Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft
File:                     6W790RLajZdctZOq0f6IQNbwiuM.mft (raw, json)
Hash identifier:          OGlZSBmixAN88rB/ET5ScDCP9wEr3hZGkeaxAVmv25E=
Subject key identifier:   72:F3:C4:A1:32:7A:BB:EF:4D:DA:E0:29:5C:B9:B9:C6:69:4A:9F:02
Authority key identifier: E9:6E:FD:D1:12:DA:8D:97:5C:B5:93:AA:D1:FE:88:40:D6:F0:8A:E3
Certificate issuer:       /CN=e96efdd112da8d975cb593aad1fe8840d6f08ae3
Certificate serial:       01964EFEB62067B733CB800A0628C18EEE92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft
Manifest number:          C3
Signing time:             Sat 19 Apr 2025 17:00:37 +0000
Manifest this update:     Sat 19 Apr 2025 17:00:37 +0000
Manifest next update:     Sun 20 Apr 2025 17:00:37 +0000
Files and hashes:         1: 6W790RLajZdctZOq0f6IQNbwiuM.crl (hash: 0RfzkQEc9n/fIgwHUjH6o5626+5/tr+yHTmwykOCqMY=)
                          2: Nn9zvns-9MxxIXjn8JIbpmV34s8.roa (hash: 7A6j8hAQUIpmUDd+lagtKalWuiGm1he97we0iFCchhc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 17:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:fe:b6:20:67:b7:33:cb:80:0a:06:28:c1:8e:ee:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96efdd112da8d975cb593aad1fe8840d6f08ae3
        Validity
            Not Before: Apr 19 17:00:37 2025 GMT
            Not After : Apr 20 17:00:37 2025 GMT
        Subject: CN=72f3c4a1327abbef4ddae0295cb9b9c6694a9f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:10:bc:2f:4b:85:75:75:6c:16:04:d5:30:0b:
                    39:51:bc:00:e9:7c:24:0c:32:1f:49:29:a3:54:27:
                    f7:32:dd:43:34:eb:4a:47:6b:d2:a3:bf:4c:b3:d5:
                    49:b2:f7:52:e1:30:af:1a:f1:3b:22:74:67:36:b4:
                    dd:bb:30:5b:e1:fe:bd:d8:77:95:5b:3f:32:6b:c6:
                    a7:61:5a:9d:59:a4:c7:4e:ec:bd:b1:a8:57:1d:13:
                    92:74:6b:e7:4f:c4:9c:61:5b:9d:ee:63:c8:0b:24:
                    a0:c9:70:7d:3c:0f:2a:ba:1c:48:fd:b4:6f:53:e4:
                    bd:a2:ea:12:33:e8:5d:ab:fa:87:30:5f:75:02:b7:
                    56:08:8a:06:d2:4f:db:61:dc:4e:70:bd:51:39:9a:
                    48:58:df:45:a2:cf:93:bc:0a:0b:06:01:cc:2f:63:
                    53:90:8a:c2:a9:f5:3a:f3:bb:a9:2a:6a:2d:c0:c2:
                    2c:38:66:80:4b:62:1b:08:a6:8f:3a:29:61:8c:9e:
                    c3:4e:71:df:00:e3:e0:3b:64:fe:ec:e2:ce:19:20:
                    3b:46:82:d6:a5:c1:db:41:a3:7f:27:3d:6b:3f:51:
                    17:9a:67:39:e5:17:d9:7c:15:3b:5a:9e:c2:ac:d9:
                    db:8a:f5:a0:55:2d:41:3b:d1:e7:5f:e1:8f:55:28:
                    0e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F3:C4:A1:32:7A:BB:EF:4D:DA:E0:29:5C:B9:B9:C6:69:4A:9F:02
            X509v3 Authority Key Identifier:
                keyid:E9:6E:FD:D1:12:DA:8D:97:5C:B5:93:AA:D1:FE:88:40:D6:F0:8A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:5b:35:ba:30:8c:14:05:b6:fa:9d:78:8e:46:30:20:2b:a7:
         db:9e:14:5e:34:ea:53:7b:76:1c:35:d3:f4:a9:70:02:3d:53:
         e3:6b:66:c1:23:ca:a3:59:0a:65:1a:84:2a:ab:21:ff:20:97:
         c8:03:af:98:bb:3b:64:fc:30:24:38:73:65:68:52:f1:30:f8:
         16:d0:74:41:f6:5e:41:89:0c:a9:bf:4c:f3:1a:0b:d9:30:34:
         46:5b:c7:e8:f0:d2:c3:70:16:af:c1:44:46:9d:21:34:39:0c:
         0c:5e:9b:c5:22:2b:8d:c0:b1:fe:aa:4d:8c:ec:9a:99:4b:c8:
         9e:c2:cf:08:62:5c:dd:57:ef:12:7b:e9:84:58:32:da:39:a9:
         bc:c7:6d:3d:09:1c:21:2d:7e:35:ba:4f:45:29:38:32:06:1d:
         69:b6:89:5f:e8:15:05:71:27:69:a5:17:0e:d0:49:01:b8:dc:
         c0:e2:30:ad:bf:e1:c6:c2:b9:50:d2:b8:70:df:96:0b:76:26:
         c6:c6:ba:d0:e6:de:d9:83:da:6d:38:4d:40:0b:14:e6:eb:ff:
         c5:81:20:55:14:39:f5:2a:7f:13:7d:95:15:57:77:10:a6:07:
         f7:53:0b:78:31:20:26:98:64:2b:a2:d0:d9:38:fb:a5:b7:09:
         1f:0f:63:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:10:45 2025 by rpki-client