Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
File:                     6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft (raw, json)
Hash identifier:          Ee/sZjtVNS1sXCeL/UCX7zVoOWmPmQzxdFS8hBAMe3Y=
Subject key identifier:   46:BD:C9:09:70:98:F6:6C:FE:45:87:E6:2D:CB:03:3C:DF:5F:EB:A1
Authority key identifier: E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34
Certificate issuer:       /CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34
Certificate serial:       019651C91A2D61A29F052AADCBD1458B750D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
Manifest number:          0F72
Signing time:             Sun 20 Apr 2025 06:00:55 +0000
Manifest this update:     Sun 20 Apr 2025 06:00:55 +0000
Manifest next update:     Mon 21 Apr 2025 06:00:55 +0000
Files and hashes:         1: 6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl (hash: ldp1sJB/jZXVmSPa3GY4DJmp+WcwIsq+1tOfMVMMpDI=)
                          2: syj71zZ8MwWTuavJrSv9ey-GiNY.roa (hash: OwP0pURWBASyJxlo+FTFHbY+Smo6gzpAgQ+Dz8xZ608=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 06:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:c9:1a:2d:61:a2:9f:05:2a:ad:cb:d1:45:8b:75:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34
        Validity
            Not Before: Apr 20 06:00:55 2025 GMT
            Not After : Apr 21 06:00:55 2025 GMT
        Subject: CN=46bdc9097098f66cfe4587e62dcb033cdf5feba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:be:fe:a8:91:31:7c:d9:58:2c:f8:bd:b0:fe:
                    b0:d3:9d:66:04:0b:4f:ce:8e:34:16:1d:2b:9a:24:
                    3c:62:34:38:a5:d8:69:05:96:a9:4c:21:28:f9:e3:
                    55:38:6b:8d:79:df:d3:78:c7:a3:ab:66:e6:a7:61:
                    38:c5:cd:58:63:98:9c:17:3d:21:90:35:04:a8:3c:
                    05:0a:7d:c3:e8:77:ff:90:c3:f3:94:0d:dc:0d:c0:
                    27:da:93:7a:cc:9a:cb:dd:84:7e:b8:52:55:13:a5:
                    b9:5f:3a:49:c2:bc:29:b0:4c:93:86:da:0c:76:c1:
                    5b:b6:e7:91:75:5e:32:dd:30:cd:b9:f2:c6:a0:51:
                    cf:41:61:15:e9:40:31:c1:78:6f:22:7b:cc:a6:08:
                    aa:c0:75:a9:b1:62:9b:02:7e:5f:d4:48:13:1c:fa:
                    34:90:10:23:19:df:34:74:ca:11:d3:5a:9b:88:23:
                    c2:7f:fb:09:49:b2:c7:6a:8b:c4:ae:83:df:c8:d1:
                    b8:9d:e6:1d:29:3d:3b:98:c3:f3:91:02:cb:d1:5c:
                    16:11:1e:30:e2:36:e6:19:76:22:15:74:98:bf:d2:
                    72:aa:9b:cf:eb:6f:7f:79:eb:41:44:46:9a:2b:32:
                    28:13:44:5e:93:a6:5a:54:07:26:1b:75:c4:f0:fd:
                    5c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BD:C9:09:70:98:F6:6C:FE:45:87:E6:2D:CB:03:3C:DF:5F:EB:A1
            X509v3 Authority Key Identifier:
                keyid:E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:fb:fb:f6:4e:e3:1e:93:5f:5c:54:d0:be:fb:62:b3:b1:8f:
         69:5f:d8:86:2b:88:be:d9:35:56:6e:ce:ac:2a:cb:b7:5e:6d:
         5c:d5:a5:06:4e:3c:1d:01:e8:2f:07:52:91:24:09:af:3b:02:
         31:e6:ed:32:7e:fb:02:ec:8c:0d:8f:d8:9f:fa:69:18:ca:95:
         38:23:c1:41:e9:b2:54:2c:d3:f5:56:b9:3e:a5:2e:7c:08:92:
         33:89:a7:61:67:80:da:43:de:9f:12:13:c3:b8:7a:19:29:b7:
         76:17:e1:5f:f6:c1:73:e2:0f:02:cb:0f:2b:56:a7:7a:36:7e:
         09:1b:b8:47:a5:ac:29:cb:3b:2c:7f:8d:68:e3:8a:66:2d:72:
         ff:94:96:17:05:3a:38:f5:67:a9:69:14:c5:50:3f:83:23:03:
         77:57:78:5d:ec:2b:c6:3e:dd:62:cc:f9:5f:82:69:96:58:0b:
         1a:46:ef:dc:b5:12:a2:b0:cf:32:ed:f4:76:69:e8:6b:9c:0b:
         11:a2:4b:d5:d6:2a:e8:98:4a:9d:2e:ed:24:4d:03:4f:3e:4a:
         ff:1d:59:aa:64:90:70:59:b2:c4:88:c3:56:65:32:70:9d:b2:
         8d:84:65:1f:50:13:c5:7e:55:ad:f9:14:f3:9c:c1:2f:05:35:
         2d:a2:18:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:37 2025 by rpki-client