Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
File:                     6EpS3W883rR4C7KZj1AWYMybiP8.mft (raw, json)
Hash identifier:          vqGE0MxlEbK/MzT08z+nKpQg7pptVCb0s9pAjb+l9is=
Subject key identifier:   85:A7:C5:4A:CF:D1:A0:1E:FC:3B:B9:75:CE:D2:2C:79:14:AC:7D:CB
Authority key identifier: E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF
Certificate issuer:       /CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
Certificate serial:       0196BF37D844B9A7CBBEB5BF57381C3B8695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
Manifest number:          084E
Signing time:             Sun 11 May 2025 12:00:29 +0000
Manifest this update:     Sun 11 May 2025 12:00:29 +0000
Manifest next update:     Mon 12 May 2025 12:00:29 +0000
Files and hashes:         1: 6EpS3W883rR4C7KZj1AWYMybiP8.crl (hash: gExVHwdqkYaOXmSjCJ3cFasCz9b5fZOETIqpRpdgAug=)
                          2: k-C92F5fBC7tzidpGResaRP_3Y8.roa (hash: cCgzC2CyBMRCMgCeDBY61Xy0TGv8/RtXgzQi7ffbn8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:37:d8:44:b9:a7:cb:be:b5:bf:57:38:1c:3b:86:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
        Validity
            Not Before: May 11 12:00:29 2025 GMT
            Not After : May 12 12:00:29 2025 GMT
        Subject: CN=85a7c54acfd1a01efc3bb975ced22c7914ac7dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:70:4f:d8:b7:80:d0:fb:18:02:3b:28:38:69:
                    a1:f1:70:61:4b:f0:01:59:7b:0e:92:6b:82:c9:74:
                    76:09:28:d3:a6:1e:4e:c8:7c:ae:26:0f:a0:d3:aa:
                    26:ee:f3:43:a1:76:b3:29:7e:26:9d:c3:fe:84:2c:
                    9d:ff:de:4e:31:d8:93:a0:9c:6f:b5:3c:f4:fc:51:
                    fd:06:ec:43:14:98:c4:96:ff:aa:41:19:9e:24:c3:
                    f0:34:5b:ae:f7:44:dd:9a:03:f6:da:3a:78:29:24:
                    1b:49:0c:d6:e3:79:95:d5:f1:d4:c9:0e:8a:a8:36:
                    66:88:ef:28:a1:c2:71:6c:cc:fc:e4:a2:e2:62:a0:
                    1d:f7:c6:0f:dc:cd:0f:51:05:d0:b6:50:45:04:a7:
                    58:7c:09:22:13:2b:c2:07:aa:40:f3:52:d8:0a:3c:
                    15:51:3b:b4:37:8a:c1:46:86:5a:c9:48:22:4a:60:
                    de:ac:76:96:c7:30:fb:51:8c:ba:d7:52:ab:47:b2:
                    0d:14:ea:01:27:fa:fa:a1:02:0b:44:7b:53:ac:16:
                    27:48:f5:77:54:7a:cc:06:e4:e7:e8:6c:91:22:98:
                    eb:66:76:fa:32:0f:04:f9:13:e8:e5:3e:87:4f:4a:
                    93:94:8e:29:c6:0c:63:01:48:2b:3b:66:09:f7:ff:
                    77:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A7:C5:4A:CF:D1:A0:1E:FC:3B:B9:75:CE:D2:2C:79:14:AC:7D:CB
            X509v3 Authority Key Identifier:
                keyid:E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:1e:bb:73:33:94:54:c4:81:e8:ba:98:b2:21:32:43:3d:af:
         6b:dc:31:1b:f4:48:fa:38:a5:c3:56:fa:58:57:fe:bd:27:79:
         bd:65:39:85:34:e2:b4:cb:93:70:0d:68:fc:d3:d7:19:31:63:
         6b:73:39:77:c4:ef:92:8b:bc:76:3c:96:26:28:05:11:65:fb:
         41:18:5f:11:a7:cc:77:0b:e4:31:52:3a:80:4e:38:e0:6a:93:
         ab:c3:a4:df:13:53:1b:b7:25:6b:23:cf:43:6c:e5:dd:f2:77:
         40:df:7f:b0:7f:84:52:86:7a:1f:db:be:6b:50:27:59:f4:bb:
         87:80:af:5e:25:d1:94:86:f2:58:f5:5a:e4:05:8f:41:59:94:
         e8:b6:c9:c3:93:31:d3:5c:af:9f:cc:6f:0d:dc:61:36:40:ac:
         f0:91:f0:67:98:bb:4c:f1:fd:83:1c:a9:92:4d:f1:57:eb:9f:
         7e:a8:6b:2d:52:4a:e9:6c:a3:83:81:bc:0a:29:97:94:95:7e:
         7d:3c:10:92:ed:81:56:4f:e7:55:3e:49:b9:b2:b6:04:3a:e9:
         20:84:8a:4d:0c:41:1f:2f:f4:8b:6b:1f:a7:e4:87:f3:7c:b8:
         b9:1a:67:49:dc:76:ed:9e:c3:2e:0c:ff:4c:21:2c:92:ed:77:
         3d:e1:dd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:20:42 2025 by rpki-client