Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
File:                     612h2h-h1CXPHcnoJtZe2u1s2Jg.mft (raw, json)
Hash identifier:          afiGTDpjXfmu+U27NPUWyG6kwCdbifLYOEntI0KCPAA=
Subject key identifier:   EF:30:3D:C3:31:E1:99:AE:D9:CA:B2:7B:C7:31:B1:F7:B1:C3:FA:AE
Authority key identifier: EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98
Certificate issuer:       /CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898
Certificate serial:       01974B8DBADAB86C42CB235B5DFF47D3C361
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
Manifest number:          1330
Signing time:             Sat 07 Jun 2025 18:01:08 +0000
Manifest this update:     Sat 07 Jun 2025 18:01:08 +0000
Manifest next update:     Sun 08 Jun 2025 18:01:08 +0000
Files and hashes:         1: 612h2h-h1CXPHcnoJtZe2u1s2Jg.crl (hash: CcvaTHdKmoySuGhpDc1G+WfyGB145Lw4NK9gDen06JY=)
                          2: T71-lLx_IRd0xdRoRiuKn01ramI.roa (hash: NdMh7OdN9MHFrjt5MDBsZ76I4BvEZisy0vA5gq92uHA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:ba:da:b8:6c:42:cb:23:5b:5d:ff:47:d3:c3:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898
        Validity
            Not Before: Jun  7 18:01:08 2025 GMT
            Not After : Jun  8 18:01:08 2025 GMT
        Subject: CN=ef303dc331e199aed9cab27bc731b1f7b1c3faae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9e:c7:df:db:60:d8:db:de:3a:b8:5f:d0:1b:
                    39:05:33:c9:33:ff:0e:bd:d0:74:86:7c:e5:63:0e:
                    37:ec:50:74:d8:84:19:15:18:4f:6a:cf:98:db:0c:
                    e2:c7:9f:03:a6:08:83:1f:f1:31:fe:a9:5a:4d:24:
                    49:19:18:88:ed:dd:43:5d:8a:0f:49:ef:d2:28:df:
                    84:2f:90:59:9c:1f:4b:86:10:27:d3:68:94:9e:48:
                    9e:ab:85:81:da:cf:39:a7:d3:c2:f7:fc:43:5d:12:
                    f1:ac:1f:07:58:1c:f9:86:26:bd:37:1d:01:3e:a1:
                    39:49:c4:07:a6:65:a0:bf:29:78:e1:94:03:3c:a5:
                    f8:6a:18:00:bc:2b:49:af:43:83:cd:b7:4d:a6:27:
                    30:68:e8:a5:36:6b:c2:62:e6:2d:fb:d3:cb:11:1a:
                    37:31:42:db:7d:c3:25:61:52:26:ed:99:6b:c7:37:
                    74:e1:21:41:f0:37:c7:eb:93:84:54:c0:ca:96:88:
                    1a:9d:3d:b4:1f:74:3f:63:2c:5a:19:10:8c:d4:77:
                    c0:71:75:8c:a3:f0:72:c6:71:f9:17:21:f0:53:8f:
                    e9:13:34:4e:7f:9d:56:a7:bf:f1:56:af:a0:de:77:
                    04:6e:b7:f3:c6:e6:b6:94:bd:00:73:f9:6a:c3:09:
                    48:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:30:3D:C3:31:E1:99:AE:D9:CA:B2:7B:C7:31:B1:F7:B1:C3:FA:AE
            X509v3 Authority Key Identifier:
                keyid:EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ed:03:a1:05:7d:cd:24:29:b7:fa:d8:bb:61:c4:f3:d0:c0:
         64:27:9a:3f:28:c8:3e:e1:0f:e8:61:8c:3d:cc:b7:22:b2:02:
         73:95:d2:3d:74:97:23:45:c9:27:5c:1c:64:be:f5:57:c8:c0:
         6e:e6:e0:53:14:1f:5a:cc:ff:bb:cd:7d:2d:ca:94:f7:8e:d7:
         a5:e4:29:33:ba:01:d9:a8:31:03:9d:93:7b:0e:5f:a0:71:50:
         20:c7:29:ee:30:01:d8:c3:6a:cb:ab:2b:04:6b:ab:ed:24:dd:
         f7:80:54:26:e1:2d:95:d8:4b:67:56:fe:bc:90:66:e2:6e:ee:
         ee:53:09:27:f4:07:99:6c:92:3e:6a:47:5e:51:f8:f3:61:26:
         eb:f1:cb:6c:c9:36:6d:a6:85:54:21:71:6d:dc:0a:bf:16:42:
         e5:46:00:92:88:db:b4:ae:cd:90:97:4f:a9:e9:09:05:47:8f:
         5e:5f:ae:b0:7b:bf:58:97:b2:40:f5:11:32:3c:e3:47:37:31:
         fc:39:9f:7c:52:54:13:9b:b8:a7:4e:43:78:7b:26:12:ea:ab:
         5f:7f:6e:4a:84:9a:0e:dd:f7:e0:59:07:7e:3e:0d:17:7f:b1:
         06:fe:82:b6:70:38:5f:a2:77:f1:3f:9e:92:85:b1:08:13:83:
         c5:b7:7c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:01:18 2025 by rpki-client