Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
File:                     4tGVYU7uSi27UfWyHmnRbE4UQa8.mft (raw, json)
Hash identifier:          FSXMd+lCD2EQpqT3+5TsJI/4euauU2yU7N5dpP9IDYw=
Subject key identifier:   5C:95:C8:A0:A1:DB:A0:08:BD:8B:F0:08:29:CC:6B:B4:2D:D8:4C:1F
Authority key identifier: E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF
Certificate issuer:       /CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
Certificate serial:       019759B6E35F69C68AE8620A11D8BF2B916E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
Manifest number:          6A
Signing time:             Tue 10 Jun 2025 12:00:47 +0000
Manifest this update:     Tue 10 Jun 2025 12:00:47 +0000
Manifest next update:     Wed 11 Jun 2025 12:00:47 +0000
Files and hashes:         1: 4tGVYU7uSi27UfWyHmnRbE4UQa8.crl (hash: Pqq/30Pm9iP1zOIlcVNBT9gwka5/rmb8oqQ6KDUz6RE=)
                          2: I6b16o_Ase2s-4OxbTzP2XU7AO8.roa (hash: 6HiWXRxkCGNhrpcrbbFpGCz17IhI/bbEhWJf+70NeCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 12:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:b6:e3:5f:69:c6:8a:e8:62:0a:11:d8:bf:2b:91:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
        Validity
            Not Before: Jun 10 12:00:47 2025 GMT
            Not After : Jun 11 12:00:47 2025 GMT
        Subject: CN=5c95c8a0a1dba008bd8bf00829cc6bb42dd84c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c6:14:0d:e3:d7:79:4a:19:b7:04:e8:f3:b4:
                    44:d2:a1:66:05:1d:fc:b3:65:8a:7e:71:c0:06:4b:
                    af:d9:82:86:60:73:dd:45:c2:4f:23:58:06:4c:f6:
                    7c:e0:93:a3:e1:7a:db:9e:d7:93:29:87:78:5f:79:
                    3a:56:ac:b1:83:02:4d:1c:56:ae:45:ae:7b:83:fd:
                    7e:d6:17:f4:c9:c9:a5:1f:ea:b7:56:da:e8:2b:eb:
                    b7:5f:55:3d:1e:f9:10:ce:1d:9f:a7:4f:31:2d:17:
                    7b:7e:a6:33:7f:ca:42:d4:4d:e1:58:f0:39:a5:37:
                    5e:56:a3:74:87:36:d1:c3:e0:12:20:e5:52:33:60:
                    16:03:30:b7:44:9e:7a:47:f9:6f:fc:51:13:ab:f7:
                    d8:f8:f7:04:fc:e5:9f:1b:39:72:a4:eb:f3:3f:ab:
                    b1:25:d9:fd:5c:01:6d:78:65:26:3d:a7:10:1a:fb:
                    9b:d4:d3:16:6d:32:b1:cf:16:8a:55:3b:2b:50:d8:
                    ae:95:be:56:b1:4a:65:8f:e3:3c:07:34:4f:2a:c8:
                    1e:bf:37:d5:e5:cd:ab:e8:cb:57:a4:d7:61:05:be:
                    7c:1f:9f:16:7c:17:d9:3e:13:d7:39:0f:81:85:ff:
                    00:50:46:7a:60:fc:ef:43:a7:90:67:a7:e7:92:12:
                    c9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:95:C8:A0:A1:DB:A0:08:BD:8B:F0:08:29:CC:6B:B4:2D:D8:4C:1F
            X509v3 Authority Key Identifier:
                keyid:E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c0:39:9c:a0:69:2e:f7:a6:90:74:a0:2a:f7:76:86:90:53:
         14:06:0c:be:b3:23:3e:d2:ae:0c:a3:1c:0f:09:06:80:b9:fd:
         ff:e3:47:e0:ed:33:9b:42:d1:06:2a:24:23:a4:1e:4b:f3:7f:
         e2:23:42:ec:e4:0a:e0:a6:61:2b:b3:9d:40:50:b5:9c:cb:5a:
         4c:14:76:f6:db:75:49:f1:00:c6:2e:53:3d:8c:ab:a2:fe:7e:
         1b:9e:e2:b5:f3:43:09:bc:e9:bd:f2:46:ad:a3:63:26:e4:e7:
         45:62:49:97:4c:34:dd:a1:c5:42:6e:4e:00:b8:c3:00:c6:25:
         c8:90:a3:e0:98:32:de:1b:8b:b9:01:bd:7e:5c:83:3c:80:19:
         13:1d:21:13:81:3e:87:14:bd:13:c2:c7:ce:fb:e2:96:a5:1a:
         30:3d:31:2b:f4:ef:99:64:9e:82:a2:dc:d9:fe:6e:46:ac:a7:
         a0:5d:2b:60:b4:47:62:a7:98:16:0b:f1:f0:4d:d2:3d:08:a9:
         42:e8:90:88:10:04:e2:e7:9c:af:05:48:14:dc:9e:43:fa:00:
         13:6e:2c:d7:08:4f:50:6e:ce:88:0c:72:56:fd:5a:81:54:a5:
         36:1e:28:18:8c:d8:04:60:2f:e9:66:f0:2f:81:3a:b1:a6:f1:
         aa:31:41:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:52:09 2025 by rpki-client