33:75:38:50:9f:b6:d5:51:05:13:75:3c:b0:7e:8e:05:ad:1e:
         21:3c:6b:03:43:8a:e4:f6:6b:cc:85:6e:4c:5f:a4:e1:a8:d7:
         9b:3f:67:16:26:2c:22:f8:23:92:f6:70:55:32:ae:d1:c9:34:
         8c:73:6b:2b:e5:b1:07:88:8a:52:8a:f9:2e:d0:2f:cb:f2:64:
         f3:ae:f9:af:ba:eb:a9:f8:b4:b4:33:60:0e:0a:ad:2c:e1:dc:
         ed:dc:20:83:56:57:9e:43:6c:95:6e:b7:c0:04:02:62:e2:e6:
         50:70:a4:ad:7c:68:1c:74:72:ff:a4:30:f1:45:87:44:53:42:
         7a:17:a8:b2:2b:fe:44:56:06:e3:db:c5:79:c0:9e:63:a2:f5:
         af:f9:b5:a3:43:fa:0d:c1:ea:ce:a8:e3:37:45:ce:15:a2:7c:
         5a:4d:40:f0:32:2f:24:19:21:72:90:4d:bf:39:ea:dd:35:fc:
         4b:c8:44:4f:17:df:ff:c1:f5:aa:c4:91:cd:3e:b9:66:24:ef:
         57:34:5e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:06:47 2025 by rpki-client