Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
File:                     6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft (raw, json)
Hash identifier:          fx6E7AoM4lM4SO6LztZ5DZ0vEPnErNm48sfzlwHfb1E=
Subject key identifier:   89:51:83:02:E2:22:6E:1F:98:00:45:36:FE:F7:3F:0E:C1:64:43:1C
Authority key identifier: E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A
Certificate issuer:       /CN=e9c4cd4118ddffee56e885663795547a1de3f98a
Certificate serial:       0196B935A7D72274F448CA95A1C98E85BCB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
Manifest number:          1530
Signing time:             Sat 10 May 2025 08:00:23 +0000
Manifest this update:     Sat 10 May 2025 08:00:23 +0000
Manifest next update:     Sun 11 May 2025 08:00:23 +0000
Files and hashes:         1: 6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl (hash: 4VqXdLiUUab8X3TwNqPBmWFySOQNbNDksLDw1lOqlxY=)
                          2: yQp3lf1OVxhMQ-si3fJCgBiD3so.roa (hash: 2hMAD2c5ISOXJtDVu0nTlgQQryv7G6wnTPw6jHWepts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:35:a7:d7:22:74:f4:48:ca:95:a1:c9:8e:85:bc:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c4cd4118ddffee56e885663795547a1de3f98a
        Validity
            Not Before: May 10 08:00:23 2025 GMT
            Not After : May 11 08:00:23 2025 GMT
        Subject: CN=89518302e2226e1f98004536fef73f0ec164431c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0a:72:c1:7e:54:93:9e:47:20:12:77:4a:9a:
                    9a:31:fe:7e:5d:07:b1:7d:cd:c2:1c:71:78:4e:d6:
                    38:1d:3d:d3:24:31:a3:c0:0d:55:1b:86:c3:3b:12:
                    21:74:14:83:3b:77:4c:8d:11:ad:31:b2:41:07:10:
                    c9:f9:f4:d3:4b:58:0b:1a:27:3f:b3:23:8d:a3:a7:
                    49:4c:b3:9c:d4:17:3a:99:dc:e9:e7:91:f3:6a:1c:
                    6c:92:f5:70:f9:cf:44:d5:14:58:02:4f:15:55:81:
                    34:70:12:56:9e:d9:5b:9b:03:3f:50:24:fe:8e:3e:
                    59:7b:43:dd:49:60:dd:da:2c:c4:f0:1a:e2:fa:bb:
                    61:19:89:75:d7:fd:6d:9a:24:de:25:ae:8f:2c:f4:
                    53:e4:46:2b:68:96:59:0d:6a:49:ad:ff:ce:fb:49:
                    10:80:c7:56:02:3f:27:d2:43:ed:57:c6:52:26:74:
                    fd:90:42:99:22:78:3c:35:62:21:d6:78:78:65:b7:
                    97:eb:cd:ca:51:1d:05:2c:d5:d3:fc:3e:dd:07:bb:
                    1f:ed:0a:da:e7:ed:f3:ff:c1:75:b0:52:d3:d3:07:
                    d5:a4:ab:6d:ee:ce:84:ff:b6:fc:8a:29:32:6e:77:
                    5b:5d:eb:23:2e:a8:19:42:88:06:70:5f:99:a6:0d:
                    36:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:51:83:02:E2:22:6E:1F:98:00:45:36:FE:F7:3F:0E:C1:64:43:1C
            X509v3 Authority Key Identifier:
                keyid:E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:9f:99:67:4d:c7:52:8c:8f:4a:01:bc:27:80:b8:f1:c6:28:
         e9:2b:54:14:72:04:5a:58:fb:e4:9a:9c:bc:95:5b:4e:0f:71:
         1e:73:cd:2f:eb:b6:c9:eb:59:ec:cd:de:6a:41:d3:8c:d5:fb:
         ac:69:43:db:ee:50:29:b3:4e:0c:71:d5:b3:79:36:68:64:d7:
         7e:e6:af:58:d7:38:12:c2:5e:57:b7:e6:6b:b2:99:8a:00:5c:
         03:48:00:57:12:ba:42:af:44:ba:f1:b2:13:5f:4d:6b:ba:fc:
         7d:f1:9c:88:90:f5:ec:c8:31:ed:13:77:e3:3f:e2:71:34:a4:
         60:84:9f:69:a3:83:9f:b7:2e:2d:e9:75:a0:00:11:35:c2:35:
         d8:79:80:72:7e:5a:5f:b9:44:eb:fa:0f:f9:6e:5f:e7:b6:6d:
         23:d9:f4:c2:44:71:98:ad:f1:f2:2c:f5:dd:48:f2:3c:20:ec:
         1c:6e:a6:5e:fb:76:e8:24:0a:8e:a3:cf:12:29:26:3f:ea:bf:
         ab:fb:92:77:ee:8c:9d:42:42:78:ed:bc:8a:dd:37:29:95:38:
         2c:6a:65:da:e0:5d:89:de:24:0a:05:89:4d:15:33:3a:be:84:
         63:7e:c1:70:d9:92:4f:ad:0c:82:73:22:9e:42:f6:91:f3:e6:
         89:8f:e1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:53:56 2025 by rpki-client