Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft
File:                     6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft (raw, json)
Hash identifier:          ecHtFgBQVdi4YhnrgDtTPwqgEKDVnFIWVPZsYo79E9Q=
Subject key identifier:   2C:66:CF:02:23:D4:D8:A4:C6:2C:B2:06:A3:C1:9E:4B:5F:8C:81:E3
Authority key identifier: EB:10:B0:9B:A0:C1:0C:F0:76:E5:10:79:31:D3:D6:91:A4:39:65:28
Certificate issuer:       /CN=eb10b09ba0c10cf076e5107931d3d691a4396528
Certificate serial:       0194BABB957A86A8F6870ADAEB9BB44F67AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft
Manifest number:          0276
Signing time:             Fri 31 Jan 2025 05:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:43 +0000
Files and hashes:         1: 1-TEAa7vqhDR8MFmfWosBtb41wek.roa (hash: eqiD9H7n4ulTtrxau5diRG8AJtoZzGM451rZtgj6RWo=)
                          2: 6xCwm6DBDPB25RB5MdPWkaQ5ZSg.crl (hash: IhY7OMlqksBUXoKjbsJhvTqZSg/alI/qPbCS26Argpo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:95:7a:86:a8:f6:87:0a:da:eb:9b:b4:4f:67:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb10b09ba0c10cf076e5107931d3d691a4396528
        Validity
            Not Before: Jan 31 05:00:43 2025 GMT
            Not After : Feb  1 05:00:43 2025 GMT
        Subject: CN=2c66cf0223d4d8a4c62cb206a3c19e4b5f8c81e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:07:ed:fe:c1:72:5f:98:a8:ad:a4:12:0a:
                    c3:93:8a:5f:1f:7c:94:ee:6e:68:82:07:96:c0:68:
                    e9:0a:5a:5c:6c:7b:f6:fb:cd:4d:98:15:d8:e4:73:
                    53:02:95:e2:a1:4d:9b:9d:2f:f0:22:5b:30:4d:f6:
                    3b:94:1f:d2:30:e6:82:ec:8f:cb:b2:91:24:40:29:
                    59:1b:ae:90:3f:f5:ff:4c:06:6c:16:5b:a9:bd:12:
                    1e:11:49:a4:15:9b:c1:01:2a:34:62:41:21:46:ff:
                    6c:6b:00:72:b6:4e:72:d8:9d:7b:83:f0:e8:33:5b:
                    25:cc:5d:61:c5:bd:44:f7:a6:71:22:ff:fe:42:d2:
                    03:fd:ef:d0:a2:9c:dc:f8:b8:e6:46:8b:72:89:98:
                    0a:8c:a0:93:86:27:37:96:b1:41:74:0b:bb:dc:b8:
                    14:3e:f7:4e:50:e0:01:c3:d6:a9:e3:bd:77:04:be:
                    ab:40:4a:a7:3d:67:e3:32:79:cb:56:4e:92:9a:ec:
                    11:7a:70:f0:ec:8e:a9:3e:23:0a:7b:bc:27:ff:88:
                    8b:fb:ac:97:89:bb:d2:58:d5:50:c1:58:51:bd:3b:
                    a5:f2:06:e8:75:f6:bb:7d:a2:3d:62:14:5f:47:7d:
                    e5:9c:2d:a9:65:18:4c:fd:79:97:79:bd:f8:4f:31:
                    30:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:66:CF:02:23:D4:D8:A4:C6:2C:B2:06:A3:C1:9E:4B:5F:8C:81:E3
            X509v3 Authority Key Identifier:
                keyid:EB:10:B0:9B:A0:C1:0C:F0:76:E5:10:79:31:D3:D6:91:A4:39:65:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:6d:6f:a9:0c:44:a4:74:3f:05:f3:22:97:34:f8:34:7f:a9:
         11:9a:4d:ae:b7:73:b1:82:1c:83:75:88:a1:be:92:ee:18:6b:
         6f:b0:8b:f2:e3:7a:93:a7:95:d0:08:12:bc:7d:9f:66:18:a0:
         93:f2:f2:17:5c:d8:7d:14:1a:f3:c8:aa:f9:52:43:96:b9:e8:
         1c:ad:d9:f8:83:0b:3c:d2:c9:d6:88:3e:cf:23:12:47:0f:02:
         ac:5a:af:ec:c1:36:b2:c4:1b:52:d8:a6:38:a4:46:a7:7c:95:
         d9:c9:45:f3:aa:1c:b3:42:00:d1:3a:5b:7c:cf:d7:24:19:10:
         53:e7:21:d4:b1:7b:17:7a:f5:cf:7c:12:42:30:40:c9:39:ea:
         15:5e:c4:5f:67:1e:ef:0a:2d:d4:ca:d9:f7:4a:a1:fa:ea:56:
         be:69:98:a8:7d:0c:c6:ea:bd:d3:77:36:b7:62:7b:75:1d:76:
         92:c4:54:2d:10:c1:e5:c5:c4:d8:c8:01:46:2b:00:25:ab:b8:
         43:ba:cf:d3:b7:8b:d3:6a:77:1e:81:4d:79:36:9c:64:98:fb:
         06:19:41:0e:db:96:43:39:6d:c9:4f:7c:c2:60:8c:2b:65:da:
         f9:00:3c:e3:40:38:dc:87:c7:6b:2a:05:03:e6:35:04:94:57:
         55:64:2f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:56 2025 by rpki-client on console-fra.rpki-client.org