Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.mft
File:                     6w1TyHBxSElxrt_ZDKbsxlapbkw.mft (raw, json)
Hash identifier:          Yw/C4scJWZu5wjkwMN71eavdC7p5X+6mKu0XgV6hbc8=
Subject key identifier:   ED:7E:45:BB:3B:19:FA:B4:36:D7:40:9E:D5:35:DA:1E:2F:CE:11:6B
Authority key identifier: EB:0D:53:C8:70:71:48:49:71:AE:DF:D9:0C:A6:EC:C6:56:A9:6E:4C
Certificate issuer:       /CN=eb0d53c87071484971aedfd90ca6ecc656a96e4c
Certificate serial:       0197B6A15491EA9E5AAD8694FD32B6CEC279
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6w1TyHBxSElxrt_ZDKbsxlapbkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.mft
Manifest number:          131D
Signing time:             Sat 28 Jun 2025 13:01:55 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:55 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:55 +0000
Files and hashes:         1: 6w1TyHBxSElxrt_ZDKbsxlapbkw.crl (hash: MsNxnjLp7KJ6m0rBxdr1nLhi0XfFAv4YKhXRzMeB/Rc=)
                          2: YkR2BYjR8H6AIv6VEy2x5d5CWk8.roa (hash: SiNOMuWGV4TsQMwgoAyZOniwZQdTB+FIJF2k4b3IHek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6w1TyHBxSElxrt_ZDKbsxlapbkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:54:91:ea:9e:5a:ad:86:94:fd:32:b6:ce:c2:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb0d53c87071484971aedfd90ca6ecc656a96e4c
        Validity
            Not Before: Jun 28 13:01:55 2025 GMT
            Not After : Jun 29 13:01:55 2025 GMT
        Subject: CN=ed7e45bb3b19fab436d7409ed535da1e2fce116b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9c:e0:bf:58:4e:56:eb:26:1f:41:92:d7:b0:
                    b3:31:fe:25:da:b5:d4:ce:4e:7c:e7:41:52:22:84:
                    e8:10:76:6d:84:a5:5a:41:8d:3a:3d:b5:c9:be:c2:
                    c8:80:fa:1e:18:53:6c:dd:9f:d3:ea:bb:c8:06:b3:
                    8f:06:72:11:41:0a:1a:c0:71:fc:dd:9d:75:de:93:
                    54:d0:e8:b3:8e:15:d9:63:9e:08:92:b2:6b:fd:4b:
                    51:50:94:f4:ae:cb:78:f9:da:9d:e8:eb:44:da:7f:
                    15:32:35:af:4f:ce:c4:32:73:97:77:6e:8b:2a:7f:
                    37:f7:1a:cc:98:5a:f2:f2:6e:95:dc:18:9b:6a:c9:
                    3e:a7:a5:6d:c8:af:55:b6:d3:a2:3a:9e:19:f3:8b:
                    51:3f:e1:75:77:d4:76:7d:3a:69:b5:a8:1c:c9:75:
                    cf:35:bc:92:51:1d:88:79:ac:96:b9:59:14:6f:e1:
                    14:1e:fa:cd:8c:d2:f1:28:d9:8a:e0:5b:66:4a:0d:
                    48:95:0d:d8:df:eb:87:ac:4c:4c:1a:24:bf:a0:f4:
                    dc:36:89:1b:35:34:e6:3a:87:35:cf:ba:d4:e1:55:
                    42:12:9c:c1:5a:e8:f4:08:bc:d3:fe:8c:a7:77:36:
                    2a:46:ae:02:a9:4e:71:16:12:03:a1:20:cb:a6:25:
                    e0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7E:45:BB:3B:19:FA:B4:36:D7:40:9E:D5:35:DA:1E:2F:CE:11:6B
            X509v3 Authority Key Identifier:
                keyid:EB:0D:53:C8:70:71:48:49:71:AE:DF:D9:0C:A6:EC:C6:56:A9:6E:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6w1TyHBxSElxrt_ZDKbsxlapbkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:55:4b:24:6d:2d:ec:03:11:fc:87:c6:92:06:e3:9b:84:f6:
         56:84:42:a9:5e:73:72:cc:4b:87:74:83:d2:85:ba:91:6e:7a:
         01:3f:54:62:c8:6f:da:91:e2:29:3e:1e:51:2b:a2:1e:ea:11:
         9c:f2:f1:22:97:c2:2d:17:38:46:15:96:9d:7b:72:05:16:92:
         9f:06:35:67:e5:2f:b8:51:10:0f:f4:32:f7:0b:54:94:89:b9:
         af:19:22:fc:a0:83:bd:7b:76:5c:6c:82:74:11:45:0f:ef:cf:
         b5:55:39:c4:69:1f:45:51:4b:5f:f7:30:77:d6:d7:59:95:4b:
         99:ed:a6:24:77:ac:05:1f:37:dd:be:c9:87:fe:fa:d4:f1:80:
         95:99:06:36:e6:1c:5c:30:3d:34:cf:09:4d:1d:2d:0d:12:57:
         7e:18:0c:2c:5a:94:c6:f3:1c:5b:cf:d7:dc:19:48:19:e1:05:
         be:92:ad:d2:84:12:54:ac:fe:1e:33:d7:ff:3e:87:1a:4b:15:
         1d:fb:b6:a9:03:ec:d3:95:58:d6:0c:ac:ca:bc:5a:e2:45:1a:
         5f:3a:fb:aa:6b:ca:fd:c6:9d:6a:c5:13:e9:69:ac:29:8d:d8:
         17:64:68:8c:92:7b:29:2e:7f:80:ca:03:03:54:87:60:24:d2:
         ca:0a:ca:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:05:20 2025 by rpki-client