Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft
File:                     6W790RLajZdctZOq0f6IQNbwiuM.mft (raw, json)
Hash identifier:          6ZxBaO1kv7Fy5EXcLNTx7jdyeRvkUOIUmHInrpXHUm4=
Subject key identifier:   E7:CE:1C:1F:62:BA:46:B2:70:2F:13:2F:BC:A3:EE:CE:47:CF:0E:67
Authority key identifier: E9:6E:FD:D1:12:DA:8D:97:5C:B5:93:AA:D1:FE:88:40:D6:F0:8A:E3
Certificate issuer:       /CN=e96efdd112da8d975cb593aad1fe8840d6f08ae3
Certificate serial:       01974FD7AF799421DF5CB9E204585B2C938D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft
Manifest number:          0148
Signing time:             Sun 08 Jun 2025 14:00:24 +0000
Manifest this update:     Sun 08 Jun 2025 14:00:24 +0000
Manifest next update:     Mon 09 Jun 2025 14:00:24 +0000
Files and hashes:         1: 6W790RLajZdctZOq0f6IQNbwiuM.crl (hash: 9f+SsX9Bdfs7DysUDC3gHYK3gcuv1cnu1qQMFZloQns=)
                          2: Nn9zvns-9MxxIXjn8JIbpmV34s8.roa (hash: 7A6j8hAQUIpmUDd+lagtKalWuiGm1he97we0iFCchhc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:d7:af:79:94:21:df:5c:b9:e2:04:58:5b:2c:93:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96efdd112da8d975cb593aad1fe8840d6f08ae3
        Validity
            Not Before: Jun  8 14:00:24 2025 GMT
            Not After : Jun  9 14:00:24 2025 GMT
        Subject: CN=e7ce1c1f62ba46b2702f132fbca3eece47cf0e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9b:9b:de:00:e5:44:1d:e6:27:39:46:64:df:
                    b7:e3:91:49:44:2c:ab:a5:58:9b:62:54:ee:26:b2:
                    98:df:a4:fe:3e:92:be:23:52:9a:62:bc:78:5b:3a:
                    fd:15:74:a0:c8:b8:d3:4e:bb:9f:6f:a3:17:fb:53:
                    45:fe:a1:db:f0:f8:8b:50:af:b8:77:c9:3e:1a:0f:
                    ac:7d:d5:77:18:8e:11:c0:d6:35:59:92:82:96:be:
                    28:04:55:f6:09:70:4b:17:f1:7c:6c:ed:1c:6c:95:
                    8a:8b:05:ca:19:ff:30:a9:50:6f:db:a7:46:4f:73:
                    e1:35:c8:e5:7d:0d:10:30:65:f3:8d:81:3d:98:c1:
                    4d:28:28:37:8f:10:8d:0e:d7:c8:57:07:2f:09:ec:
                    1f:3c:d8:76:2e:cf:06:f8:49:3a:b2:c4:26:56:3c:
                    06:dc:ca:12:56:97:8a:29:33:ff:79:6c:ee:69:c7:
                    a9:ed:ac:7e:a0:67:d5:78:a8:9e:4e:17:d9:ed:ae:
                    63:74:d3:0a:43:4b:99:0b:dc:7b:e3:b2:e8:60:96:
                    6f:98:cf:e6:8e:6b:e7:54:55:f4:53:fa:cf:30:94:
                    ad:48:6d:cc:2c:4a:34:55:8e:87:58:1e:b9:ae:8a:
                    a7:72:47:50:25:c4:48:5b:a0:a8:3a:5a:c6:c3:78:
                    e6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CE:1C:1F:62:BA:46:B2:70:2F:13:2F:BC:A3:EE:CE:47:CF:0E:67
            X509v3 Authority Key Identifier:
                keyid:E9:6E:FD:D1:12:DA:8D:97:5C:B5:93:AA:D1:FE:88:40:D6:F0:8A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:36:88:d0:8d:66:91:60:8d:61:d0:0e:63:ad:56:16:8c:91:
         5f:3c:25:3d:c1:8a:6d:0d:21:39:e6:31:69:ba:e9:d7:9e:bc:
         66:a1:51:1e:7f:60:75:e4:2d:72:7c:e3:a2:e3:53:d3:3a:a3:
         a7:3c:6d:b7:25:d0:e2:ea:89:84:a0:75:76:c7:e4:61:26:b5:
         5c:00:af:26:bd:27:a1:a5:1b:73:9f:ee:a6:1c:6b:c0:6f:8d:
         4d:68:e7:01:08:b6:e8:c0:3a:5d:19:8d:fa:23:cf:c5:39:6a:
         da:f6:81:19:f5:9a:05:50:4a:9d:91:e5:38:3f:5f:63:59:19:
         42:e4:32:c4:ea:b3:2d:a8:79:70:8e:47:34:1d:02:52:5d:56:
         ef:b7:53:7b:06:29:9f:6b:ee:4a:f3:b0:f5:3d:b6:9a:01:f3:
         d9:2a:15:4b:89:0c:a6:5a:38:79:2f:22:0f:d8:85:bd:2e:7a:
         07:5f:ae:4b:43:7e:90:e7:59:e1:f9:ed:14:62:f6:8c:d7:57:
         9c:9b:67:c0:34:35:57:4c:4c:83:3b:42:1f:37:86:d4:16:31:
         55:77:4f:1b:9e:01:c5:dc:bb:00:13:f7:6a:eb:88:a0:67:30:
         a4:fc:1a:fd:ee:8b:be:72:f6:62:3a:fb:95:b8:c6:09:f4:64:
         02:d5:c4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:37:54 2025 by rpki-client