Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
File:                     6Zam_9rVzrJiZhe9btnE7FcdDzo.mft (raw, json)
Hash identifier:          ITRODDy+6B6Qpdvbe/0Hj+vQ6I3AJHQ4+DrGsy9s3w0=
Subject key identifier:   4E:4B:AD:EC:CB:B1:86:1F:49:5A:88:FD:BA:DE:A5:EB:E7:EB:6B:B6
Authority key identifier: E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A
Certificate issuer:       /CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
Certificate serial:       0197B6A091A90363B83E323CF703F7A3B1A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
Manifest number:          0FB0
Signing time:             Sat 28 Jun 2025 13:01:05 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:05 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:05 +0000
Files and hashes:         1: 0DP07uLmhCaYUKz4-De4vVyiQvU.roa (hash: tLlgxWvlov28mbUFOnnNCCYCPUkvTsTiijysrOZYrbM=)
                          2: 6Zam_9rVzrJiZhe9btnE7FcdDzo.crl (hash: C7E/UsMLiFDw0v4lB5CvGnUSlid2IzkhQVE00jc+Ml4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:91:a9:03:63:b8:3e:32:3c:f7:03:f7:a3:b1:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
        Validity
            Not Before: Jun 28 13:01:05 2025 GMT
            Not After : Jun 29 13:01:05 2025 GMT
        Subject: CN=4e4badeccbb1861f495a88fdbadea5ebe7eb6bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:70:d5:d3:07:06:a7:25:14:43:9e:7c:05:50:
                    78:ef:a9:c6:7f:b4:fb:47:55:5c:52:7a:28:03:f0:
                    94:3e:97:59:30:22:0b:69:4b:5d:7c:0d:c6:dd:51:
                    08:f0:7c:b2:c1:e2:77:ef:5c:a4:68:7f:eb:d0:b1:
                    73:8b:ba:2e:16:06:72:7f:7e:a3:3f:e9:27:34:e3:
                    50:ff:41:66:ec:7d:37:1e:0f:97:fa:f2:dc:a8:56:
                    70:e2:19:1d:8b:c1:d0:38:19:5a:9c:c5:58:c5:b3:
                    7c:3d:1d:bf:cc:bf:3d:1a:31:f6:94:29:75:ff:45:
                    22:10:28:18:c1:1a:fd:a0:e1:c7:4b:bf:ca:cd:13:
                    90:c4:ec:1a:f1:6f:0b:2a:38:88:62:6a:92:c7:f2:
                    5b:45:ac:12:0a:51:23:8b:dd:be:33:6a:c2:33:20:
                    c5:55:10:6d:f4:00:84:c7:f5:e1:ed:29:96:07:a3:
                    26:5b:bf:4d:75:e9:a2:ad:b1:a4:dc:4e:e7:3f:69:
                    90:16:1b:c9:b3:6c:79:68:4c:78:e1:72:21:10:17:
                    b8:74:4b:45:02:bd:53:67:b2:a8:cc:d3:d6:43:7a:
                    61:37:34:7a:8c:a6:0a:79:a2:a9:46:f6:b9:68:d1:
                    49:61:6a:5b:e1:29:23:07:6c:d2:68:4c:62:3d:70:
                    de:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:4B:AD:EC:CB:B1:86:1F:49:5A:88:FD:BA:DE:A5:EB:E7:EB:6B:B6
            X509v3 Authority Key Identifier:
                keyid:E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e6:a1:88:73:7e:b3:40:5a:df:c7:d6:ab:b3:9a:c9:1e:cb:
         27:92:af:e9:70:da:ac:2b:5d:9c:9d:df:e4:45:90:f0:78:1f:
         a4:da:dc:47:09:f1:84:6a:bd:c6:7f:67:94:c5:6e:da:8c:b9:
         91:f4:6d:2f:c2:15:63:6e:0f:a9:6e:4a:18:cf:29:e4:1d:32:
         36:3e:0f:41:6b:19:7b:3d:14:4b:44:0e:63:db:fb:64:34:75:
         86:7f:bd:57:1f:39:ec:87:27:e9:f6:39:b9:bb:45:5f:ff:89:
         31:b8:5a:d5:87:9c:ce:b3:a5:cf:8d:05:08:2b:61:f6:f5:0c:
         f2:7b:de:61:b1:f9:d9:2a:bb:1a:1a:64:9e:4d:62:a0:95:1a:
         29:f7:fd:9a:9b:f4:fb:33:91:ef:a7:ed:1d:b1:b7:b2:32:0d:
         3a:44:0f:da:51:f9:54:c3:c3:ff:3d:69:75:71:58:1f:69:38:
         09:21:9b:ff:6e:c5:32:81:02:ec:ef:02:e1:8f:92:3d:82:5e:
         ed:00:8b:cb:f8:d3:0d:87:65:34:45:4a:9a:80:75:ef:f1:53:
         ba:d4:b0:dd:da:4b:4e:04:cc:18:06:67:63:6d:bb:0e:a2:2a:
         cb:e4:89:b5:6e:1e:f4:13:d4:1f:3d:4b:b1:3f:b5:97:34:15:
         b3:cf:c5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:36:07 2025 by rpki-client