Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
File:                     6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft (raw, json)
Hash identifier:          DWI7mpECEU/HUCQbAOGl6RGI7eSPJWtm8AVXBZ63etM=
Subject key identifier:   3E:77:C3:01:62:82:D4:8E:4F:7E:AF:F0:A1:BF:3F:2E:8E:79:D9:C0
Authority key identifier: E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41
Certificate issuer:       /CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
Certificate serial:       01974B56B0DACC949DD6310CB9291D905DD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
Manifest number:          1379
Signing time:             Sat 07 Jun 2025 17:01:01 +0000
Manifest this update:     Sat 07 Jun 2025 17:01:01 +0000
Manifest next update:     Sun 08 Jun 2025 17:01:01 +0000
Files and hashes:         1: 6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl (hash: MiO2z8zxE3lE6grwM15AU9jzUmCT31Wf09RIHUNPFgQ=)
                          2: XMQgiqcPelkjm7gWjsFCVZhyYlw.roa (hash: MplIqGMTS4jdBDFbxET40RGJ8kb7EFW6T8B0/VgkIdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:b0:da:cc:94:9d:d6:31:0c:b9:29:1d:90:5d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
        Validity
            Not Before: Jun  7 17:01:01 2025 GMT
            Not After : Jun  8 17:01:01 2025 GMT
        Subject: CN=3e77c3016282d48e4f7eaff0a1bf3f2e8e79d9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:09:fa:de:94:18:89:57:e7:70:49:cc:15:be:
                    ec:7f:49:cb:4b:aa:17:67:61:25:1a:d6:69:b4:ec:
                    ea:87:9f:4f:53:3c:cd:ad:a7:35:ca:00:60:8a:e7:
                    d2:cc:96:22:55:6a:75:d7:8f:ca:a7:69:d9:ad:c7:
                    74:25:b6:63:ee:5a:de:3c:b0:1d:44:f3:40:26:c1:
                    a8:2a:b4:d6:49:02:e5:58:12:02:4c:4c:51:46:ea:
                    72:c6:47:da:c5:db:26:44:01:d8:a3:63:19:3f:3e:
                    66:3b:dd:73:9b:52:c2:e4:2d:3a:3c:c1:70:8c:94:
                    5c:bc:0b:45:b7:77:b9:8e:82:fb:fb:cf:1b:cc:30:
                    5b:7f:65:b6:26:0e:d2:3a:3b:e8:aa:77:89:b9:30:
                    45:a6:2c:cb:e5:01:fb:e2:5d:e9:89:63:c1:ff:60:
                    30:08:46:cb:47:15:0a:05:56:7d:d6:f3:08:df:c6:
                    72:82:83:65:02:5a:68:64:41:97:46:a0:b6:93:0f:
                    df:c2:49:32:0e:1b:6a:6a:3c:06:d0:75:90:46:2d:
                    26:64:06:3c:92:2f:d6:1b:fb:42:af:ca:ed:a8:8a:
                    41:f9:31:5f:f8:ef:b9:42:5d:c1:65:67:74:1c:a0:
                    a3:ae:32:30:84:84:e3:06:5d:b1:ac:48:18:b3:ab:
                    12:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:77:C3:01:62:82:D4:8E:4F:7E:AF:F0:A1:BF:3F:2E:8E:79:D9:C0
            X509v3 Authority Key Identifier:
                keyid:E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:75:96:6c:41:a8:dd:c9:ae:0c:2f:2f:f6:f1:ec:1b:72:a0:
         b2:18:f6:02:cf:14:9f:6f:01:13:ff:5d:8a:99:79:be:92:a6:
         51:2a:4f:cf:b0:67:fa:b4:ea:08:aa:69:75:32:3d:a4:57:b6:
         26:d7:25:d4:99:ff:16:c0:f2:07:3f:f1:8a:11:05:c3:d5:80:
         68:45:13:26:9d:be:07:fb:f5:da:bf:a0:7e:1a:81:29:e9:39:
         30:e8:9c:8d:76:45:f2:08:30:29:70:03:2d:62:6e:b6:76:ca:
         d2:25:ea:a2:06:e2:4e:e9:b5:24:43:d4:45:3a:19:ff:90:c7:
         8b:69:2b:fe:d9:98:ca:50:84:d5:41:b8:a3:66:c6:1a:dc:fa:
         de:e7:1f:6a:0f:c7:d4:2c:1c:a9:b9:64:69:25:02:f7:21:37:
         b0:5c:0a:6e:44:5c:75:d4:f3:7d:5b:99:5a:0f:01:e0:b1:c7:
         84:99:2f:9c:70:34:d2:0f:6a:f3:8d:29:36:ff:a2:25:91:9c:
         11:58:b4:a7:fd:9c:83:b0:ac:e1:bf:d7:c0:4c:21:8d:43:61:
         2b:c7:ba:17:fe:06:f9:04:e7:72:9e:fe:9d:5e:e9:35:c5:c0:
         2e:62:e0:70:45:e0:19:82:3f:8e:c0:37:be:6a:ef:eb:38:a2:
         02:ff:4a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:06:29 2025 by rpki-client