Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
File:                     6aqxRGEAqPzgPfGddV4GMp7iRxM.mft (raw, json)
Hash identifier:          tdq4RAfOmmXB6NbnTauABLRULpxSeY117mNBJcnvafg=
Subject key identifier:   21:79:F1:95:3B:2A:35:EC:1A:E4:6D:1E:32:99:28:3A:DD:04:AF:62
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Certificate issuer:       /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial:       0196BCDBF7D8E535F6B6AA81F28F794F59E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
Manifest number:          153F
Signing time:             Sun 11 May 2025 01:00:54 +0000
Manifest this update:     Sun 11 May 2025 01:00:54 +0000
Manifest next update:     Mon 12 May 2025 01:00:54 +0000
Files and hashes:         1: 6aqxRGEAqPzgPfGddV4GMp7iRxM.crl (hash: +gxaumtO8Xv7TOY3LbHjKHqa4HXaAqqsaiKZHG9njEs=)
                          2: QkQP_fe9Qbaw_h7Gyszbo7ypS-0.roa (hash: RFUIAsDNjezppynlHDg3Yb1GDBSbUKtltRoi+VjSqN8=)
                          3: fLRTTBlGuXvzenVsLXjVIru2ZhY.roa (hash: K+Pyp4HdZQZlYpDx7COlUM/X5sosLmMqlyaPbzQnWwQ=)
                          4: m3gXujpVCrLpKlGaZZVKGdX7bVs.roa (hash: uZ4Pf6R3TRRDYB1bD3rWYxiLeW6EkMyazvCn4ZXP57Q=)
                          5: mlsN5JNowac1d7ZpQD1BZ-DZoyI.roa (hash: 18rSoxMsfSZRIEFe2Gj+h7BjnwCeSt199DHvViicRCg=)
                          6: pqacqNCldBSnhIBD0D7GqNdirRA.roa (hash: wRFidqB3JkBPQf/uxHF54KwEhS5EFfyJb9MtlsfkioM=)
                          7: ql3I8l6cLh1Cnd-QRruZmhB8qY4.roa (hash: 0n2wtsItY6EXyYhZk/oculHNPoyTZ+0itali9el5fBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:db:f7:d8:e5:35:f6:b6:aa:81:f2:8f:79:4f:59:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
        Validity
            Not Before: May 11 01:00:54 2025 GMT
            Not After : May 12 01:00:54 2025 GMT
        Subject: CN=2179f1953b2a35ec1ae46d1e3299283add04af62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1b:e1:5c:06:f5:b3:0a:59:7c:2e:b5:1a:7c:
                    38:0c:a1:ba:d2:32:36:dd:cd:2c:53:43:a7:22:cc:
                    91:95:5b:0e:cf:9a:b6:2e:fc:6b:21:63:1e:50:c1:
                    f0:6a:f5:4a:b4:56:3a:5b:29:0f:3d:ef:41:11:22:
                    e6:22:84:2c:77:69:4e:2f:c8:2d:17:12:19:50:83:
                    b9:f0:ba:76:b7:9a:b0:76:b6:c9:70:e0:08:4d:15:
                    ca:cf:df:14:24:66:a0:e7:f3:17:ac:a3:ea:c2:1b:
                    05:2b:7b:1e:a4:02:93:1c:7c:f7:c6:4a:53:f3:c5:
                    a0:2d:20:64:d7:bc:49:6a:2c:8d:06:d2:ba:37:d4:
                    a6:bc:e4:b9:8c:d4:cf:19:fc:1b:3a:22:f9:69:53:
                    4c:77:d0:bd:fb:2f:5a:2e:5e:33:25:24:88:68:4f:
                    2c:1a:0c:59:3b:04:a9:37:3f:b3:c3:e2:e8:8f:c1:
                    63:07:c0:f9:61:b8:95:8f:92:a4:cd:39:ca:9c:ca:
                    ea:7e:c8:8e:d6:6f:49:07:ea:fb:a5:e4:c7:29:8f:
                    a9:be:e7:1a:11:2e:d9:7f:b4:79:cd:50:12:1d:08:
                    29:a5:62:84:ff:a8:3c:32:75:20:e0:ba:2e:f9:05:
                    7e:a4:12:25:03:1e:3e:db:64:c6:66:8e:3e:de:14:
                    3d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:79:F1:95:3B:2A:35:EC:1A:E4:6D:1E:32:99:28:3A:DD:04:AF:62
            X509v3 Authority Key Identifier:
                keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d3:46:7f:aa:49:37:81:8d:76:6f:c5:8b:c3:3e:98:9b:2d:
         9a:ec:8b:15:65:fd:41:3e:6b:0d:5f:a1:88:24:d1:cf:57:5f:
         d4:6c:23:ea:0e:e2:1c:35:be:c0:bf:60:90:f3:74:ff:3a:0d:
         5f:28:b4:2a:8e:26:b0:ca:b0:f4:63:13:9c:e0:83:84:09:29:
         b7:84:8f:77:ef:5f:cc:eb:92:a8:b9:cc:d6:20:a6:ae:d2:10:
         5c:40:dc:ad:f0:9e:a0:6c:e4:41:87:9e:b4:04:44:e3:40:77:
         8e:d4:b5:e3:33:a0:17:c2:38:03:0c:e7:a6:3c:06:ed:b6:55:
         e7:49:13:13:ee:d1:dd:ec:a8:8b:7b:61:bc:a8:1a:86:aa:a9:
         63:64:b1:f5:44:a6:fc:89:47:01:bd:0c:38:0f:2d:3c:8a:0f:
         e5:98:2c:fb:80:64:7d:03:12:bf:4d:e4:b7:7d:b6:f7:95:8e:
         42:7e:e2:4a:03:42:db:92:7d:68:76:d9:ad:9c:62:8a:f6:3f:
         30:17:dd:eb:9a:2f:e1:1f:ca:cc:03:3c:86:08:aa:b8:8d:f4:
         98:41:7a:d9:f8:38:73:07:d9:09:61:63:bd:f8:b8:10:8b:5d:
         76:25:b1:93:43:9a:eb:37:a4:90:d4:29:2c:9e:08:4c:a8:c7:
         e7:16:04:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:31:08 2025 by rpki-client