Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
File:                     6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft (raw, json)
Hash identifier:          Ajv1cIKvkpUQWlXNJzxwxKefe++iIW+GOM7dMF0QILE=
Subject key identifier:   6E:5E:1C:52:83:C2:A0:8D:27:CF:88:62:AF:06:C4:38:2B:87:0E:20
Authority key identifier: EB:F3:60:87:C3:FC:EC:FB:00:6F:51:8D:78:11:B2:55:EA:57:C9:0D
Certificate issuer:       /CN=ebf36087c3fcecfb006f518d7811b255ea57c90d
Certificate serial:       01962D4EF1A746E0C99EA9E6F04C7ECFF0FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
Manifest number:          10AB
Signing time:             Sun 13 Apr 2025 04:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 04:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 04:01:10 +0000
Files and hashes:         1: 6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl (hash: EDTFO2XHXy1boyyCVquYliXE9RgOjjrW+JrRdGE6wZ0=)
                          2: Cd-K1MEWA2ryKgiTfKMlpJrD0GQ.roa (hash: B7DPcOBfNaFm0TXa9BBHsfzUSprwVkey6QgyDWplAfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 23:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:4e:f1:a7:46:e0:c9:9e:a9:e6:f0:4c:7e:cf:f0:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf36087c3fcecfb006f518d7811b255ea57c90d
        Validity
            Not Before: Apr 13 04:01:10 2025 GMT
            Not After : Apr 14 04:01:10 2025 GMT
        Subject: CN=6e5e1c5283c2a08d27cf8862af06c4382b870e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0c:57:c4:05:be:70:c1:76:24:be:e2:33:99:
                    98:51:fd:45:4d:04:1f:06:24:8f:13:26:64:cb:fc:
                    51:48:c4:13:aa:21:6c:74:28:6d:08:7b:c7:01:55:
                    df:32:03:dc:d0:a3:71:75:af:6e:9f:69:72:88:e3:
                    6b:82:d7:22:58:53:cf:44:b7:f4:30:ee:27:d4:37:
                    6e:bf:d2:13:6f:05:b3:a0:4d:b3:43:26:24:3c:f0:
                    27:f3:83:cc:12:f7:8d:b1:d7:0b:4d:4a:a1:6c:a2:
                    7d:64:e5:63:51:18:df:77:1d:b6:f9:ae:bf:4d:9a:
                    a6:8c:d5:5f:0a:68:36:64:2c:ed:cf:5a:2d:16:1d:
                    6d:13:7c:cd:b7:01:bd:66:39:aa:f7:30:54:4a:b6:
                    3b:f9:4a:ec:83:c9:7c:87:c9:70:a6:a7:da:74:47:
                    d7:8b:a9:e6:61:91:69:5e:6d:3d:6e:f1:db:ce:e9:
                    55:97:80:9d:b4:37:1d:a8:d4:10:fe:34:3c:f6:c8:
                    e2:91:36:88:2e:6a:58:97:03:a1:c2:2c:0a:e2:21:
                    3b:68:5d:c2:4c:ba:f8:06:c0:46:eb:fd:9c:39:6d:
                    46:4e:6c:72:62:59:73:74:55:a6:a0:bc:be:16:d1:
                    df:f3:65:ef:4d:73:53:74:8b:78:41:4f:3d:dc:f6:
                    d8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5E:1C:52:83:C2:A0:8D:27:CF:88:62:AF:06:C4:38:2B:87:0E:20
            X509v3 Authority Key Identifier:
                keyid:EB:F3:60:87:C3:FC:EC:FB:00:6F:51:8D:78:11:B2:55:EA:57:C9:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:0a:a6:82:cf:88:7d:c9:cd:ab:ad:a1:b2:f6:79:02:12:6e:
         3a:eb:75:98:f5:82:68:59:1e:04:6f:e6:55:b9:67:01:6b:31:
         6b:f3:ba:a3:3f:99:33:8b:26:31:0f:38:87:19:37:aa:eb:62:
         17:10:4d:29:b8:f8:a4:ef:8d:e5:7b:f7:41:56:74:51:65:29:
         08:cc:bc:11:70:d4:1f:4b:07:b0:ce:af:4a:29:53:65:33:ed:
         db:f2:48:3d:69:6b:52:a9:c5:19:5c:67:c9:8e:c9:d6:b1:23:
         e2:75:bf:31:5a:b2:ef:df:21:c1:e8:d4:26:0b:e5:a7:ac:f5:
         3d:2a:bb:99:cd:0f:bc:7f:17:7f:bc:8f:86:df:a6:37:49:03:
         95:65:5e:73:11:12:88:e4:45:ba:1b:7e:60:1c:f2:79:60:8d:
         1b:15:aa:c2:c0:5d:38:68:5e:f1:7e:0c:17:36:6b:af:ce:57:
         18:1f:98:a6:2a:d9:df:46:62:02:22:1f:88:3c:6c:ef:2d:0f:
         6c:07:ee:c4:10:9c:1e:0f:67:0b:8d:ee:f2:a8:77:7f:e2:b9:
         fd:ed:a5:3a:b0:1e:09:d1:84:0b:1d:ab:2a:02:be:e3:25:bc:
         17:77:71:59:fe:b5:5c:fa:cc:24:2b:2c:a3:4e:df:52:84:77:
         df:62:8b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:58:12 2025 by rpki-client