Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
File:                     6CLYReFTmSp46PRFIyZNJhSxe50.mft (raw, json)
Hash identifier:          7eqRngyNWcrlGyReiiQugnyu4to5aMqEF5MOAk5TePI=
Subject key identifier:   4A:40:77:E3:0B:64:C9:6F:65:15:0A:8A:60:3F:42:6D:F8:AF:1F:52
Authority key identifier: E8:22:D8:45:E1:53:99:2A:78:E8:F4:45:23:26:4D:26:14:B1:7B:9D
Certificate issuer:       /CN=e822d845e153992a78e8f44523264d2614b17b9d
Certificate serial:       019610C50CD5D462E21C401FFC7205F656B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
Manifest number:          046F
Signing time:             Mon 07 Apr 2025 15:01:11 +0000
Manifest this update:     Mon 07 Apr 2025 15:01:11 +0000
Manifest next update:     Tue 08 Apr 2025 15:01:11 +0000
Files and hashes:         1: 6CLYReFTmSp46PRFIyZNJhSxe50.crl (hash: SGHaZp1wZFz1cBtUVdi2/EsKeEH8noSVejCHMwW1tdM=)
                          2: KH0zl9xVnMF_15rIoZ2wT-co_AI.roa (hash: DoRE8smcciehWgwMQwu6I7Myolux2OWQiEW7g5i3MyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:10:c5:0c:d5:d4:62:e2:1c:40:1f:fc:72:05:f6:56:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e822d845e153992a78e8f44523264d2614b17b9d
        Validity
            Not Before: Apr  7 15:01:11 2025 GMT
            Not After : Apr  8 15:01:11 2025 GMT
        Subject: CN=4a4077e30b64c96f65150a8a603f426df8af1f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:77:52:61:d2:97:33:69:60:a3:ee:c6:53:48:
                    a6:de:8b:1d:59:74:fc:b5:eb:f9:b9:c6:c2:4f:10:
                    04:db:96:52:eb:8c:b7:b0:b4:cf:d7:7c:99:d2:a1:
                    26:73:39:fd:b0:e8:8e:b7:0d:41:30:7c:9c:98:68:
                    34:fb:3c:e6:d5:4a:c4:86:6d:5a:85:1a:b8:c8:c6:
                    81:af:0e:fd:16:a3:63:59:8e:9a:bd:bd:bb:b4:fb:
                    a9:99:44:45:76:11:e8:c9:96:f0:b1:ce:c4:6e:48:
                    31:a4:4e:bc:13:9e:17:56:55:9e:3c:fa:cf:5e:f9:
                    cd:ba:2c:89:b5:1d:de:21:3a:36:55:55:38:c3:c5:
                    44:45:97:d2:7f:ee:06:08:b6:b0:99:ed:a2:52:57:
                    e4:00:79:c3:96:3e:37:ad:63:3b:6b:f6:82:34:65:
                    61:45:1d:f3:db:48:d2:85:10:c4:cd:62:76:4d:ea:
                    d7:81:c0:72:9e:e2:4b:03:38:88:34:2c:cd:82:e8:
                    a4:7f:2e:b2:88:35:41:2b:02:3f:e5:d7:30:a6:93:
                    df:92:74:d3:7d:78:ec:e7:ba:93:94:55:30:a5:8f:
                    e5:da:4b:80:27:be:7b:02:5c:cc:83:8d:74:d0:31:
                    00:8f:d1:82:15:9b:b4:c7:6d:d1:40:6f:96:57:f6:
                    86:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:40:77:E3:0B:64:C9:6F:65:15:0A:8A:60:3F:42:6D:F8:AF:1F:52
            X509v3 Authority Key Identifier:
                keyid:E8:22:D8:45:E1:53:99:2A:78:E8:F4:45:23:26:4D:26:14:B1:7B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:9f:eb:a8:2f:15:31:df:95:b3:ba:d9:9e:91:13:f4:fc:57:
         06:cb:02:48:90:1b:93:9c:7f:8e:82:34:c7:10:dc:3e:6a:d0:
         38:fa:a0:48:db:8d:a9:e3:a4:fd:7b:a4:8c:a5:78:d7:08:09:
         c8:b0:b2:26:5b:c7:1f:f8:2b:59:a4:70:f6:02:66:a8:2a:fb:
         2e:ec:75:14:91:07:ea:23:08:1a:1b:78:eb:1e:ef:7f:57:ad:
         66:ca:a1:5f:73:b2:78:94:72:c0:26:16:69:3b:e1:c7:99:b1:
         cc:59:aa:76:f7:d6:43:22:e7:ca:45:a5:83:9f:a1:9e:b3:b0:
         84:66:4b:42:fc:ee:3f:1c:b6:62:17:e5:c1:15:c7:2c:5d:5a:
         dc:06:cc:b9:a7:25:0f:68:82:71:b8:22:4e:90:de:54:0a:76:
         6d:2b:72:e1:ed:97:cd:48:02:d7:d7:8d:20:57:12:4d:91:76:
         a8:60:e3:8a:ae:87:4e:25:df:07:3f:75:94:73:86:c0:3f:a1:
         5d:a6:12:88:dc:a8:02:e2:cb:87:25:16:8f:13:21:d5:20:be:
         26:06:b0:e1:61:74:9b:bd:d0:45:ad:bb:b5:fe:06:48:85:53:
         e3:56:09:23:93:cd:5f:11:d1:4c:be:11:28:e5:ea:62:22:e9:
         b6:73:f3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:30 2025 by rpki-client