Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft
File:                     6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft (raw, json)
Hash identifier:          ISh4wA0fiu6qXC/4GL2SbAcnr9ohrzhy7+69NE2xthE=
Subject key identifier:   1E:69:75:4C:15:46:17:76:D4:83:99:99:7E:CC:C3:B2:02:BF:0E:06
Authority key identifier: E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D
Certificate issuer:       /CN=e8bd0d9aa8c743cda182f00668583a46e600c32d
Certificate serial:       019749316B01B68B77DC898E9351ECD5FB29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft
Manifest number:          1438
Signing time:             Sat 07 Jun 2025 07:01:04 +0000
Manifest this update:     Sat 07 Jun 2025 07:01:04 +0000
Manifest next update:     Sun 08 Jun 2025 07:01:04 +0000
Files and hashes:         1: 6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl (hash: H6DjAd+2H6EvLXZ9bPkLFz3pjHnr93VmU1xSaDnQfBA=)
                          2: XmxwkZr2Ua5UDkEHGjDtz-Zyw08.roa (hash: P/OmeGABxQo0KdahW/abtL2rzvBKjRzNV4nj+svt9Ok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:6b:01:b6:8b:77:dc:89:8e:93:51:ec:d5:fb:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8bd0d9aa8c743cda182f00668583a46e600c32d
        Validity
            Not Before: Jun  7 07:01:04 2025 GMT
            Not After : Jun  8 07:01:04 2025 GMT
        Subject: CN=1e69754c15461776d48399997eccc3b202bf0e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:76:9f:9b:7a:14:a3:7e:41:6d:aa:1d:e5:de:
                    2b:ff:1b:67:03:e2:75:64:f4:6b:7c:41:7d:4c:9e:
                    60:ab:a6:3e:f8:fe:ba:db:30:a8:a6:67:89:8a:e6:
                    c4:69:1d:a3:e5:26:ba:c1:50:33:a1:e6:28:a1:05:
                    07:02:be:80:f3:dc:b7:6f:35:92:6a:46:5f:69:aa:
                    92:de:14:ef:9b:f2:29:ab:a2:0c:ee:cc:9a:a1:78:
                    35:22:ee:34:7f:c6:01:79:82:77:73:d3:a0:d8:80:
                    33:24:9c:8b:3a:dc:71:b0:c6:94:50:b2:10:17:c8:
                    64:05:49:f2:54:32:c2:d2:f8:59:99:a0:55:4f:06:
                    e2:7b:dc:17:66:6c:11:87:9e:71:f2:88:bf:2c:0a:
                    3d:7c:6c:f6:a5:5c:2e:4e:b8:da:7d:32:e6:55:98:
                    c7:2d:c3:9d:73:f6:b1:11:df:27:d2:6c:85:95:5c:
                    d4:55:bb:36:9d:5e:f4:b7:72:d3:dd:ce:5b:dc:4a:
                    ec:12:d3:09:1e:7e:0d:b1:42:0b:59:ea:ca:78:61:
                    5d:3e:c2:c3:31:c9:0e:ae:fd:67:cb:c2:84:34:99:
                    9e:fa:cd:25:ae:5b:47:c1:9a:74:f3:55:08:a9:05:
                    60:03:67:c5:96:63:e7:b6:ca:47:7f:b2:40:81:b7:
                    22:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:69:75:4C:15:46:17:76:D4:83:99:99:7E:CC:C3:B2:02:BF:0E:06
            X509v3 Authority Key Identifier:
                keyid:E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:2d:08:e2:91:24:06:a0:93:54:71:38:68:7b:69:06:e0:04:
         93:41:f3:f0:02:91:46:92:05:fb:b9:82:02:b0:cf:42:cd:8f:
         60:b3:2b:44:d0:47:7a:f8:54:8b:ed:30:c9:6f:f5:b2:0f:c0:
         45:f2:1c:70:56:85:c0:a2:d0:6e:7d:54:f7:9a:e6:7a:90:68:
         a2:f8:ca:98:ac:de:0b:b7:33:da:af:21:37:65:74:c5:08:54:
         35:0d:e8:7e:13:2c:c8:ca:b2:65:c0:b6:b6:bb:83:80:63:68:
         4b:b6:f2:0d:b2:09:10:99:0c:44:02:0f:35:02:9f:bf:16:19:
         4b:1d:d3:76:5a:ca:11:85:70:76:87:47:f0:0d:ad:b3:6a:ae:
         bb:14:39:46:1c:8d:30:be:0b:d3:74:8a:11:bd:65:d6:06:57:
         e5:ea:98:b4:2a:eb:01:9c:f5:8e:c2:ad:55:13:14:34:18:65:
         c2:48:4e:3f:82:8a:a6:9f:a4:75:51:5a:8d:9a:2c:f1:b3:f0:
         ef:5a:e0:ea:87:b6:3b:b4:6b:7b:f4:cc:a4:c7:4f:86:5f:12:
         2c:2c:1f:5c:f2:2f:b3:23:ba:74:c8:5c:84:ec:0a:f1:08:18:
         bf:de:05:4a:51:b6:d4:fb:77:3a:41:34:92:50:f6:7b:35:f5:
         cf:4f:72:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:47:15 2025 by rpki-client