Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
File:                     6vauX7W-PpqblzGcevhQK76JOjc.mft (raw, json)
Hash identifier:          lJbo8KZ4hf9cdwZwrjsdo1FFY2UocPJUlrpHV+WnEN0=
Subject key identifier:   BA:5C:A1:0A:48:04:75:C3:EE:B3:1B:CF:58:F9:EF:19:36:5D:D9:8C
Authority key identifier: EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37
Certificate issuer:       /CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
Certificate serial:       01964E22D4D1C7490C3A6E519642819CBADB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
Manifest number:          149A
Signing time:             Sat 19 Apr 2025 13:00:27 +0000
Manifest this update:     Sat 19 Apr 2025 13:00:27 +0000
Manifest next update:     Sun 20 Apr 2025 13:00:27 +0000
Files and hashes:         1: 6vauX7W-PpqblzGcevhQK76JOjc.crl (hash: Ksbi26673R/rgxYTKQZiqIUDzn845PS/GUU+ejknhow=)
                          2: Ahvmv48ngf-KjVDLWWBDTBDASd0.roa (hash: 7ZyR7Sl5BjMwCkDy0XgoHIL8hy/aGuAql4BiOWVa8/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:22:d4:d1:c7:49:0c:3a:6e:51:96:42:81:9c:ba:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
        Validity
            Not Before: Apr 19 13:00:27 2025 GMT
            Not After : Apr 20 13:00:27 2025 GMT
        Subject: CN=ba5ca10a480475c3eeb31bcf58f9ef19365dd98c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ea:b9:a1:d2:90:ed:84:c2:55:97:78:36:cb:
                    de:53:82:3d:ae:83:75:59:50:a0:e6:52:02:be:d9:
                    be:35:81:af:e9:6d:98:67:1e:0f:c4:19:ca:10:66:
                    10:2f:e4:16:eb:90:80:0a:5b:6f:a8:f7:69:11:84:
                    ea:e2:33:7e:7f:09:07:b1:57:e0:96:63:de:2a:84:
                    0d:48:66:9d:96:ac:27:e7:1b:20:9e:26:74:9a:20:
                    56:d9:b4:3b:45:ad:0c:59:e5:b3:b4:c3:81:5b:b1:
                    c6:50:20:de:4e:e1:26:5e:fc:82:4c:4d:0f:50:a2:
                    00:0c:fe:9e:25:48:27:ac:db:cf:ec:37:0e:ce:97:
                    70:23:85:f6:8d:e4:87:67:1e:5b:54:a6:2c:61:d5:
                    97:db:c7:4c:72:da:8f:04:cf:d1:c7:d7:56:63:1c:
                    c4:90:65:16:61:0e:d5:3f:62:c0:4f:14:55:0c:3b:
                    a1:79:f5:e0:f2:32:ca:07:20:9a:16:0e:a3:ba:f5:
                    c6:1f:96:71:05:16:1f:ae:f0:f6:11:22:10:0c:b5:
                    32:83:7f:4d:b6:39:6d:14:14:85:25:5c:0e:89:77:
                    cc:be:3c:21:c4:63:09:5a:da:9b:d9:c0:08:b1:3e:
                    8e:73:f4:64:2b:48:f1:02:ff:6d:53:54:6e:63:83:
                    f3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5C:A1:0A:48:04:75:C3:EE:B3:1B:CF:58:F9:EF:19:36:5D:D9:8C
            X509v3 Authority Key Identifier:
                keyid:EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ca:75:bb:e9:29:fe:53:1a:a7:dd:d0:7b:a0:93:c8:11:fd:
         0d:06:91:8e:41:c0:5c:c6:b2:65:3f:4f:ea:e1:a1:85:5e:d2:
         cd:c4:2f:25:45:ac:ed:c6:ff:51:99:76:2e:e9:f6:90:40:25:
         24:ea:06:52:3e:da:d8:8f:04:bb:8f:30:40:b4:56:aa:b2:7a:
         8d:90:78:84:65:c3:11:3a:75:91:76:2b:70:0e:fd:9b:67:d7:
         41:0d:a0:65:8f:58:68:04:53:7d:d9:11:58:65:f5:8a:3f:be:
         2d:93:19:54:51:ec:e9:3a:bb:9e:4a:1f:39:c4:08:ba:36:70:
         19:ab:ef:d2:bf:be:b1:55:6e:14:41:82:d5:9d:b8:ea:99:25:
         70:6a:47:91:0f:f3:e5:e9:ac:d9:34:8b:08:a9:6f:3a:ed:e2:
         61:53:e2:56:30:1d:24:34:90:13:ca:49:68:33:11:41:bc:f6:
         b8:98:3c:44:53:24:74:0c:80:f8:2e:db:3b:8d:98:83:7e:01:
         73:09:86:94:7b:4a:13:51:b9:81:98:8b:8c:3d:65:b6:8f:7a:
         e6:93:ef:32:80:71:3f:51:bc:70:9a:fc:68:9f:da:42:d7:bd:
         e5:eb:86:c4:f4:6d:dd:9d:f2:28:42:a9:50:b1:f8:ca:94:f0:
         72:4a:b8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:03:11 2025 by rpki-client