Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
File:                     6Ed60hy3iRQzE8QLGfjMACPeiKY.mft (raw, json)
Hash identifier:          eK1olD9zFmxSBYyaWlahqfuiUQq5RB+6MDMDpbdTicg=
Subject key identifier:   CE:E4:8D:8D:F9:93:9E:8C:FC:82:CC:EB:B6:C7:94:12:E8:C7:34:D5
Authority key identifier: E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
Certificate issuer:       /CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Certificate serial:       01974D7BB7EF21F1904FA854EAA0ECBB480C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
Manifest number:          44
Signing time:             Sun 08 Jun 2025 03:00:42 +0000
Manifest this update:     Sun 08 Jun 2025 03:00:42 +0000
Manifest next update:     Mon 09 Jun 2025 03:00:42 +0000
Files and hashes:         1: 2M47-6eKALJ6FmiVAowRa7gLSUI.roa (hash: sTE5YWztn/a2MX2OSX/0Yz9OgI3CBWwdi/QI1zYZYUk=)
                          2: 6Ed60hy3iRQzE8QLGfjMACPeiKY.crl (hash: OY+n06lJFzJxpFtXUgL/zeh6TCSHiCCvVwey11I7j7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7b:b7:ef:21:f1:90:4f:a8:54:ea:a0:ec:bb:48:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8477ad21cb789143313c40b19f8cc0023de88a6
        Validity
            Not Before: Jun  8 03:00:42 2025 GMT
            Not After : Jun  9 03:00:42 2025 GMT
        Subject: CN=cee48d8df9939e8cfc82ccebb6c79412e8c734d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9e:21:88:d1:ad:db:d3:a0:12:98:07:59:33:
                    08:52:41:01:74:b8:96:84:ff:90:59:7c:09:83:be:
                    63:f5:e6:14:14:d9:42:9c:ec:aa:f0:8b:a1:5c:59:
                    80:e9:71:99:55:d9:1e:e2:6e:dc:1a:05:3e:2f:bb:
                    2f:a7:86:80:52:d3:ca:27:44:d4:02:b7:68:68:d5:
                    a9:0e:72:47:8f:93:1d:74:a1:6f:2d:e9:91:5d:76:
                    d4:0d:c1:58:d0:00:3c:7f:87:f1:19:bd:71:29:59:
                    45:9f:e2:fb:06:46:8e:75:38:38:96:5f:36:59:a1:
                    8e:2b:9c:4a:41:ba:0e:a3:bb:f7:fe:cd:c0:ee:23:
                    b2:51:45:38:ba:d1:55:25:18:8b:c6:72:42:cf:24:
                    6a:22:5c:23:21:ee:03:3b:f3:22:11:e7:8c:f0:82:
                    2e:d1:b2:e6:24:0a:9a:7f:aa:0a:c9:e2:46:31:4d:
                    57:b9:9a:c2:5e:74:1a:fc:f6:0f:9f:2f:8b:a1:a4:
                    dd:74:62:ca:9e:6b:2b:cb:99:75:bf:e1:e6:bc:b4:
                    a8:1c:c0:a7:99:61:20:27:d2:02:f4:c8:5a:5d:36:
                    01:09:19:12:8c:9b:1a:ea:15:da:04:9c:b9:1d:0a:
                    bc:ed:18:de:1a:30:42:9d:22:54:48:3d:19:49:f8:
                    2d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E4:8D:8D:F9:93:9E:8C:FC:82:CC:EB:B6:C7:94:12:E8:C7:34:D5
            X509v3 Authority Key Identifier:
                keyid:E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:91:11:7d:8d:6e:c5:2d:1a:28:c7:00:1c:b8:10:e4:66:b1:
         73:66:91:62:c1:39:27:86:97:76:13:fc:de:1e:0d:0c:d4:1c:
         e0:ef:16:6a:0f:cc:4c:17:df:d4:c4:ce:62:da:6e:68:a4:f7:
         87:56:4c:a3:98:04:14:38:5a:fd:66:b6:5c:67:1c:7c:c5:86:
         6d:b9:23:f0:ad:7c:11:48:a1:1b:e2:ee:f7:ae:69:39:a6:d4:
         1b:20:18:d8:92:60:a0:cc:eb:09:6f:7c:20:7a:47:0e:84:b9:
         f1:33:43:f9:78:38:90:65:ae:e2:e2:5a:73:12:9e:fd:63:36:
         b8:22:d4:e9:2b:e1:cf:06:57:17:bd:23:79:a3:d2:34:fc:4e:
         fc:05:6f:89:ae:db:bb:09:8b:73:63:29:24:a6:ca:96:cb:b9:
         b6:89:ae:e9:cc:11:2a:63:46:1d:99:56:1a:05:ca:80:df:b7:
         9a:05:6d:ed:d7:fc:45:b6:5b:71:0e:e5:88:98:b3:2c:9e:f4:
         4f:51:35:05:ea:b1:91:55:6f:53:b5:16:93:16:2e:cd:70:55:
         bf:9d:bb:c3:1c:65:87:3a:07:47:5d:5d:40:f3:f7:d1:ea:1c:
         8c:7b:45:96:c5:17:65:5d:fe:1f:93:6c:22:14:ec:ae:4d:e9:
         44:75:7b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:14:38 2025 by rpki-client