Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft
File:                     cke6Q-JwyYvcZCqePCGMpSTrD1M.mft (raw, json)
Hash identifier:          yl0b6Qr6Q6OYL0tsfFb1DN8QRs+7esFD0aQbK5bzlOo=
Subject key identifier:   6B:17:27:5A:FE:E0:AB:C9:84:9D:41:62:24:99:33:13:A6:95:E2:67
Authority key identifier: 72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53
Certificate issuer:       /CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
Certificate serial:       01961E492B3323CE611432018EFF2D3C44D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft
Manifest number:          14E1
Signing time:             Thu 10 Apr 2025 06:00:33 +0000
Manifest this update:     Thu 10 Apr 2025 06:00:33 +0000
Manifest next update:     Fri 11 Apr 2025 06:00:33 +0000
Files and hashes:         1: cke6Q-JwyYvcZCqePCGMpSTrD1M.crl (hash: K1SjNAPRqwa1dwvlnN7iO2AXolXQFRaqaxnqcRuYbjE=)
                          2: icOqkD3iZ1uQhUc1od-t1KdaP8Q.roa (hash: R662CVA1MQV0WqGE3hZcMqQgQJpHzJMBr1PqZkwqav0=)
                          3: nYSUhhKNV1AT2H-4naVza27ZDOA.roa (hash: o6xNr5Ke3qqZYzCqrvTkv0D8Qt/kg5dwkN1dH2Aaq3g=)
                          4: oKKHmbobidoKS5C06ppNNL6bp18.roa (hash: wyOlRknkUM9gakv2SZkDnucrjsYyyPoyhVclTbA9HM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Apr 2025 06:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1e:49:2b:33:23:ce:61:14:32:01:8e:ff:2d:3c:44:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
        Validity
            Not Before: Apr 10 06:00:33 2025 GMT
            Not After : Apr 11 06:00:33 2025 GMT
        Subject: CN=6b17275afee0abc9849d416224993313a695e267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:bb:d0:d4:ef:25:1b:07:be:f5:71:a1:bc:8d:
                    59:0a:ea:f6:da:df:be:55:5a:4a:7b:56:14:d4:f0:
                    b8:d3:1d:cc:63:f3:cd:6a:c7:39:7d:a5:b0:a1:cb:
                    ea:07:8a:9b:6e:c9:f7:33:20:56:e5:7d:db:31:04:
                    63:15:10:64:cc:6e:7f:c5:85:3f:80:18:91:3e:c7:
                    09:ee:a9:46:b8:91:a9:68:8c:af:67:18:ed:d6:44:
                    18:29:fd:36:46:93:1f:d0:5e:0d:bf:ce:53:4f:c1:
                    d6:42:e6:1e:c9:a2:51:66:e6:61:fb:aa:54:29:fc:
                    80:5f:ae:5a:35:df:09:c9:09:78:02:3a:54:71:57:
                    53:41:57:83:6c:5f:53:a3:fe:9a:08:4a:83:38:f1:
                    1a:6d:09:76:8a:84:c8:94:b9:86:db:0d:9e:ee:f8:
                    bc:0d:11:de:41:50:b5:6a:56:dc:f1:6a:15:38:47:
                    e4:d4:a6:e4:72:47:58:c5:5e:ce:fc:50:26:78:12:
                    5d:a3:93:69:0e:7d:07:9e:50:52:02:13:74:fd:5d:
                    1e:9f:64:26:21:2e:93:71:21:66:b6:e4:41:9c:af:
                    7d:18:7b:b3:24:bc:c3:f4:04:33:8c:23:c8:f3:d0:
                    22:b2:91:fd:4c:56:cb:4a:7e:bc:86:16:5c:f1:51:
                    da:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:17:27:5A:FE:E0:AB:C9:84:9D:41:62:24:99:33:13:A6:95:E2:67
            X509v3 Authority Key Identifier:
                keyid:72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:a1:36:5b:a8:fc:ec:8c:da:6a:67:10:87:9d:d7:8c:3f:29:
         b8:76:ff:79:a6:3d:81:dd:69:3c:cb:81:6b:e5:ad:14:ef:9d:
         f0:cc:bd:35:b4:0a:6b:a8:50:f9:5a:bb:9a:39:0b:f4:5a:a8:
         95:01:2f:88:08:45:db:9a:82:68:d1:7c:7c:74:c4:7e:8d:cd:
         38:87:2b:ae:94:fa:1e:08:44:0d:65:4b:41:73:08:40:6a:df:
         f3:7e:ae:45:1c:b0:98:1d:e5:c1:0e:be:e7:bb:06:95:9f:86:
         38:b3:3d:e5:dd:4a:cc:3d:9c:98:83:ce:0f:d7:c1:95:21:4d:
         06:69:60:f9:71:b4:16:9a:c6:19:6c:2a:0c:c4:1c:44:42:13:
         f9:9d:a2:75:ba:8d:db:b5:76:7c:b1:91:8e:3d:a5:36:92:dd:
         86:a5:af:48:bf:25:8e:6b:b2:a0:d5:fa:c6:48:3a:3a:95:ca:
         99:ca:87:b3:5d:54:04:eb:b0:3b:95:c8:7a:a9:fa:a2:6b:ac:
         0d:42:b7:ae:e8:f7:32:02:2c:3e:eb:19:31:80:19:ae:78:99:
         e1:cb:59:21:77:82:33:c0:9d:11:4e:7a:9a:4c:52:d9:47:bd:
         91:0b:9b:b8:34:aa:26:83:fb:ee:f4:54:6f:1b:15:8c:64:e5:
         37:f6:53:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:37:04 2025 by rpki-client