Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
File:                     5G6atHypH6EyVlhgvN2aEHugMuQ.mft (raw, json)
Hash identifier:          zzAGwrweIHZsV0tItAgph4A8/bspNne55zS6g7f2kTY=
Subject key identifier:   8C:57:AD:2A:A5:2C:82:FB:79:91:39:A8:E3:B5:30:1B:57:95:8D:11
Authority key identifier: E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4
Certificate issuer:       /CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
Certificate serial:       01958C613299AC05E9D3A3F083B41DA7B966
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
Manifest number:          087E
Signing time:             Wed 12 Mar 2025 22:02:14 +0000
Manifest this update:     Wed 12 Mar 2025 22:02:14 +0000
Manifest next update:     Thu 13 Mar 2025 22:02:14 +0000
Files and hashes:         1: 5G6atHypH6EyVlhgvN2aEHugMuQ.crl (hash: NaY9mYoiwyynQGd/pHWpGClSP2zaiwhKeN0Z4eVg3k8=)
                          2: ZMyt0wlwwtfEVeBGSMwWH5LMwOs.roa (hash: ZRcLJw84jWUkZxRHh71cpWt8gGeiHiTOOmsOGRDFxnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:61:32:99:ac:05:e9:d3:a3:f0:83:b4:1d:a7:b9:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
        Validity
            Not Before: Mar 12 22:02:14 2025 GMT
            Not After : Mar 13 22:02:14 2025 GMT
        Subject: CN=8c57ad2aa52c82fb799139a8e3b5301b57958d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bf:29:aa:45:52:5e:9c:37:45:95:ca:64:94:
                    25:d6:4d:38:03:e4:ad:c2:46:af:00:1c:6d:3e:8f:
                    27:93:85:b8:d8:9b:f4:52:0d:76:c0:e3:98:81:71:
                    2f:a7:7d:08:03:02:ed:68:46:60:b4:d0:dc:d6:79:
                    79:25:91:6d:6c:b6:5c:09:f6:9b:18:16:8c:70:b9:
                    54:a0:7c:3a:e4:7f:ee:c6:ad:90:f5:03:09:0f:45:
                    1c:a3:76:75:bb:2d:b6:26:ec:ef:b9:36:91:99:37:
                    63:24:c5:7d:0e:06:d6:4a:2c:2f:c1:2e:5b:48:4d:
                    0d:ce:27:73:90:df:c1:9e:c1:b2:cc:7f:4e:88:bb:
                    fc:d8:fd:c3:78:3b:7f:d4:5b:d9:06:8c:f7:7a:57:
                    58:27:66:5d:3b:68:b4:fd:09:87:b2:d8:e9:2a:fe:
                    81:0c:00:26:ca:29:97:ba:54:39:7d:f5:84:ba:6c:
                    66:ff:69:81:11:a3:f2:4d:34:32:8a:f2:a3:dc:8d:
                    8e:f9:4f:32:19:8e:3d:fd:f4:0a:a6:5d:c4:bc:52:
                    9c:3c:19:8a:b0:84:66:e9:0a:42:4c:64:83:11:01:
                    8d:05:87:7b:c5:21:57:75:a2:e5:4e:92:c4:38:4e:
                    3e:3c:e8:71:17:3b:69:2a:b5:16:79:7a:c9:5f:e0:
                    ce:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:57:AD:2A:A5:2C:82:FB:79:91:39:A8:E3:B5:30:1B:57:95:8D:11
            X509v3 Authority Key Identifier:
                keyid:E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:7c:4d:af:6d:2b:ec:8f:b9:ba:8c:49:74:71:53:5a:27:9f:
         5c:39:c1:42:12:17:53:0f:e8:90:76:5a:fb:fc:66:ef:94:50:
         6a:c9:f3:14:58:4f:7f:9c:18:4c:eb:09:25:06:5a:0a:4e:f1:
         08:91:e6:95:ad:9b:51:9a:d2:9c:e9:c0:06:2d:8f:07:62:83:
         ab:da:dd:7d:11:be:42:43:01:d1:67:9d:03:e7:06:0e:ee:17:
         51:b1:67:ca:0d:2b:f2:ad:23:9d:84:1a:b9:79:d7:92:f2:a6:
         d4:c0:e0:cc:78:51:a3:09:9f:f0:95:0e:d5:53:53:97:92:c4:
         26:ca:7f:8a:2b:28:b0:25:79:9a:15:c5:c5:8a:ce:db:7a:fb:
         5f:b8:f8:b5:0c:77:6c:50:6f:cd:db:37:84:95:e1:c6:f8:6a:
         c6:f4:55:92:06:a3:ac:f4:ac:ef:d8:5c:65:91:97:97:2b:53:
         74:65:6d:ee:0c:8b:1f:16:27:ba:68:40:56:7a:9c:b3:82:c1:
         56:de:2c:fe:82:ce:8e:77:72:03:3c:17:cd:ac:e2:9e:d5:f8:
         cd:25:22:55:36:21:b9:c4:de:1a:6a:1c:35:f8:e0:1c:b8:c1:
         0f:a2:42:c2:88:08:e9:ae:fc:e5:8f:cf:3e:a6:89:fc:c3:28:
         e9:21:93:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:30 2025 by rpki-client