Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.mft
File:                     6W0H10zRSlpDn0g3WMQk260zl3o.mft (raw, json)
Hash identifier:          OQa7CHjSRYxWFV/bCW9PIwgVbQv63NlWRe9K9OaG3kQ=
Subject key identifier:   BC:2B:F9:3C:F6:CF:52:0E:79:56:5B:A5:67:30:3A:72:71:07:AC:87
Authority key identifier: E9:6D:07:D7:4C:D1:4A:5A:43:9F:48:37:58:C4:24:DB:AD:33:97:7A
Certificate issuer:       /CN=e96d07d74cd14a5a439f483758c424dbad33977a
Certificate serial:       01965538A780B24B178FD2DEDE9FB80A11CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6W0H10zRSlpDn0g3WMQk260zl3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.mft
Manifest number:          0E5F
Signing time:             Sun 20 Apr 2025 22:01:38 +0000
Manifest this update:     Sun 20 Apr 2025 22:01:38 +0000
Manifest next update:     Mon 21 Apr 2025 22:01:38 +0000
Files and hashes:         1: 6W0H10zRSlpDn0g3WMQk260zl3o.crl (hash: Ujx7NLVPRk4mDee0ZKdigwO1TwXgHjz1kmx+REg6zDE=)
                          2: cWBtpv0lbtjjKIiQC4VphdrpJsI.roa (hash: 53d/EkPX5lZbgRgCOrdlmmeWh1Ezm+rcdsaRC9uISUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6W0H10zRSlpDn0g3WMQk260zl3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 22:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:38:a7:80:b2:4b:17:8f:d2:de:de:9f:b8:0a:11:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96d07d74cd14a5a439f483758c424dbad33977a
        Validity
            Not Before: Apr 20 22:01:38 2025 GMT
            Not After : Apr 21 22:01:38 2025 GMT
        Subject: CN=bc2bf93cf6cf520e79565ba567303a727107ac87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c7:cd:37:b1:61:43:56:a2:1d:58:d6:c6:f5:
                    3f:1a:b0:31:a1:96:0b:d1:52:93:74:12:68:75:76:
                    73:19:ad:ad:7e:11:d4:59:1b:dc:ee:ce:f1:ee:4b:
                    30:95:6c:45:c5:fc:fd:97:2e:3c:8c:bd:aa:b7:bf:
                    e2:2e:71:d2:a1:97:05:62:f7:0b:9e:a3:62:dd:7b:
                    0c:d0:83:7f:cb:b1:2e:1c:80:d1:d7:37:31:46:b2:
                    df:65:f6:d0:dd:89:53:bf:d5:0d:49:7e:c5:50:37:
                    50:97:f8:8b:e6:a3:06:de:7a:04:55:a5:81:ae:37:
                    20:29:7c:7a:07:3b:5a:d1:9f:de:4b:48:46:43:bb:
                    1a:55:ec:c9:02:08:9e:6e:f8:78:cd:09:1b:74:4c:
                    91:7e:8e:2c:d4:ce:81:c9:0f:5a:04:e4:b4:65:f8:
                    dd:8a:04:32:f6:5a:d7:dc:28:08:76:16:f6:3a:08:
                    dd:b8:5b:26:64:20:c0:2b:51:5e:fa:ce:80:10:6a:
                    3d:18:27:7c:45:e7:cc:14:ad:56:16:46:f8:c7:10:
                    c1:12:81:64:d7:11:be:50:00:90:cb:6d:75:25:3d:
                    19:3e:fa:7b:7e:57:b7:d6:23:95:b2:2c:67:c9:b3:
                    a8:b2:d4:96:34:5a:9c:86:e3:79:19:94:74:18:62:
                    96:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:2B:F9:3C:F6:CF:52:0E:79:56:5B:A5:67:30:3A:72:71:07:AC:87
            X509v3 Authority Key Identifier:
                keyid:E9:6D:07:D7:4C:D1:4A:5A:43:9F:48:37:58:C4:24:DB:AD:33:97:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W0H10zRSlpDn0g3WMQk260zl3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:26:79:c3:55:ff:95:7b:b0:62:88:35:00:89:45:ed:cc:56:
         b7:e0:9a:c5:e3:ab:00:b7:1e:90:4c:e0:07:d0:5f:82:9f:fc:
         47:10:4d:0d:e1:e1:61:3d:32:d0:e7:32:8c:ea:b6:fb:c4:3a:
         15:1d:ed:b0:61:8b:c5:2e:e0:61:1b:2d:0f:31:10:34:bd:e2:
         26:5c:55:1c:20:2e:bd:be:f9:22:52:4b:7c:41:52:60:17:ed:
         01:5b:85:c8:f8:e1:d0:3b:5b:bb:c4:b8:06:26:30:44:0c:41:
         0a:f0:76:f8:55:3f:74:b8:43:d8:06:27:d7:20:e9:c5:db:d0:
         be:09:14:2d:05:7c:6a:e6:78:13:83:ae:26:e9:3d:9c:47:9c:
         3b:00:14:4e:c7:20:f2:a6:e7:f9:24:4f:fc:c8:42:d7:24:bc:
         e8:12:2c:53:9e:df:7a:a4:5e:9a:65:9b:84:d8:3e:ac:7d:6d:
         ec:3c:bf:ce:18:7a:25:ef:97:5d:0b:6f:3e:91:1c:d9:e4:b1:
         65:d4:0a:90:96:52:6e:f6:0d:16:66:82:50:69:36:63:25:01:
         2b:c4:3e:0e:2b:f0:6b:11:94:f9:51:b9:65:48:dd:9c:82:c9:
         87:e1:5e:24:fa:eb:17:ce:0e:87:c5:bc:da:25:b2:aa:84:43:
         18:bf:cd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:12 2025 by rpki-client