Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
File:                     6uDCwN7m-e1l4FHqqQl9As9b9fI.mft (raw, json)
Hash identifier:          hzGHu5OHsIb5FIyHmdUEbSt7e4lB1ObhR62tak7i8Ak=
Subject key identifier:   77:45:74:A7:C7:41:4A:2B:84:AA:DA:42:B6:1C:D2:1D:77:08:2E:33
Authority key identifier: EA:E0:C2:C0:DE:E6:F9:ED:65:E0:51:EA:A9:09:7D:02:CF:5B:F5:F2
Certificate issuer:       /CN=eae0c2c0dee6f9ed65e051eaa9097d02cf5bf5f2
Certificate serial:       0196CE3D77B80C86A8C8302B58E0448E4B57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
Manifest number:          6D
Signing time:             Wed 14 May 2025 10:00:56 +0000
Manifest this update:     Wed 14 May 2025 10:00:56 +0000
Manifest next update:     Thu 15 May 2025 10:00:56 +0000
Files and hashes:         1: 6IiGbtawfoiQxqo4qA78f9bxvRI.roa (hash: DrAR4o5sI8QUSjE7+o4KN2antHg+KFLwwl7uXYw30VE=)
                          2: 6uDCwN7m-e1l4FHqqQl9As9b9fI.crl (hash: K5fIwMhO5BEEFzVO8iNPjL9KIK2bFUoypxDI4CASz/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 10:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ce:3d:77:b8:0c:86:a8:c8:30:2b:58:e0:44:8e:4b:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eae0c2c0dee6f9ed65e051eaa9097d02cf5bf5f2
        Validity
            Not Before: May 14 10:00:56 2025 GMT
            Not After : May 15 10:00:56 2025 GMT
        Subject: CN=774574a7c7414a2b84aada42b61cd21d77082e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a8:33:62:8f:6b:f2:fb:f2:26:52:3a:b1:3a:
                    89:56:e2:08:69:74:8a:e5:3d:56:0f:92:b1:6a:27:
                    39:70:b8:83:71:9a:2e:3c:e4:76:ba:6f:83:7f:2f:
                    40:3c:66:7b:21:7d:cf:c7:8b:49:25:fc:5c:da:19:
                    ba:53:5c:06:d0:72:9d:f2:c9:20:05:e3:80:b3:a1:
                    64:91:05:9c:41:57:6e:84:16:f9:34:d9:5d:c7:f1:
                    a8:a4:89:87:ec:9a:6f:c3:80:52:5a:06:c3:36:f2:
                    ba:93:b3:bf:83:4f:d3:3a:da:21:31:1e:ef:ac:26:
                    b0:a4:68:90:3b:77:d7:a7:35:2b:e0:cf:40:b1:95:
                    d4:a2:40:29:ae:a0:d1:70:04:a1:17:e5:ac:04:81:
                    ae:e0:89:80:6f:fb:e6:90:bb:3c:36:5c:6e:22:1b:
                    44:25:dd:d6:74:5f:b0:58:da:bc:db:18:98:12:1d:
                    f4:09:f7:45:1b:b3:9b:29:e1:c8:8e:d0:3c:5b:e6:
                    a1:54:a5:2e:a8:67:07:88:9e:fb:06:c1:77:16:aa:
                    55:65:25:06:92:84:93:bf:38:23:83:48:8f:69:8d:
                    8a:65:2f:77:6e:df:25:fa:99:d0:32:9e:5a:3e:56:
                    0c:6d:bb:41:e2:a9:39:b4:80:58:4c:84:69:9f:f5:
                    8a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:45:74:A7:C7:41:4A:2B:84:AA:DA:42:B6:1C:D2:1D:77:08:2E:33
            X509v3 Authority Key Identifier:
                keyid:EA:E0:C2:C0:DE:E6:F9:ED:65:E0:51:EA:A9:09:7D:02:CF:5B:F5:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:50:01:10:21:67:3b:11:2f:ba:d6:d1:33:d5:ac:28:7a:a2:
         ce:f8:f1:46:40:f0:b5:0a:58:16:e4:5c:ee:7e:c2:e8:8f:30:
         47:07:49:6b:ae:a2:02:00:a1:17:17:31:35:0a:d6:02:c5:49:
         e7:cc:a6:dd:9e:fb:10:4c:d2:11:14:d7:c7:94:fb:45:85:d9:
         53:68:dc:50:c8:02:73:e4:3f:2c:32:48:42:bb:02:9c:ac:36:
         78:77:59:90:15:33:37:72:21:a9:5a:9a:a0:83:e5:51:10:75:
         c9:65:50:63:90:ca:a1:20:17:2b:f6:6d:c0:ab:58:1b:27:bf:
         d8:ad:74:f3:89:be:44:07:ab:13:d1:4f:62:28:34:ed:6b:3b:
         0d:e4:48:5e:eb:81:b6:a6:a2:8a:da:fb:62:18:ae:24:0d:f7:
         21:9f:93:83:46:8f:42:a0:60:45:e2:12:3b:ec:a5:aa:c0:21:
         26:96:a7:85:bb:8c:b5:82:93:ed:a4:2b:fa:52:b4:0b:61:57:
         ad:bc:e6:13:81:1a:9b:91:83:13:21:2c:23:72:c9:30:90:26:
         da:89:0d:ab:0d:21:83:a4:dc:59:19:fd:9c:61:b9:7a:11:9d:
         7e:d8:3d:3e:f6:c9:21:00:e3:a2:b4:63:71:ed:08:07:39:9c:
         fd:15:e0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:54:13 2025 by rpki-client