Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
File:                     6xU9o8JM4SNuIMRoYWNdyO-1apI.mft (raw, json)
Hash identifier:          6w/kZ+6TpRp+JwrawAOWJIgj507/zEa7ryJ0VyRL5JM=
Subject key identifier:   2F:BF:37:89:A1:73:2F:58:E9:8D:1E:AA:0B:18:18:B2:FB:9D:FE:68
Authority key identifier: EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92
Certificate issuer:       /CN=eb153da3c24ce1236e20c46861635dc8efb56a92
Certificate serial:       01974A0C877C7A9D379B30F7CC72E551017C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
Manifest number:          0C63
Signing time:             Sat 07 Jun 2025 11:00:24 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:24 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:24 +0000
Files and hashes:         1: 6xU9o8JM4SNuIMRoYWNdyO-1apI.crl (hash: 7sykLz/OMNz9CWveRtdrawe1XFTxUlWxTkWTiqkl96E=)
                          2: ipmJ5LQmK4ddp63lgFVAIAYopkE.roa (hash: YVYb+vZufn7OkrWKbNACiC73zlWWGlO/lMGiNA3e8zY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:87:7c:7a:9d:37:9b:30:f7:cc:72:e5:51:01:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb153da3c24ce1236e20c46861635dc8efb56a92
        Validity
            Not Before: Jun  7 11:00:24 2025 GMT
            Not After : Jun  8 11:00:24 2025 GMT
        Subject: CN=2fbf3789a1732f58e98d1eaa0b1818b2fb9dfe68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:76:9b:12:e9:ee:8c:36:f9:98:4d:07:cc:f9:
                    68:05:24:15:02:61:7e:f6:04:dc:77:5b:22:9b:4f:
                    86:56:3c:5f:45:71:18:d1:f2:82:cb:c3:1a:a7:87:
                    6d:ac:9e:80:19:17:23:a1:8b:40:86:23:78:d2:ef:
                    a2:de:f9:92:90:7e:46:25:c8:cb:df:29:1b:78:28:
                    75:bb:bc:16:7f:f7:d1:85:c5:d4:fb:1e:20:ae:17:
                    8f:a7:fd:ed:54:6b:10:e8:4c:c2:a0:db:d0:69:b4:
                    dc:62:d8:19:ea:1a:07:98:20:fc:b0:18:a8:cb:af:
                    0a:bb:7b:43:3f:60:bb:ad:eb:e5:89:b7:f5:5d:80:
                    de:cb:28:0c:23:26:f1:24:96:4c:94:21:99:99:ee:
                    3d:e2:14:bd:c3:7d:10:0d:10:89:5f:96:ed:b3:63:
                    fc:e3:47:2c:92:1c:2c:fb:86:8a:7f:40:c3:08:f5:
                    15:af:c7:85:56:08:66:53:8e:45:9d:a8:04:0a:f9:
                    24:e7:b1:0d:7a:97:f1:b5:db:19:94:cb:3f:d5:8b:
                    cf:94:c6:d4:72:d7:d8:89:3f:80:00:57:a6:07:36:
                    26:e6:ea:ea:ea:b0:f6:22:a4:8b:75:e9:19:b2:14:
                    4d:0c:18:65:3b:89:a0:8e:06:59:ec:04:9e:a6:15:
                    af:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BF:37:89:A1:73:2F:58:E9:8D:1E:AA:0B:18:18:B2:FB:9D:FE:68
            X509v3 Authority Key Identifier:
                keyid:EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:2d:e1:be:a4:4d:f5:6e:82:9a:85:12:2f:1c:a9:7d:ca:9b:
         5c:08:84:3e:a2:03:c8:ef:89:ca:62:f1:75:80:d2:e3:a7:f4:
         7b:f5:74:28:cf:59:3a:bc:d9:0e:73:26:71:37:2c:8e:98:06:
         9d:49:72:24:14:94:ca:0d:f6:89:f5:61:1c:55:11:78:09:f8:
         30:6b:82:75:cc:29:33:8d:2f:39:ca:f4:0a:20:3e:25:bb:97:
         54:b5:57:fb:9f:bd:93:b8:bf:a7:25:62:5d:51:88:a4:49:4f:
         62:4a:37:48:f3:9e:9b:23:4f:0a:fd:53:16:1e:6d:d5:bc:04:
         0a:83:b8:8f:3b:ae:11:2c:06:af:e2:ff:31:be:1d:8a:cd:04:
         f2:fa:12:88:85:b0:97:06:9a:51:de:1b:75:06:39:85:5a:32:
         c8:20:5d:46:6c:0f:67:83:07:e3:2a:d2:b7:02:9f:3d:7c:f3:
         90:74:14:c1:6c:ea:02:9b:03:f6:60:f1:31:18:be:c2:e5:c3:
         99:e6:e7:1d:36:db:5d:88:80:f5:97:ec:0b:10:6a:48:18:ee:
         d6:b2:f1:00:38:69:49:50:41:9e:52:2a:37:81:e4:91:fd:fd:
         b5:02:a8:48:d8:71:02:c3:de:44:86:59:a9:04:51:6c:4e:04:
         f5:4d:fa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:03:51 2025 by rpki-client