Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft
File:                     6TGKUZjc0_ysJJgFU4XZryEQprQ.mft (raw, json)
Hash identifier:          lbQKfmsyef3tpuEilqb7aIOswCFG3T0l0sWXXVex9hg=
Subject key identifier:   D6:0C:67:45:3D:89:75:0F:C7:E1:16:87:3D:3B:36:31:58:1E:AA:C6
Authority key identifier: E9:31:8A:51:98:DC:D3:FC:AC:24:98:05:53:85:D9:AF:21:10:A6:B4
Certificate issuer:       /CN=e9318a5198dcd3fcac2498055385d9af2110a6b4
Certificate serial:       01963E425A7E0A6DE4BB890B6D4DB948F997
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TGKUZjc0_ysJJgFU4XZryEQprQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft
Manifest number:          043B
Signing time:             Wed 16 Apr 2025 11:00:58 +0000
Manifest this update:     Wed 16 Apr 2025 11:00:58 +0000
Manifest next update:     Thu 17 Apr 2025 11:00:58 +0000
Files and hashes:         1: 1-BVKVQFCRlMAcE96pNTNBcbIG7s.roa (hash: JOxbdIeMTOyk9ZAjY/swAEcMqcgzzQjrBDhzF90m3Vs=)
                          2: 3ZU7hgqFBvs-JOWJ6E4MEbiA2bk.roa (hash: /NMweqecvh0z4jYnenJq1VRlGwr+MOCXPTrSyQD9fMA=)
                          3: 6TGKUZjc0_ysJJgFU4XZryEQprQ.crl (hash: vipUn0P9T58mDSQEHgYT7mTDgWxHafGn9n3OEt1xm6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TGKUZjc0_ysJJgFU4XZryEQprQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 11:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3e:42:5a:7e:0a:6d:e4:bb:89:0b:6d:4d:b9:48:f9:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9318a5198dcd3fcac2498055385d9af2110a6b4
        Validity
            Not Before: Apr 16 11:00:58 2025 GMT
            Not After : Apr 17 11:00:58 2025 GMT
        Subject: CN=d60c67453d89750fc7e116873d3b3631581eaac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4c:39:0e:67:9d:94:e0:93:a1:d9:5e:c1:f1:
                    dd:75:da:9c:76:f2:23:c6:a9:6d:ee:43:67:1e:10:
                    b4:e7:ca:33:c7:b1:f9:3d:cb:3f:74:b1:60:d5:3f:
                    3e:a3:2b:cc:c8:db:9a:f3:1c:4b:70:d3:76:9b:06:
                    15:6d:4b:1d:19:63:9c:99:4e:13:3b:17:b8:07:c4:
                    76:48:ec:2f:78:04:81:5e:9e:d7:f8:0b:88:4b:56:
                    96:34:2c:bd:ae:38:c4:14:fc:17:3d:fc:8f:f3:f0:
                    e1:37:d5:f6:e5:7e:45:f9:95:19:36:36:ba:0c:73:
                    25:bd:db:bf:9e:00:bb:a5:38:72:02:d7:65:b9:c7:
                    1d:eb:ef:64:66:f4:bc:12:80:05:7d:dc:af:f2:80:
                    b0:32:c4:09:ce:7d:d8:41:0d:c0:ef:76:d8:4b:9e:
                    bb:54:04:1d:5b:27:ae:62:88:83:38:9a:73:58:32:
                    d1:a8:ec:3a:52:10:f9:86:2b:c4:c1:7f:6c:fc:f3:
                    13:f5:b5:32:04:96:90:2e:fd:50:1c:9f:82:34:80:
                    59:df:b0:ae:14:4c:81:27:07:1b:a0:1e:e1:f5:97:
                    3c:cc:ae:80:1b:cc:31:77:ec:c7:26:02:1d:7f:d0:
                    52:d6:2a:a1:2c:12:23:a9:62:12:73:da:15:88:b2:
                    00:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0C:67:45:3D:89:75:0F:C7:E1:16:87:3D:3B:36:31:58:1E:AA:C6
            X509v3 Authority Key Identifier:
                keyid:E9:31:8A:51:98:DC:D3:FC:AC:24:98:05:53:85:D9:AF:21:10:A6:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TGKUZjc0_ysJJgFU4XZryEQprQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:06:42:c5:42:b7:40:cf:ab:14:97:c4:58:b8:9b:68:c4:87:
         3c:1d:f7:75:07:6b:05:b2:35:3f:52:11:4c:9f:4a:de:fc:6c:
         44:30:26:5e:7e:3c:5f:1d:ba:6e:d4:9d:41:a8:10:43:21:b6:
         15:f7:0d:7e:80:7f:84:14:96:55:4a:ee:14:10:19:eb:3d:e1:
         11:17:a9:3a:de:10:1b:e9:20:55:4d:bb:ec:26:46:c4:63:1c:
         b6:35:7a:8c:5d:e3:c5:78:3f:67:1c:d4:02:f9:6f:c1:3f:66:
         83:02:51:9f:c7:c0:58:08:11:5f:c5:f4:07:0f:26:aa:53:96:
         95:99:a6:a9:6d:b7:87:37:72:c9:65:08:60:62:78:f9:57:c1:
         14:ce:0f:79:5e:4c:4e:e5:14:fd:b3:e5:ce:8a:4e:02:49:78:
         e2:89:e8:9b:30:9e:36:d7:40:25:fe:d9:77:ed:9e:cc:d1:8e:
         fd:65:07:ea:67:f7:32:97:db:7f:cd:60:79:ef:b0:65:70:81:
         65:ba:3d:f9:bb:ba:45:35:cb:61:03:91:e7:22:d9:ed:4f:90:
         07:16:28:da:b4:d7:18:a4:5f:9b:73:ff:5b:4b:ea:88:f9:a6:
         b8:82:36:d3:3a:01:fc:86:94:b3:07:62:3f:47:ed:d0:94:d9:
         22:c1:c7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:29:04 2025 by rpki-client