Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
File:                     6pDtaEipyh7yAQ5jTOIbbJrd62I.mft (raw, json)
Hash identifier:          ZiL/yY778a304HR2rZRGYaloE5+7i6Q+ut0hxVgPtGw=
Subject key identifier:   A9:36:53:70:D5:2E:5F:D5:10:39:57:CB:46:35:5D:39:6F:FA:1A:5C
Authority key identifier: EA:90:ED:68:48:A9:CA:1E:F2:01:0E:63:4C:E2:1B:6C:9A:DD:EB:62
Certificate issuer:       /CN=ea90ed6848a9ca1ef2010e634ce21b6c9addeb62
Certificate serial:       019612EA57611C43E927DB890C746266A877
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
Manifest number:          019E
Signing time:             Tue 08 Apr 2025 01:01:09 +0000
Manifest this update:     Tue 08 Apr 2025 01:01:09 +0000
Manifest next update:     Wed 09 Apr 2025 01:01:09 +0000
Files and hashes:         1: 6pDtaEipyh7yAQ5jTOIbbJrd62I.crl (hash: zs2Fnd4nM8HX5PXiudhqBRNebQf5BRpaUVzURwVsyY8=)
                          2: Ph-U5dqNHzdXtAC4s8SqLkw0HnU.roa (hash: Useq54Tz9psDJFY8ug181fsHtAqbkZCsf85Cmb59VeM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Apr 2025 01:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:12:ea:57:61:1c:43:e9:27:db:89:0c:74:62:66:a8:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea90ed6848a9ca1ef2010e634ce21b6c9addeb62
        Validity
            Not Before: Apr  8 01:01:09 2025 GMT
            Not After : Apr  9 01:01:09 2025 GMT
        Subject: CN=a9365370d52e5fd5103957cb46355d396ffa1a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e3:84:26:41:f8:f4:63:9a:32:f4:43:4a:fa:
                    1e:12:76:27:56:e9:19:6c:06:80:96:26:c1:bd:aa:
                    64:e1:be:c4:2b:0d:5e:d6:cb:a5:01:99:63:df:6c:
                    a1:06:6b:e4:13:7a:e3:8c:70:25:ba:5d:42:f0:da:
                    15:9a:37:b3:70:e5:2b:9e:ce:00:db:ee:f7:6b:f1:
                    83:29:b5:cb:b4:c7:ed:43:93:1b:e7:bb:10:e7:18:
                    81:f1:82:df:70:9a:fd:c7:8d:33:51:55:14:aa:93:
                    34:75:45:1f:c0:ee:1e:8f:d7:f3:1b:40:21:83:24:
                    3a:b6:d7:0b:1a:9e:b3:fc:27:cc:5b:99:9a:40:40:
                    60:0a:5c:35:3c:b2:f8:9a:84:a1:6b:a7:b8:3f:dd:
                    61:f5:77:57:ad:86:10:e8:8a:b3:4d:ed:47:0a:c8:
                    9c:c1:9e:4c:2f:ea:ae:3d:fc:f9:e1:b5:37:dd:0b:
                    84:0f:9f:3e:70:a7:44:d1:91:c0:57:02:12:29:89:
                    02:5d:c9:6e:0f:3e:2b:72:b7:30:01:2a:34:d3:45:
                    a2:98:12:29:63:e8:45:af:5b:7b:23:e0:8d:7a:c7:
                    76:63:af:70:fb:67:c5:ef:ca:73:99:09:46:56:df:
                    63:76:bf:c0:44:e8:53:ef:0d:bd:ca:3b:1d:6e:b3:
                    e9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:36:53:70:D5:2E:5F:D5:10:39:57:CB:46:35:5D:39:6F:FA:1A:5C
            X509v3 Authority Key Identifier:
                keyid:EA:90:ED:68:48:A9:CA:1E:F2:01:0E:63:4C:E2:1B:6C:9A:DD:EB:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:ad:27:f7:e8:db:c6:bd:bd:70:9c:f1:d4:65:05:4d:cf:02:
         ec:e2:6d:f9:ac:22:05:d6:dc:f2:95:7a:92:62:05:ea:bf:1f:
         25:b0:ed:7d:89:3c:20:ad:50:f0:61:ca:60:56:86:4c:74:51:
         e0:3e:30:b4:4c:a8:17:ac:37:14:4d:10:06:33:7b:0f:9f:4f:
         94:7c:57:ce:fc:34:df:19:7f:36:a1:08:69:5c:8d:cf:bd:65:
         a0:93:ff:02:b4:10:43:d9:74:82:55:61:c7:64:80:5b:65:3e:
         46:8e:82:f0:85:cb:ab:b2:c0:1a:c4:94:7b:a8:bc:78:76:dc:
         32:d2:9e:b2:35:13:41:05:08:60:53:eb:f9:69:8b:34:a0:8b:
         10:73:4b:0f:8d:ad:13:e6:47:48:b6:ca:74:2a:dd:71:72:fb:
         76:b5:11:52:d4:ba:9e:13:d3:9c:3b:bd:d5:96:19:94:43:db:
         ee:37:13:9b:3e:0d:69:ee:6b:70:f3:c7:8e:5c:5d:85:94:6e:
         11:dc:b2:79:06:f5:af:ab:bd:2a:14:d8:d6:3a:c6:ce:92:0b:
         48:ca:86:82:b4:5b:0b:78:42:94:2d:21:1b:5c:f7:fc:53:a1:
         36:ae:b3:a5:1d:01:2d:98:11:f4:03:79:73:e0:47:49:82:db:
         b6:6e:62:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:42:34 2025 by rpki-client