Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft
File:                     9rpgBVyyum_cmnX99hk3GwBVk84.mft (raw, json)
Hash identifier:          HndAOcjLWmJRw5HzfJOPhsHoemd04kzKRSHQA9pIOLM=
Subject key identifier:   34:59:35:3F:73:02:EC:F1:4C:2A:4E:0A:46:88:59:D1:AE:A3:46:F7
Authority key identifier: F6:BA:60:05:5C:B2:BA:6F:DC:9A:75:FD:F6:19:37:1B:00:55:93:CE
Certificate issuer:       /CN=f6ba60055cb2ba6fdc9a75fdf619371b005593ce
Certificate serial:       019660CDE937E69847580C987F900AECB3C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft
Manifest number:          060B
Signing time:             Wed 23 Apr 2025 04:00:29 +0000
Manifest this update:     Wed 23 Apr 2025 04:00:29 +0000
Manifest next update:     Thu 24 Apr 2025 04:00:29 +0000
Files and hashes:         1: 9rpgBVyyum_cmnX99hk3GwBVk84.crl (hash: ATBf9XuoT4Y2zEmB4ysRUsCdINK0cj1MqP6n2YAUb8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Apr 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:60:cd:e9:37:e6:98:47:58:0c:98:7f:90:0a:ec:b3:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6ba60055cb2ba6fdc9a75fdf619371b005593ce
        Validity
            Not Before: Apr 23 04:00:29 2025 GMT
            Not After : Apr 24 04:00:29 2025 GMT
        Subject: CN=3459353f7302ecf14c2a4e0a468859d1aea346f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ef:bd:6c:d1:bc:ea:f2:79:24:f5:87:95:67:
                    ee:7c:bb:65:62:26:28:a4:7f:ea:f3:f0:0b:e0:08:
                    6c:8c:17:06:b3:bc:fc:c6:3f:e6:a4:ea:92:4f:e4:
                    dd:a6:82:67:a9:bc:f0:ee:16:ae:cf:a3:4c:3e:8a:
                    e3:45:bf:e9:82:75:92:c9:9f:ad:bc:e6:dc:eb:8e:
                    45:74:06:f9:98:c1:c4:99:2d:68:08:dc:e5:f4:55:
                    7c:01:e7:15:ba:56:ac:e5:00:03:1f:59:b5:ef:94:
                    c3:09:59:2b:35:0b:9c:ac:93:82:17:7a:13:d2:7b:
                    f8:01:de:fe:e0:67:d6:1d:2b:67:a0:89:eb:21:e1:
                    4d:b5:c6:28:6f:d9:ff:44:bf:f3:73:b2:c0:11:00:
                    eb:6e:21:99:fc:6f:31:d0:9b:03:cb:14:da:2e:97:
                    f0:8d:05:2d:95:12:5b:fa:47:9d:1e:a7:8f:ca:85:
                    58:39:36:9e:39:18:89:a5:c7:77:ed:eb:00:d8:a9:
                    78:18:2f:69:4c:e5:90:ff:b0:2c:a9:48:a2:ef:c7:
                    8e:75:90:80:f8:e2:d6:fc:b9:86:66:1d:e2:8e:b1:
                    77:6e:9c:9d:a3:81:32:b3:36:23:de:07:db:28:aa:
                    14:d6:d8:2a:42:8a:e8:28:8e:73:26:7c:0c:42:e9:
                    bd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:59:35:3F:73:02:EC:F1:4C:2A:4E:0A:46:88:59:D1:AE:A3:46:F7
            X509v3 Authority Key Identifier:
                keyid:F6:BA:60:05:5C:B2:BA:6F:DC:9A:75:FD:F6:19:37:1B:00:55:93:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:b5:b7:55:52:38:15:86:ce:e5:d6:e2:75:2b:47:eb:c0:40:
         d2:27:3d:72:77:55:13:2e:14:2c:13:56:60:6e:8e:58:b2:30:
         18:e4:2e:e6:bb:82:2f:9d:12:50:0f:76:b2:f4:e0:17:50:0a:
         28:de:ba:2d:36:fb:b0:0b:98:2f:04:67:a1:78:95:df:0e:23:
         e9:dd:5b:e6:82:71:a4:c5:16:1c:04:3d:85:cc:d8:13:96:c7:
         dd:fd:30:aa:96:83:32:2c:42:12:e8:af:2f:66:38:dd:b4:1f:
         87:6d:34:e3:88:1b:d7:3e:4a:f1:63:3c:2a:2d:2d:88:26:2c:
         8d:8c:e0:ab:d0:f2:f2:89:36:6e:3c:02:46:f7:8c:9e:1e:98:
         82:32:2b:5e:fe:5e:f7:6c:bd:27:c8:7d:8e:f2:46:ae:5d:0d:
         62:3c:93:d1:1a:d5:b3:da:d8:04:47:33:1f:ca:c9:a7:02:7c:
         5c:0f:40:11:07:8c:b6:39:e3:a6:bf:71:c7:72:f5:88:ec:1a:
         d5:f9:2c:c8:79:31:14:11:b7:bb:18:fe:bd:e2:df:10:fe:83:
         d4:1f:c5:60:6b:3d:71:de:32:d1:15:2e:02:9b:50:f2:6f:d5:
         1a:e5:42:19:87:96:fd:5e:3c:c6:59:fa:d0:d5:da:43:9a:f2:
         ca:58:20:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 11:36:51 2025 by rpki-client