Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
File:                     e20oQEBEI571gkLyEOCxZmfrQNA.mft (raw, json)
Hash identifier:          Chnse/XLM2eyBtVI+RfJHEVBaDwf3mn/e+oEm3JjqCE=
Subject key identifier:   D6:8F:7A:F9:C2:30:07:3D:1F:E7:7A:00:32:8E:FC:5C:18:67:1A:8F
Authority key identifier: 7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
Certificate issuer:       /CN=7b6d28404044239ef58242f210e0b16667eb40d0
Certificate serial:       019750B449A4F9D59B2810FA1E7775383EA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
Manifest number:          1510
Signing time:             Sun 08 Jun 2025 18:01:21 +0000
Manifest this update:     Sun 08 Jun 2025 18:01:21 +0000
Manifest next update:     Mon 09 Jun 2025 18:01:21 +0000
Files and hashes:         1: e20oQEBEI571gkLyEOCxZmfrQNA.crl (hash: bStoMSMnjj32lQJ04J/M4eg4903b451vgsZt9Xnrf4c=)
                          2: hlbCnpGhMRluMY_1waDMmeV9vY4.roa (hash: KZsIHpuRlGx7ybmtLKdiNmONLiSIwlKsEPr24QJ/98Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 18:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:b4:49:a4:f9:d5:9b:28:10:fa:1e:77:75:38:3e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b6d28404044239ef58242f210e0b16667eb40d0
        Validity
            Not Before: Jun  8 18:01:21 2025 GMT
            Not After : Jun  9 18:01:21 2025 GMT
        Subject: CN=d68f7af9c230073d1fe77a00328efc5c18671a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:65:a0:63:8d:c9:0b:3f:4f:d3:0e:e8:2c:2e:
                    2d:59:8f:0c:28:0b:0d:3e:b8:b7:76:e1:fc:0c:f8:
                    60:da:bb:43:b5:ab:c0:09:60:7c:53:5e:5d:4c:67:
                    ce:96:c8:1f:81:9b:4c:6e:50:13:89:61:7d:eb:25:
                    f7:b0:a7:14:0a:74:72:f7:e7:34:d6:9a:7f:60:48:
                    f8:f3:74:25:e3:cf:fa:56:eb:32:36:63:9e:d8:94:
                    36:ee:e6:51:77:2e:9f:e4:04:b3:04:cb:20:3b:88:
                    a0:69:66:4f:85:4f:61:15:75:21:54:c8:22:d6:27:
                    30:da:38:1d:1d:ea:05:9d:57:d7:50:b4:20:18:c9:
                    51:ad:0e:08:ee:f6:ac:b0:07:e6:84:27:76:a2:ac:
                    55:06:87:19:cb:0e:bf:e5:8f:b0:9f:70:e3:13:e2:
                    97:5d:1f:e6:25:bb:18:49:39:6a:93:a1:57:a2:b0:
                    99:ab:8d:7b:11:72:89:4a:63:5a:18:4e:f9:58:14:
                    18:f6:7a:5c:4a:67:4a:ce:ba:d8:5f:8e:e6:6a:52:
                    c6:00:9d:6b:a6:96:c8:98:ad:fe:9e:ca:f9:05:cb:
                    f0:5b:ca:ab:47:b1:5a:de:8d:1a:86:68:f1:04:b5:
                    c9:21:e8:81:63:49:c2:bc:7c:58:a8:2c:5c:f5:ac:
                    0a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8F:7A:F9:C2:30:07:3D:1F:E7:7A:00:32:8E:FC:5C:18:67:1A:8F
            X509v3 Authority Key Identifier:
                keyid:7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:fe:20:77:b0:af:4b:cc:8f:df:73:69:e1:2a:d0:ef:cb:1c:
         63:f1:be:a9:66:a6:e4:1a:65:fc:22:51:b1:ab:84:26:50:32:
         8e:72:51:00:ae:b8:7b:a7:27:4f:60:b4:aa:bb:bd:2b:b5:dd:
         70:84:6e:d7:26:aa:5f:ca:41:7e:86:ab:04:5a:b1:5e:b6:30:
         06:ff:a4:fc:16:de:1b:6b:b4:49:6e:b8:d6:79:b7:d9:3a:ce:
         17:66:30:e4:cf:db:40:43:c0:e1:dd:4c:ca:10:4a:6c:80:53:
         99:f8:e1:ce:1b:99:22:63:46:31:f4:e9:28:80:2e:4e:f6:b8:
         b8:d0:fc:45:bc:15:7b:a1:6b:ec:69:38:7f:80:cd:d6:53:86:
         65:72:bc:27:40:91:41:ae:ac:c5:ff:c7:8f:7b:37:3e:02:ca:
         c0:9c:0a:f8:cc:4d:f2:78:6f:ba:c6:92:6e:e0:69:b5:77:37:
         1c:48:65:73:86:73:9d:fa:12:de:a0:98:31:c9:ee:66:8a:1b:
         f8:0f:87:9a:74:1f:56:5e:89:69:f7:e5:6f:39:71:64:86:77:
         ff:79:f5:6c:2c:96:72:80:e2:0c:a5:f6:2f:6f:f5:61:2f:39:
         d7:34:5e:7c:eb:4b:c1:12:df:a1:b7:15:49:8d:ab:b4:6a:5c:
         d1:d3:4d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:21:41 2025 by rpki-client