Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
File:                     6BOTvf9gFGKlVZHSass9jJI_8m0.mft (raw, json)
Hash identifier:          CbuSz48huM+DVImuBjG/nkkIXUaYXRzMFlZcOfztuHA=
Subject key identifier:   8F:34:EA:37:2F:A9:99:10:59:BC:C1:3F:A9:88:43:F0:0F:40:6A:A0
Authority key identifier: E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
Certificate issuer:       /CN=e81393bdff601462a55591d26acb3d8c923ff26d
Certificate serial:       01973CBEB7FCEE4C1938D8EE606CFC67E408
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
Manifest number:          1413
Signing time:             Wed 04 Jun 2025 21:00:21 +0000
Manifest this update:     Wed 04 Jun 2025 21:00:21 +0000
Manifest next update:     Thu 05 Jun 2025 21:00:21 +0000
Files and hashes:         1: 6BOTvf9gFGKlVZHSass9jJI_8m0.crl (hash: Jw7ka8kwCv2YItX67S8SG4T91DtUuMZqxu/58tbCxx4=)
                          2: RwWHoWi8bvEcrn91U7_cQg2FozE.roa (hash: HQDbKoqS2BbhQGyXNSljHl9fABiKNRyJ1D+l6ixZKCE=)
                          3: vvQy0Yj8i6h1g42ZTAwhRIXBuw8.roa (hash: T8KzIT3w14qu1ZHhgwVuDOIW10SZ/SXhFvfY0nRS5nc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3c:be:b7:fc:ee:4c:19:38:d8:ee:60:6c:fc:67:e4:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81393bdff601462a55591d26acb3d8c923ff26d
        Validity
            Not Before: Jun  4 21:00:21 2025 GMT
            Not After : Jun  5 21:00:21 2025 GMT
        Subject: CN=8f34ea372fa9991059bcc13fa98843f00f406aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:93:00:18:49:b3:af:d9:51:dc:2a:21:08:6e:
                    14:b6:76:58:47:57:07:e6:06:eb:48:93:cc:dc:4d:
                    16:05:fb:b5:ed:f3:f0:fb:8e:00:e1:a0:d8:4b:fa:
                    5f:46:c5:e7:b9:3f:55:e9:62:3c:05:64:5a:79:e3:
                    ca:58:e0:a8:95:71:a4:6c:4b:aa:d3:ce:2c:d7:f3:
                    05:d5:a0:c4:bb:d0:f9:43:83:9d:e5:8d:c1:24:fa:
                    eb:d9:14:01:90:ba:ba:5d:3b:28:a2:a8:ee:a9:8c:
                    ac:74:3d:55:df:e9:15:a9:50:0f:ec:7c:dc:91:06:
                    a7:bc:4d:8c:98:81:97:36:fb:50:f3:47:4e:d2:bc:
                    3a:51:0c:07:c3:88:f2:20:63:77:ef:29:13:e2:5f:
                    76:99:67:c3:ef:60:76:2c:25:b0:4b:2f:96:38:9e:
                    db:2a:f1:ed:6f:22:3a:13:d6:41:1a:72:ff:69:0c:
                    aa:47:cc:1e:68:8f:6d:90:31:c2:cb:3a:ca:e2:c4:
                    93:c2:51:9a:a5:1f:ca:1c:17:8d:dd:3b:01:44:a8:
                    71:ec:19:53:f3:40:74:fb:0e:71:7c:a6:9a:22:da:
                    2a:f5:9a:df:a0:b4:c0:a6:67:1a:10:42:5c:f3:56:
                    74:96:29:e4:f2:04:4d:d5:fa:c5:f9:c9:a4:85:18:
                    f4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:34:EA:37:2F:A9:99:10:59:BC:C1:3F:A9:88:43:F0:0F:40:6A:A0
            X509v3 Authority Key Identifier:
                keyid:E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:15:4e:4d:60:f8:84:10:17:8d:c5:71:3a:30:7d:7b:2e:2c:
         8d:b7:7f:00:ac:97:6f:fe:d7:e5:37:0b:28:f5:b6:1a:23:af:
         ce:c3:04:07:14:d2:b0:ff:d1:b5:53:51:88:32:80:1c:61:fa:
         73:c4:04:99:51:73:16:30:ec:64:09:01:52:5e:ea:d1:7b:42:
         93:9a:f1:a2:63:3d:9c:08:03:f6:e5:d8:9e:47:9b:1f:43:a3:
         22:20:7d:67:d9:a4:e7:2b:85:aa:92:c3:63:2e:bb:7c:f9:b1:
         7b:f3:2e:0c:0c:9f:f0:95:50:21:f7:ac:0d:4d:51:f7:d8:f2:
         46:e8:21:ae:95:80:27:0d:6e:76:75:63:b9:36:ab:d3:2e:4c:
         5c:39:f2:59:cc:ce:3e:d7:89:62:c0:40:0c:bb:54:78:bf:e8:
         de:4f:13:36:fd:5c:f6:6c:ea:d9:5c:28:7e:04:4a:df:c8:f6:
         53:7c:b9:aa:ac:5e:60:2c:67:97:e2:4f:38:a6:21:5c:62:46:
         6f:2a:7f:ee:2a:68:dd:63:96:35:35:45:a1:45:7f:eb:27:b6:
         6e:65:23:44:95:8f:09:53:35:81:15:dd:4c:bb:48:b6:6f:95:
         e1:c0:f7:76:71:1d:2d:04:1e:9a:ca:a0:4f:03:0b:2c:dc:97:
         31:cb:d4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:17:26 2025 by rpki-client