Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft
File:                     6mQereGVXdS5B5FrmeAhA57MM-g.mft (raw, json)
Hash identifier:          AquHS4pRWPhVzMFdx/xbVKco7QjV46T7RSaw0mK49y0=
Subject key identifier:   67:46:F6:41:B4:AC:31:29:0F:20:3B:16:86:E4:19:FE:47:18:E5:72
Authority key identifier: EA:64:1E:AD:E1:95:5D:D4:B9:07:91:6B:99:E0:21:03:9E:CC:33:E8
Certificate issuer:       /CN=ea641eade1955dd4b907916b99e021039ecc33e8
Certificate serial:       0197B9D8FB8BFF248D86CFA2C32418EBA66F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6mQereGVXdS5B5FrmeAhA57MM-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft
Manifest number:          15B6
Signing time:             Sun 29 Jun 2025 04:01:34 +0000
Manifest this update:     Sun 29 Jun 2025 04:01:34 +0000
Manifest next update:     Mon 30 Jun 2025 04:01:34 +0000
Files and hashes:         1: 6mQereGVXdS5B5FrmeAhA57MM-g.crl (hash: II6wje42v3Bx0uYTCXyz62zlmUz9lgv+ybWAvDpHkHw=)
                          2: yMsvkbq8K0IM2cns7HVpjbtpaM8.roa (hash: TJjLQAcsYRitHc7okesLeLJv1CF6d2BgyzzxAXCqX+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6mQereGVXdS5B5FrmeAhA57MM-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:d8:fb:8b:ff:24:8d:86:cf:a2:c3:24:18:eb:a6:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea641eade1955dd4b907916b99e021039ecc33e8
        Validity
            Not Before: Jun 29 04:01:34 2025 GMT
            Not After : Jun 30 04:01:34 2025 GMT
        Subject: CN=6746f641b4ac31290f203b1686e419fe4718e572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:5b:79:6f:38:98:8e:69:44:99:d7:f2:91:24:
                    d1:4f:cd:cc:89:8f:12:66:37:b8:3f:85:09:34:27:
                    b7:e1:d7:ba:68:2e:28:82:06:30:f4:12:3b:e0:bf:
                    bd:e2:ef:ed:34:b9:bf:e6:7c:83:66:b6:5e:6f:a4:
                    de:08:c3:80:0e:b4:c2:b0:f4:07:fe:e6:d7:cd:e6:
                    90:63:b6:fc:d6:8e:6e:df:eb:5a:17:07:89:9b:72:
                    ac:19:73:11:e3:b8:b4:b5:b9:72:96:35:f5:bb:dc:
                    34:52:4f:60:0e:fe:84:df:3a:e8:16:6a:b7:8c:56:
                    11:bc:d5:a5:6a:de:2d:ab:14:68:42:6f:87:b4:44:
                    0b:b0:c2:84:bf:0d:75:88:e7:6f:49:8f:e6:9d:bc:
                    61:db:df:be:a9:a4:c6:d4:65:30:dd:36:d4:be:89:
                    42:4f:ed:48:2d:33:54:f4:8a:93:e7:93:2c:41:bd:
                    9e:10:db:07:0f:7f:0e:b2:15:10:be:8b:4a:cf:e6:
                    7b:f4:97:42:39:14:01:50:25:be:ff:61:c7:88:cf:
                    3b:fe:7f:e4:24:cf:40:f4:df:bb:71:b1:c5:bb:28:
                    d1:48:f6:73:34:1c:a4:3d:e3:6e:29:83:0a:0b:19:
                    34:a0:30:96:76:c7:42:29:b2:59:be:3b:c8:7a:0e:
                    f4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:46:F6:41:B4:AC:31:29:0F:20:3B:16:86:E4:19:FE:47:18:E5:72
            X509v3 Authority Key Identifier:
                keyid:EA:64:1E:AD:E1:95:5D:D4:B9:07:91:6B:99:E0:21:03:9E:CC:33:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6mQereGVXdS5B5FrmeAhA57MM-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ff:04:e1:9e:91:bc:96:8b:81:03:01:84:cd:4b:4c:31:cf:
         41:24:6e:1b:f3:77:e8:c6:e8:f8:a5:1d:63:06:6b:61:6a:c7:
         60:53:7a:a7:f4:c4:d4:1a:56:ec:cb:3c:7c:f1:2b:47:26:0f:
         ce:30:15:f0:79:41:45:f4:46:0f:ab:8c:66:a6:32:29:d5:2f:
         39:57:d9:be:f0:77:85:5b:36:d6:1a:ea:04:bc:4c:70:a1:6e:
         49:8e:60:f9:70:ba:e5:e1:43:77:90:54:d9:53:3d:4c:c2:47:
         39:23:0c:99:d5:c7:ee:c7:5f:d2:50:9f:41:fe:38:f5:89:bb:
         4b:11:69:74:3b:36:7e:18:01:a1:c2:38:1f:a5:dc:de:0c:58:
         e8:3e:70:b3:6f:e9:b0:e6:3d:f2:c6:81:45:4b:91:3e:75:7b:
         57:d7:b5:0c:a5:b1:74:d6:36:30:a8:9d:a4:e6:9d:ab:cd:d1:
         a5:9a:07:c9:80:6c:00:fe:3e:69:be:f2:e3:bb:18:c8:82:42:
         96:5c:5c:e2:16:38:f0:60:86:51:a1:44:09:ea:25:00:e4:85:
         67:9f:42:ba:cd:7d:b3:21:26:72:00:1e:0f:73:dd:9d:11:74:
         93:90:06:c5:a7:8f:81:53:90:4a:db:83:d1:6d:d5:97:ba:86:
         ea:ad:36:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:24:25 2025 by rpki-client