Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
File:                     6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft (raw, json)
Hash identifier:          l2hJw37HR4AM2R9ba51gQhlwSOrvityvavrj+XPPcaE=
Subject key identifier:   10:F6:E3:10:6B:D6:FD:98:38:6E:87:A8:6B:8B:31:2B:73:A2:80:4C
Authority key identifier: E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24
Certificate issuer:       /CN=e847e88749704294552fef54886111ed0586ec24
Certificate serial:       0196C0815C4987D68EF411D4E6ECBAD95322
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
Manifest number:          02C5
Signing time:             Sun 11 May 2025 18:00:25 +0000
Manifest this update:     Sun 11 May 2025 18:00:25 +0000
Manifest next update:     Mon 12 May 2025 18:00:25 +0000
Files and hashes:         1: 6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl (hash: 9oTqTzZBFrIM4iXsOHCtfpdfQfKDnnFr037op8r+uy8=)
                          2: fcrIgsFTuq19FBKqvOpJqv38n8M.roa (hash: NL7GdVXSlx1fCyZ9yJikitlzZCSr51QpP5vN2zoZyfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:81:5c:49:87:d6:8e:f4:11:d4:e6:ec:ba:d9:53:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e847e88749704294552fef54886111ed0586ec24
        Validity
            Not Before: May 11 18:00:25 2025 GMT
            Not After : May 12 18:00:25 2025 GMT
        Subject: CN=10f6e3106bd6fd98386e87a86b8b312b73a2804c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:eb:04:79:83:c8:17:d3:1a:e5:e7:a9:40:35:
                    27:e9:b8:39:82:cd:8a:6b:f6:f4:4f:92:4f:7f:5a:
                    e4:46:dc:53:90:8b:1e:8d:8d:fa:91:b7:51:d0:80:
                    59:8f:f7:5b:06:38:dd:5b:c8:22:1a:56:e7:df:eb:
                    46:2b:42:e2:41:08:9a:b7:37:05:9a:7a:76:bf:5a:
                    71:0c:8c:fc:4f:7e:4c:36:3a:cf:fe:58:bb:c4:1f:
                    a2:79:7b:1f:96:47:8d:44:fd:84:24:dc:39:62:82:
                    8d:c1:48:2d:f9:24:93:7e:d7:cf:33:5a:5e:68:b3:
                    4c:21:4f:f5:b5:7e:f7:e8:67:1f:55:2e:f5:af:c9:
                    15:81:6c:6d:da:37:b5:fd:f5:12:ba:33:b6:0e:e2:
                    a8:1b:e5:16:0a:a8:1e:5c:92:9d:e9:d5:0b:de:3b:
                    b0:a1:1e:cc:82:f7:25:48:2c:60:87:f7:d8:ee:0c:
                    15:90:2f:df:e2:7e:df:c2:d4:dc:6d:58:9f:6b:ff:
                    80:78:6b:f7:19:5b:ca:cb:6b:a2:e2:53:f6:31:6d:
                    6a:b8:24:d9:c5:2b:6e:ee:70:b8:09:3a:80:30:23:
                    12:59:e7:02:90:8c:bd:40:f3:44:3f:81:d2:91:c4:
                    5f:e9:95:ec:da:4b:db:e1:c9:16:66:8c:0f:c7:73:
                    57:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F6:E3:10:6B:D6:FD:98:38:6E:87:A8:6B:8B:31:2B:73:A2:80:4C
            X509v3 Authority Key Identifier:
                keyid:E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:2e:8d:c2:7c:f3:e3:c6:21:7d:d1:98:61:24:4f:61:8f:a2:
         d4:6d:e0:4b:7d:f0:c5:ec:5a:bb:4e:9b:72:94:3d:20:dd:3a:
         22:33:e3:2d:3e:2c:aa:ad:04:93:a4:e2:f5:78:12:cc:8b:0c:
         66:64:2a:df:2c:c3:00:eb:62:7e:c6:85:38:82:10:da:9c:56:
         1b:1d:9e:aa:8a:15:89:10:f0:18:1c:23:7e:b1:21:21:51:0c:
         50:a5:db:49:75:86:32:4e:2e:f4:34:30:7a:3f:be:71:63:f8:
         a1:a3:c9:f3:57:f8:7c:b1:d9:ae:95:cc:2d:74:56:06:af:33:
         17:98:26:ef:22:57:54:de:a8:4f:2a:db:9d:8f:37:ee:25:62:
         25:6c:14:5b:3d:0f:2e:d0:e6:84:6d:c1:e6:13:f5:7d:48:1a:
         f7:94:b9:92:fd:78:65:41:15:45:6b:6d:67:4a:c1:e8:de:f9:
         5e:5f:15:83:c6:f5:6d:26:2c:9d:b2:0c:e1:3d:c5:f7:05:93:
         86:f5:79:e2:a4:4a:a4:7f:8b:9c:80:7e:3a:cb:b1:79:3f:9c:
         39:7a:d5:7f:91:94:7b:af:22:43:79:31:73:89:e6:6e:b0:38:
         46:52:da:2f:42:92:e6:1a:11:c1:7e:4c:cf:88:1c:0f:25:11:
         a1:20:1e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:40:45 2025 by rpki-client