Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft
File:                     6UWUa-c3BQO-r75A4REVudyVO8M.mft (raw, json)
Hash identifier:          EEoQlMJysr3MsJ4ifSzBbf2q+SxD2siFultFLexRfzI=
Subject key identifier:   8C:CD:BF:2A:48:47:78:9B:55:65:29:57:42:03:85:FF:63:8A:78:DB
Authority key identifier: E9:45:94:6B:E7:37:05:03:BE:AF:BE:40:E1:11:15:B9:DC:95:3B:C3
Certificate issuer:       /CN=e945946be7370503beafbe40e11115b9dc953bc3
Certificate serial:       01974BC47E4066AB62C136633A69C01B30ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft
Manifest number:          0D8C
Signing time:             Sat 07 Jun 2025 19:00:57 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:57 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:57 +0000
Files and hashes:         1: 6UWUa-c3BQO-r75A4REVudyVO8M.crl (hash: p3OgCiWgBIGOrZFJYpa2U6mZvja57+SlbePtamItrpY=)
                          2: QPTMBPa1R1iyVMpj2m0ksKZtNe4.roa (hash: zRiBFcC8k+QThl68UQZBhw2tExgPORwu8ZM6Z3ofO4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:7e:40:66:ab:62:c1:36:63:3a:69:c0:1b:30:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e945946be7370503beafbe40e11115b9dc953bc3
        Validity
            Not Before: Jun  7 19:00:57 2025 GMT
            Not After : Jun  8 19:00:57 2025 GMT
        Subject: CN=8ccdbf2a4847789b55652957420385ff638a78db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b7:43:ed:e0:72:8e:12:d9:60:cb:8e:6c:9e:
                    55:de:f7:4d:32:41:ea:0c:ff:cf:ea:57:8f:7c:71:
                    eb:3d:1e:29:37:32:33:ff:ed:14:c5:d6:2a:5c:12:
                    18:82:b6:19:01:7f:a9:97:a4:5a:39:d6:3c:2a:63:
                    4a:72:bf:e3:72:6b:16:13:48:c7:22:19:90:21:3e:
                    60:cf:60:67:7a:3e:8f:0b:bf:33:0c:8b:ae:8a:23:
                    e3:1a:65:6a:67:95:8e:35:73:0a:7d:15:72:f9:37:
                    53:33:48:0d:f3:6c:5b:84:78:d6:d2:84:c4:c6:01:
                    e9:64:67:10:0b:0d:0d:e1:5f:35:c6:77:31:66:29:
                    df:70:a4:40:d5:06:20:73:31:43:a5:db:7c:8c:82:
                    c5:31:9f:dd:e2:7e:1f:ab:5a:46:bb:be:21:05:2e:
                    41:16:39:75:22:6e:c5:8e:34:77:22:ed:9d:ba:4e:
                    27:38:1e:f4:7f:d9:7f:1c:48:50:cc:0c:62:18:e9:
                    c2:5c:06:64:25:91:b2:a6:50:c4:9b:f1:52:1b:32:
                    58:3e:61:64:e9:8e:d8:7e:e4:a9:fe:f1:61:83:f5:
                    6d:30:80:78:dd:5a:87:9e:c8:c7:fc:ef:e5:87:61:
                    72:49:24:58:d0:52:6c:38:31:07:21:73:d2:36:58:
                    2f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CD:BF:2A:48:47:78:9B:55:65:29:57:42:03:85:FF:63:8A:78:DB
            X509v3 Authority Key Identifier:
                keyid:E9:45:94:6B:E7:37:05:03:BE:AF:BE:40:E1:11:15:B9:DC:95:3B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:88:2b:ba:7c:7c:0c:fe:a8:7f:4d:54:4c:33:e1:b5:42:34:
         59:54:36:cd:b6:77:e8:60:b9:56:50:20:a1:ed:20:f1:00:72:
         3c:13:1c:62:48:8f:72:e0:37:26:38:23:4b:6a:f2:86:33:95:
         9c:fb:7b:de:c4:eb:6a:e4:8f:bc:ed:92:e3:69:13:e6:16:21:
         b5:6c:3d:02:ed:30:af:a9:c1:48:65:aa:d2:27:a7:60:9f:b2:
         e6:ae:50:78:6d:63:e5:96:dc:3f:70:74:0b:fe:2c:d2:6c:bb:
         12:41:6b:25:62:a6:cb:1b:52:28:ba:76:b0:bf:0a:29:78:fc:
         52:35:eb:34:a7:f3:84:6b:32:d9:de:7e:10:ac:86:75:2f:9a:
         17:c4:fc:0b:b2:be:01:14:39:a0:7c:82:d7:e6:0b:5b:7a:9e:
         a1:7f:80:4d:8b:67:32:ca:20:a8:3b:72:69:59:74:c2:e1:c8:
         12:1f:c8:92:9c:6a:bd:ab:12:4c:fb:83:a7:0b:e6:71:ab:6b:
         a2:68:ca:05:57:67:0c:49:bd:06:68:f9:59:40:df:a8:41:b9:
         62:3e:a6:66:a4:86:a0:09:68:a1:be:ff:50:01:5b:4b:57:85:
         58:0b:a2:95:5f:8a:d6:2b:4d:53:8c:32:1f:d3:a4:8d:e6:0a:
         48:e6:73:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:09 2025 by rpki-client