Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
File:                     6yOl9H7GfpJakkkauZskujcRg_E.mft (raw, json)
Hash identifier:          xzGUhTJYIOrxQE2LoksxqxCuHQlXw5KzY7BtuwzQhWo=
Subject key identifier:   69:9B:10:5B:ED:69:9A:57:D2:EF:A2:36:BA:2E:99:47:83:8D:F4:9D
Authority key identifier: EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
Certificate issuer:       /CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
Certificate serial:       01975346BF00183162AAFFE740094B71AFCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
Manifest number:          084B
Signing time:             Mon 09 Jun 2025 06:00:34 +0000
Manifest this update:     Mon 09 Jun 2025 06:00:34 +0000
Manifest next update:     Tue 10 Jun 2025 06:00:34 +0000
Files and hashes:         1: 0_VEKJrftYI-EHvTCLarg2lwsBA.roa (hash: kfpPpXA7rFVv7oH2r9JbqI4VMxVD5WROc79GogJD5qg=)
                          2: 6yOl9H7GfpJakkkauZskujcRg_E.crl (hash: 3ADhLirWBdrQYEx9n4zupItYgjd4Mhpv4nKNk/ky5qk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:53:46:bf:00:18:31:62:aa:ff:e7:40:09:4b:71:af:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
        Validity
            Not Before: Jun  9 06:00:34 2025 GMT
            Not After : Jun 10 06:00:34 2025 GMT
        Subject: CN=699b105bed699a57d2efa236ba2e9947838df49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b6:30:8f:42:e9:e7:af:ab:31:aa:9d:39:8a:
                    a7:45:a0:4a:01:2e:9d:a3:09:f7:3f:87:e2:2e:4d:
                    b7:c8:f4:f0:a3:e4:ec:3d:4b:ac:6a:1e:48:0b:30:
                    8b:e6:c1:94:d5:d9:18:14:57:47:3c:a9:7c:2e:43:
                    b5:17:af:41:3a:d7:52:ec:bf:af:82:c4:d6:d9:6e:
                    b1:72:c1:3f:b8:90:f0:08:95:f2:fa:d3:7f:aa:60:
                    3f:4f:b6:64:b7:26:2a:61:07:13:00:08:bf:e0:a8:
                    a1:e0:3e:ec:54:23:26:0b:15:f4:d8:44:09:38:91:
                    d0:25:ac:da:46:52:c5:49:29:8d:b4:37:30:b7:b3:
                    bd:15:a3:9b:0b:e7:fd:74:a9:98:4f:2f:6a:16:f2:
                    e5:f7:6d:5f:c1:41:04:0d:09:c4:87:ef:bb:1b:e6:
                    c7:d3:a7:b9:65:00:a1:52:87:31:08:c8:4f:d9:d1:
                    48:8a:9d:bb:4c:c1:7a:21:b8:63:6a:f4:cb:a4:a6:
                    2d:2e:bf:5f:d2:89:2b:5c:08:60:fb:4a:a4:7c:da:
                    40:1a:25:d3:18:1b:1f:a5:a9:61:7e:d0:9e:cd:16:
                    59:5b:07:b6:d1:d8:47:59:e2:ad:ae:62:e1:42:06:
                    83:92:a4:8c:49:07:f0:35:ee:86:ad:4f:28:78:ec:
                    25:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9B:10:5B:ED:69:9A:57:D2:EF:A2:36:BA:2E:99:47:83:8D:F4:9D
            X509v3 Authority Key Identifier:
                keyid:EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ca:f1:6e:3e:9b:88:a3:e6:ab:88:04:ed:eb:b1:bb:65:b9:
         5a:58:bd:f3:a1:3f:3d:35:60:fc:3b:1b:40:c9:32:ce:79:f2:
         62:fe:77:c6:13:e0:be:57:83:c4:f4:a1:bb:f7:d5:10:7a:45:
         84:36:9f:8d:e9:6b:6b:01:8b:6c:6f:63:24:76:54:c3:1d:ea:
         2a:4e:61:68:c3:d7:fe:a7:2c:33:c8:8d:ef:7e:df:19:87:51:
         5e:79:f5:1d:28:08:6a:8b:3f:72:6a:de:89:51:10:df:8d:24:
         2d:1e:fa:40:98:c7:bb:d1:67:88:e8:e0:10:cc:1f:e9:7f:a7:
         ec:36:f7:34:fe:12:b5:a1:02:ee:b5:2c:a0:59:65:bb:62:41:
         38:cd:d9:ad:84:d4:66:32:ea:55:d9:fd:70:25:e9:a7:3d:47:
         b4:41:43:54:d5:13:17:3a:22:60:e6:c1:3c:78:41:1c:89:25:
         fb:56:50:cc:ee:5c:c2:5f:0e:9f:b3:c2:cb:e8:f6:f6:c6:38:
         91:21:7f:3f:f4:73:be:71:67:f9:36:a5:7e:02:d3:a5:63:7a:
         c9:2f:d2:dd:03:2b:89:b7:24:0b:4d:e5:f0:32:4e:fb:56:a6:
         78:b4:da:eb:cc:b3:76:83:4c:ba:7a:de:0c:48:e7:0f:89:74:
         9d:84:0a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:43:41 2025 by rpki-client