Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft
File:                     6XEkdSyEAGfdN-JC6Undo03LS04.mft (raw, json)
Hash identifier:          1SzjQwMSEmXzNNeq1qiNyVc9xG+80Ggr1dyZTXGAEzw=
Subject key identifier:   DE:18:EE:87:C1:45:07:8A:D3:6A:D3:19:7D:5E:41:26:B9:83:36:31
Authority key identifier: E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E
Certificate issuer:       /CN=e97124752c840067dd37e242e949dda34dcb4b4e
Certificate serial:       01958BBBA800055EEBF598BD5AFBDE9F6A16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft
Manifest number:          1495
Signing time:             Wed 12 Mar 2025 19:01:26 +0000
Manifest this update:     Wed 12 Mar 2025 19:01:26 +0000
Manifest next update:     Thu 13 Mar 2025 19:01:26 +0000
Files and hashes:         1: 6XEkdSyEAGfdN-JC6Undo03LS04.crl (hash: ufU79hKXJ3+oqGIKaw1nBv4u+HwG00XF2vCeMz9FWmY=)
                          2: ln8cbDhSIfp4E2XB9SOMHr6Pnko.roa (hash: HgLGglk0S4IATrqUxgAV1S7c2Cds50Oig+WiSSLRjns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:bb:a8:00:05:5e:eb:f5:98:bd:5a:fb:de:9f:6a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97124752c840067dd37e242e949dda34dcb4b4e
        Validity
            Not Before: Mar 12 19:01:26 2025 GMT
            Not After : Mar 13 19:01:26 2025 GMT
        Subject: CN=de18ee87c145078ad36ad3197d5e4126b9833631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2d:6c:3e:66:16:ef:00:f0:15:45:17:58:fe:
                    9a:fb:5c:94:6d:99:40:d0:20:5c:53:b0:47:82:76:
                    b9:59:3a:85:40:38:54:c0:59:4a:08:d1:e8:f4:53:
                    cb:c7:3e:ce:a2:f1:3f:40:c7:31:72:cb:2d:3b:c4:
                    fe:ee:44:59:8f:ad:17:61:4b:a2:66:3f:cd:64:62:
                    9c:47:87:ee:bc:93:e5:4b:80:6d:35:9e:3e:ae:f5:
                    6d:23:ca:0e:b1:bb:e0:2a:c0:f6:27:4a:50:b3:3f:
                    bc:68:45:6b:a9:96:01:0e:1d:0a:72:0a:d7:c9:dd:
                    90:b6:0f:87:ff:02:01:53:2e:ea:5a:9f:63:90:9c:
                    9d:44:9b:87:96:5e:9f:73:b9:85:d2:0d:6f:03:b5:
                    96:d3:28:7f:c2:b0:2e:b6:e3:6f:ec:15:14:41:ed:
                    f2:f4:74:b9:54:4e:a7:de:f8:98:84:5d:32:eb:ee:
                    53:d8:e7:16:98:49:c5:2a:c3:02:1d:fc:a9:04:71:
                    39:0a:42:ad:c4:49:1c:69:ba:49:45:6e:b8:5e:54:
                    10:b5:89:cf:9a:8b:d0:3f:4e:23:31:50:14:82:50:
                    10:6d:7a:f7:d2:74:5a:f1:5c:4c:7d:38:5a:a3:6c:
                    f4:7a:35:b1:08:88:19:55:05:b9:fc:3e:2c:5a:88:
                    a4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:18:EE:87:C1:45:07:8A:D3:6A:D3:19:7D:5E:41:26:B9:83:36:31
            X509v3 Authority Key Identifier:
                keyid:E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b2:38:c0:f1:2e:2c:f5:bb:89:38:d4:83:3d:ec:fb:c5:8d:
         d6:50:0a:22:a6:22:21:b9:30:18:31:22:91:eb:0b:38:71:85:
         a6:2f:bd:7b:ca:0f:cf:71:62:38:ff:00:aa:68:1a:f3:fa:2b:
         8a:57:74:13:fc:54:fd:53:3e:f9:95:cf:99:c0:65:fd:dc:70:
         83:b4:7f:db:55:e9:08:e6:e0:9f:58:42:be:6b:4c:03:68:db:
         19:29:a1:b0:59:ff:ad:75:98:ec:98:a5:91:16:b1:10:16:cc:
         a5:50:f0:19:47:f8:e7:d9:0b:6b:63:ab:15:e8:24:cc:92:62:
         01:08:cf:e0:72:e4:a6:fd:9c:87:65:50:b3:d6:64:f6:e8:fb:
         52:e3:7f:c8:87:36:ea:45:1a:ea:4b:88:09:5b:0d:09:23:47:
         03:93:95:44:24:df:db:cb:2e:b2:bd:21:f7:e4:71:b8:ec:9c:
         aa:af:7c:9d:12:20:40:0a:6f:5f:87:1d:1a:f6:c1:34:92:dc:
         31:82:65:56:14:e7:b4:25:73:c6:f2:88:8b:fd:93:9c:cd:ac:
         56:d9:80:17:6a:5a:76:e6:0d:42:bc:6d:87:0b:dd:fd:f6:c6:
         65:82:3b:2a:45:fc:0c:62:a6:4c:e1:35:67:29:d2:73:cb:4f:
         d1:3a:5b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:21 2025 by rpki-client