Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
File:                     6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft (raw, json)
Hash identifier:          lrVvRw+6ENS1icAhAMQ6jr+eyMk1W0891d4tSeD87e4=
Subject key identifier:   D5:AE:E6:16:1B:78:B4:62:C2:AB:7B:5B:79:9F:6D:6B:22:84:03:48
Authority key identifier: EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
Certificate issuer:       /CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Certificate serial:       0197B9A1A59AE2C30DC1589F2EA25AB6B6B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
Manifest number:          0CAC
Signing time:             Sun 29 Jun 2025 03:01:08 +0000
Manifest this update:     Sun 29 Jun 2025 03:01:08 +0000
Manifest next update:     Mon 30 Jun 2025 03:01:08 +0000
Files and hashes:         1: 534vF5sjkwJDGuUSMSbyeoXyx-w.roa (hash: yaE3+RBNj5kJXWkdpo0vdtCXgmh99gzWa0o0cozuQ7M=)
                          2: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl (hash: P8I0RPdEWNywiqa/eJ7e6udg0AB63MUkFBduzZaCxgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:a1:a5:9a:e2:c3:0d:c1:58:9f:2e:a2:5a:b6:b6:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
        Validity
            Not Before: Jun 29 03:01:08 2025 GMT
            Not After : Jun 30 03:01:08 2025 GMT
        Subject: CN=d5aee6161b78b462c2ab7b5b799f6d6b22840348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:56:b7:33:51:07:16:93:db:27:81:38:cb:f4:
                    74:a2:70:2f:e0:b8:2d:2e:ff:1f:25:01:97:7c:a2:
                    85:03:74:a9:6f:10:f9:ca:7a:96:5a:37:b4:1b:d2:
                    46:54:84:9b:ef:32:18:f3:09:22:55:e5:75:13:a1:
                    e6:e5:1e:bc:02:23:1e:6d:00:c4:5d:38:de:dc:71:
                    09:bb:f2:02:a2:4c:54:fb:00:20:a5:a8:20:d3:36:
                    47:23:d8:41:b9:9b:3f:b1:0e:4a:03:83:89:eb:b8:
                    1f:53:a1:a6:29:88:8e:54:62:4a:d5:6a:57:1e:1f:
                    b5:79:1f:47:e7:1f:d1:7f:04:1d:7b:78:76:74:5c:
                    09:e9:f6:13:03:77:8d:61:5c:01:3d:7f:43:b1:71:
                    32:8e:36:97:7a:96:9b:2a:1e:df:7d:d2:78:bc:53:
                    bf:4a:eb:91:74:d3:1f:bc:ae:7d:11:b9:a8:91:47:
                    a7:da:37:08:8f:9f:66:ba:35:c5:c5:6d:d3:c8:40:
                    50:05:f2:50:08:42:14:ea:fb:12:3a:a0:e8:8c:cc:
                    7a:ad:3c:d1:9e:33:5b:48:b1:0f:71:33:e4:eb:29:
                    dc:74:e6:b7:f4:06:e0:b6:08:a1:d2:5c:56:95:0d:
                    35:e0:4a:64:08:ac:35:9c:91:0a:8f:9c:5a:ae:c2:
                    15:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AE:E6:16:1B:78:B4:62:C2:AB:7B:5B:79:9F:6D:6B:22:84:03:48
            X509v3 Authority Key Identifier:
                keyid:EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:f1:69:59:e1:f7:cd:91:57:6f:88:e2:7b:3e:ce:16:2f:f5:
         c5:42:69:2b:65:da:ad:d7:f4:87:8c:ee:45:b1:f0:a4:bf:8d:
         8f:92:11:86:71:5d:91:23:81:bf:b2:cf:7b:ed:45:c2:4c:61:
         82:64:17:81:3b:00:67:46:17:b8:68:3b:22:cc:05:33:2f:c0:
         15:cf:ef:8c:bf:da:58:94:82:34:71:cf:0f:21:46:11:5c:98:
         13:12:17:e8:2c:71:bc:35:d7:ed:d3:0a:f8:a9:39:25:ff:f3:
         0f:a4:74:d4:62:22:4c:0d:42:a5:60:d0:a0:bf:37:85:27:4b:
         47:17:77:43:e9:df:ee:ab:d0:1f:ac:f3:ac:95:a4:56:14:27:
         de:9f:69:c0:9a:66:56:33:76:c7:00:f6:c9:7b:57:73:9e:88:
         0a:b4:ec:9d:ee:5a:cf:5d:3d:05:e9:01:61:6c:08:91:8b:c5:
         e8:5e:1e:e2:e7:96:85:6d:ae:c2:74:88:8d:c9:9c:aa:ab:b0:
         f3:11:e1:93:49:52:fb:a5:ad:b0:af:da:bd:dc:3c:a3:41:ee:
         a6:e9:1b:d9:d2:20:ab:f6:2e:7c:d6:9c:77:64:62:29:de:8c:
         9b:51:92:6b:94:3a:d6:44:4d:ef:61:bc:60:a0:8c:20:da:ef:
         a8:ae:be:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:22:42 2025 by rpki-client