Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft
File:                     6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft (raw, json)
Hash identifier:          c/yzB0xtYB8kGP2kK1dlm6DEio4LZvox85ZIrsO7IpU=
Subject key identifier:   7F:2C:D7:EE:D5:05:F7:64:9C:05:AD:E7:F3:A6:E7:F3:7E:19:9F:54
Authority key identifier: E8:87:E5:FC:BC:BF:1A:D0:32:68:DA:C9:EE:5D:29:20:25:36:80:90
Certificate issuer:       /CN=e887e5fcbcbf1ad03268dac9ee5d292025368090
Certificate serial:       019652A4B86AE63D8D2145F633A8F03DF8B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft
Manifest number:          0BF2
Signing time:             Sun 20 Apr 2025 10:00:48 +0000
Manifest this update:     Sun 20 Apr 2025 10:00:48 +0000
Manifest next update:     Mon 21 Apr 2025 10:00:48 +0000
Files and hashes:         1: 6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl (hash: KF3dEmz6WIJTLme4BUTl1MRN0PYDAJ0IMXNFDvpqZJY=)
                          2: RshraodQG0v2CwIen1d8e2inEyk.roa (hash: tjJ3tzpy63NbiAcLeNQHsJL6oNJgQPy/v6//+8AFf5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:a4:b8:6a:e6:3d:8d:21:45:f6:33:a8:f0:3d:f8:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e887e5fcbcbf1ad03268dac9ee5d292025368090
        Validity
            Not Before: Apr 20 10:00:48 2025 GMT
            Not After : Apr 21 10:00:48 2025 GMT
        Subject: CN=7f2cd7eed505f7649c05ade7f3a6e7f37e199f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8a:06:e2:2c:b1:b7:c0:d3:1f:1b:22:01:76:
                    84:1d:97:8e:a0:1e:94:32:0e:bd:af:58:e6:26:f0:
                    45:5a:5a:88:df:fe:81:7c:b4:4a:af:ea:11:68:f8:
                    ed:35:d8:ac:92:7b:ab:4f:96:b1:ae:cd:f0:75:50:
                    b4:01:d6:fb:a9:4d:6d:83:f3:4f:b2:58:12:25:59:
                    77:a5:1e:8e:8e:49:7e:2f:4d:26:ee:91:2f:51:2d:
                    56:fb:02:13:fa:ad:5a:3b:62:0e:36:6c:94:f0:5f:
                    93:cc:e4:ad:10:52:3e:d0:bd:28:ea:4a:5f:ad:68:
                    70:a4:1f:30:ec:b2:03:a8:ca:4c:1d:f8:f9:09:21:
                    b3:6a:0d:08:08:8e:5f:ff:23:a4:be:fe:57:59:ee:
                    19:ce:27:68:f7:96:60:e0:12:84:85:22:11:0e:c4:
                    cd:4a:2a:0b:87:f4:54:61:54:0c:fb:3b:7b:e0:ff:
                    a5:c5:35:1b:d5:a7:7d:33:9d:cf:d6:55:cf:24:52:
                    45:8e:a4:66:67:16:20:bd:be:87:02:e1:27:23:12:
                    42:1f:2c:75:18:e6:2d:63:c1:84:db:02:a7:d5:a7:
                    8f:e8:21:19:be:42:2e:99:55:47:e6:ed:28:f9:a1:
                    76:54:6c:22:78:da:46:19:25:f8:bc:58:52:8d:b5:
                    ee:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2C:D7:EE:D5:05:F7:64:9C:05:AD:E7:F3:A6:E7:F3:7E:19:9F:54
            X509v3 Authority Key Identifier:
                keyid:E8:87:E5:FC:BC:BF:1A:D0:32:68:DA:C9:EE:5D:29:20:25:36:80:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:94:36:56:34:29:9f:5e:ea:66:3a:dd:f9:17:08:81:32:73:
         28:24:27:6b:b4:98:2d:1d:75:42:b4:59:a1:35:76:ad:3a:ec:
         b0:fe:83:1c:4d:86:3e:f2:43:57:b9:87:51:aa:dd:92:21:a9:
         a4:85:ea:73:a7:51:7e:5a:c2:d8:e6:fa:0a:a6:dd:75:bc:85:
         70:e9:83:7a:73:b0:01:d0:80:59:8a:50:42:31:09:7a:01:05:
         7d:25:b4:3e:54:94:e6:12:74:10:c4:74:65:b6:50:bf:f3:bb:
         d3:a5:92:e3:e8:8d:22:90:ed:52:68:0a:8e:41:8e:8f:58:4a:
         d7:0f:b1:0d:ae:c9:d4:1a:ea:27:bf:95:45:91:3f:3a:d3:07:
         8d:49:8e:14:94:42:ee:82:4d:13:15:86:e5:1a:e6:04:4d:18:
         ab:a6:94:a2:52:25:5c:46:ca:f2:be:ea:81:48:47:d7:8a:84:
         d1:86:e4:f9:d4:92:41:e7:b2:72:57:b7:5f:43:fd:69:eb:a2:
         d4:79:67:08:6c:68:d5:ab:b3:75:38:73:e0:39:a9:41:dc:62:
         64:08:0f:8e:cf:86:d3:fa:44:e2:ab:55:f6:fc:1b:d4:6b:b3:
         4e:bb:2a:70:1b:07:87:e8:3c:d0:2e:8f:dc:6f:ee:6f:c4:58:
         2c:2c:91:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:00:29 2025 by rpki-client