Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.mft
File:                     6quXbuOZaLcCcSdvbSLluRyOFuM.mft (raw, json)
Hash identifier:          kup1w8d5oPB8tFygh7S9WQv/z90hwWBaALNzDFm1wpQ=
Subject key identifier:   B6:3D:4D:A1:FB:F1:D6:E8:49:14:10:79:9D:A8:C6:FB:60:1E:FA:05
Authority key identifier: EA:AB:97:6E:E3:99:68:B7:02:71:27:6F:6D:22:E5:B9:1C:8E:16:E3
Certificate issuer:       /CN=eaab976ee39968b70271276f6d22e5b91c8e16e3
Certificate serial:       0197B5C51AD5AC2440C1346C0F3FF9439F76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6quXbuOZaLcCcSdvbSLluRyOFuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.mft
Manifest number:          04EA
Signing time:             Sat 28 Jun 2025 09:01:22 +0000
Manifest this update:     Sat 28 Jun 2025 09:01:22 +0000
Manifest next update:     Sun 29 Jun 2025 09:01:22 +0000
Files and hashes:         1: 6quXbuOZaLcCcSdvbSLluRyOFuM.crl (hash: JgtTvBIOiQQi+p4JfFGApeEddjNp+leKH6r90BJUXec=)
                          2: i0q0WkljmRyWQBIX1k1gWh9MzA8.roa (hash: trVbr6O3e+ojVgxfkyiAOzBDkcebOcDQG0rTpSEVsGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6quXbuOZaLcCcSdvbSLluRyOFuM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 09:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:c5:1a:d5:ac:24:40:c1:34:6c:0f:3f:f9:43:9f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaab976ee39968b70271276f6d22e5b91c8e16e3
        Validity
            Not Before: Jun 28 09:01:22 2025 GMT
            Not After : Jun 29 09:01:22 2025 GMT
        Subject: CN=b63d4da1fbf1d6e8491410799da8c6fb601efa05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:57:bf:27:c6:89:3f:b1:fe:6e:c4:c0:a5:40:
                    80:52:d7:29:dd:7e:e0:13:23:b3:95:46:84:72:06:
                    a1:36:5a:be:ab:d8:83:ea:ab:8d:7d:88:96:3d:aa:
                    cb:44:21:c4:10:1e:94:ba:9f:77:8a:e5:ee:45:65:
                    c5:56:3a:24:66:b8:85:84:22:87:d1:00:14:40:8f:
                    2c:62:69:6e:a6:ae:d8:b0:48:06:e8:73:5e:a7:66:
                    56:a8:18:da:05:09:f2:c9:da:1e:77:8d:61:d7:c3:
                    86:69:7b:18:09:11:bd:3b:4f:3b:43:c1:a8:92:67:
                    9d:51:2f:c7:53:66:1e:57:6a:56:03:4b:0a:c4:d3:
                    f3:73:92:c2:0e:34:10:37:a8:80:be:62:af:22:40:
                    dd:09:94:2e:7c:a3:0c:7c:3b:04:d2:bf:a1:fd:40:
                    b2:04:aa:3b:f7:20:b7:7e:d7:42:e5:ab:76:01:91:
                    02:59:3a:ad:04:e2:a1:87:e8:bd:2f:cc:76:6e:17:
                    7d:02:84:14:be:24:d0:a0:28:06:97:5e:dd:b6:44:
                    2e:0a:0b:3f:53:1c:de:dc:af:66:7c:fe:7c:00:58:
                    cd:a2:91:51:1d:ea:d9:e3:d7:bd:1a:6a:d5:e9:d2:
                    f3:fa:73:6c:ed:dd:67:af:a6:11:37:54:ff:3d:ab:
                    46:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3D:4D:A1:FB:F1:D6:E8:49:14:10:79:9D:A8:C6:FB:60:1E:FA:05
            X509v3 Authority Key Identifier:
                keyid:EA:AB:97:6E:E3:99:68:B7:02:71:27:6F:6D:22:E5:B9:1C:8E:16:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6quXbuOZaLcCcSdvbSLluRyOFuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:8a:7f:31:db:cc:da:20:ba:d4:e6:8f:96:67:3f:87:ca:6b:
         15:e3:fd:9c:eb:8e:d5:d9:9d:25:93:fb:59:83:bb:f3:f5:4d:
         06:64:ea:7d:0e:b5:03:cf:0a:1c:80:f4:46:2f:17:a8:15:ab:
         cf:94:e6:ad:da:74:63:c6:2a:2f:b3:f9:be:ff:d0:31:c2:78:
         8b:a4:83:3c:4e:03:25:0f:74:18:8b:fb:b0:12:1b:9d:c8:86:
         e4:d3:08:42:8b:4a:b4:a2:9c:14:e7:ad:1a:57:79:51:aa:df:
         30:16:8f:f3:92:c9:96:ca:8b:27:99:c5:fb:35:2e:ba:d5:23:
         99:2a:33:e7:85:eb:b5:0d:4e:65:82:aa:56:a5:e7:0c:16:a0:
         89:ea:75:8e:b4:47:65:60:ac:e7:44:b6:94:e3:b7:1e:66:a4:
         9f:b9:1b:63:49:f9:b0:77:d5:f4:2c:46:18:f8:d2:95:4a:24:
         6b:79:41:ae:5e:b7:f6:c6:1a:8f:7d:13:88:70:00:72:57:70:
         c4:11:72:67:ea:17:dc:da:a9:cd:71:25:38:a4:de:95:8a:6b:
         82:67:a1:35:0f:2b:93:e3:6e:17:23:c3:f0:13:99:20:9f:c7:
         d1:cc:da:c6:27:24:4f:ba:b2:43:99:7f:dd:26:e6:70:42:7e:
         fb:72:31:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:49 2025 by rpki-client