Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
File:                     6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft (raw, json)
Hash identifier:          UREVcMn8DtPPNwxjI43qG27traRORnly8M1aUiXloYI=
Subject key identifier:   AC:8D:45:16:48:2D:A6:3B:41:D1:59:AD:84:6E:77:95:C6:F1:EC:CA
Authority key identifier: E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48
Certificate issuer:       /CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
Certificate serial:       0197B632BA69C225D89E5349364B0F87C7F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 11:01:07 +0000
Manifest this update:     Sat 28 Jun 2025 11:01:07 +0000
Manifest next update:     Sun 29 Jun 2025 11:01:07 +0000
Files and hashes:         1: 6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl (hash: AgbTS4yJBwUVNlMWFhbPtVtjwha/CSOsUuVlmbPnOfM=)
                          2: VgS-u0ELxQR2AwhETKCUa6iULQU.roa (hash: 7YXeyW9OYhf7wVeeaMa0yi4RPICzvGAFTAe8JBcfnZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 11:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:ba:69:c2:25:d8:9e:53:49:36:4b:0f:87:c7:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
        Validity
            Not Before: Jun 28 11:01:07 2025 GMT
            Not After : Jun 29 11:01:07 2025 GMT
        Subject: CN=ac8d4516482da63b41d159ad846e7795c6f1ecca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:70:ec:13:41:e9:c6:76:dc:7b:e1:ce:14:15:
                    f5:77:0f:a1:2a:01:22:00:07:43:2a:81:0f:f5:b9:
                    09:d7:1b:a9:70:cc:5a:ab:b1:00:1b:21:48:ed:9a:
                    ab:ac:5d:fd:73:8e:8b:ae:14:55:db:64:e6:08:9a:
                    2f:a1:65:9b:29:fc:4c:a7:dc:68:c8:f9:ea:54:ed:
                    b5:04:b1:b8:39:0f:1f:03:1e:dc:a7:76:96:76:c2:
                    e8:86:d2:74:df:32:b4:a4:e5:e5:7c:78:71:c7:5c:
                    27:9b:43:c6:cb:1b:7e:83:e1:83:5b:eb:b0:84:43:
                    7b:fa:ee:c1:ab:fe:9e:26:03:73:66:61:b8:ca:6d:
                    d9:6f:78:bc:2f:40:f7:65:b4:bf:96:dd:72:1a:32:
                    5a:7c:5c:a1:22:78:8b:06:e9:04:55:f7:ba:66:69:
                    6a:08:2e:57:14:39:eb:6b:78:16:36:6d:1b:a5:ac:
                    6e:c5:e3:16:d2:b0:93:7e:54:f6:5a:b7:b7:cf:53:
                    36:a9:d2:84:ab:94:74:9b:e9:5d:ec:06:93:40:ba:
                    5e:f6:84:b3:cd:df:a4:82:86:c4:e7:15:48:62:66:
                    c4:62:a6:42:e6:2f:65:5f:6f:a7:4b:90:75:1f:44:
                    a7:75:4e:c7:32:3a:45:3b:09:68:7b:72:40:36:ce:
                    95:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8D:45:16:48:2D:A6:3B:41:D1:59:AD:84:6E:77:95:C6:F1:EC:CA
            X509v3 Authority Key Identifier:
                keyid:E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:7d:a2:99:19:83:97:46:ad:b0:60:89:18:e3:94:54:9e:98:
         62:93:6e:4f:2e:f5:18:b9:b2:45:8d:e1:ef:a2:2c:b2:f9:84:
         76:b9:03:7b:92:1e:41:a0:b5:45:7c:3a:7f:f1:08:30:39:c8:
         53:d6:c5:07:7b:2d:4e:eb:5c:7c:b9:33:fa:ca:25:71:68:6b:
         c1:65:33:ff:1c:8e:a2:46:eb:fb:48:2b:cb:1b:ac:88:b1:5d:
         30:a8:6d:d5:32:c1:a7:0d:c9:5d:1b:1a:11:67:79:c0:e5:c3:
         b5:83:a2:64:85:3e:fc:07:1f:45:d9:42:b0:a4:be:43:dc:88:
         b1:32:10:8c:e9:4a:7e:41:8c:de:6b:da:03:db:97:f6:3d:45:
         cb:24:cf:07:00:89:64:4e:bc:bd:7a:86:76:a3:93:f4:73:ae:
         1e:00:63:98:8a:30:02:75:21:0e:1c:05:ca:25:85:2a:79:65:
         6a:9b:fa:08:07:d9:dc:2d:66:58:fb:ea:68:0f:54:7d:89:cc:
         03:b9:5e:bb:3e:2f:23:fa:99:b9:81:82:11:cd:a2:ad:3a:ed:
         75:24:9b:b2:73:51:4d:57:4b:dc:b2:f5:d6:20:07:b5:82:5c:
         c2:d1:d6:cd:47:c4:96:0f:aa:e4:72:5a:c2:63:69:b0:3e:03:
         8e:da:82:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:09 2025 by rpki-client