Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
File:                     6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft (raw, json)
Hash identifier:          +L55OjuNTMCKwLbS3SnhF6QKD+62rA1zlkMJfbkdhVQ=
Subject key identifier:   DB:45:B1:C6:4C:61:9E:55:5B:29:4E:A9:31:77:79:EE:DC:4E:68:F5
Authority key identifier: E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5
Certificate issuer:       /CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
Certificate serial:       01969E635435B6D2EA5145F5BCE5323280B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
Manifest number:          0BA1
Signing time:             Mon 05 May 2025 03:00:31 +0000
Manifest this update:     Mon 05 May 2025 03:00:31 +0000
Manifest next update:     Tue 06 May 2025 03:00:31 +0000
Files and hashes:         1: 6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl (hash: C7PUm+o1mJ/6Na/okLNZ8/bYJgxaiBsTWuvWN97xIRA=)
                          2: DD5wwVR4QntHgRvmQHrM5gRYoL0.roa (hash: +XZFURh1MsaKfVC7ehNqW8S6TsTBbdN2yMCWh0GcBWI=)
                          3: pBGZNx_OAmMdbFc_db_0hiPmyn0.roa (hash: QFrjKNE3vTim3+tyZdQRJX7MRvsrfcNJr7UDy9LbkxY=)
                          4: vgSjBdnlNw4PtVl7ZUje8-cR03s.roa (hash: H3OQmYWity24ih078EAoQ3E84gh3OSk8WYJH295c1kc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 03:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:63:54:35:b6:d2:ea:51:45:f5:bc:e5:32:32:80:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
        Validity
            Not Before: May  5 03:00:31 2025 GMT
            Not After : May  6 03:00:31 2025 GMT
        Subject: CN=db45b1c64c619e555b294ea9317779eedc4e68f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:34:4a:3c:d0:49:7c:dc:8a:b7:e3:a7:4f:42:
                    89:91:b0:8f:55:43:b9:2d:31:cd:1d:f2:75:1a:3d:
                    1f:bc:60:19:48:13:5c:cd:d3:9f:c2:f3:53:d0:41:
                    5f:e4:82:4e:7c:7d:12:9c:12:b0:62:34:80:f0:9f:
                    6a:41:d3:a3:06:2e:b2:a8:7e:d6:05:13:d7:2c:96:
                    49:39:b3:84:04:12:be:9d:b7:f7:40:dd:da:ae:0e:
                    9f:5f:b8:89:31:4d:7e:8b:25:0e:3c:55:b9:42:b8:
                    a4:6a:a3:cc:74:b0:f5:f5:e0:e7:44:9d:1f:da:88:
                    77:d0:e0:2d:02:06:d7:67:8a:db:7c:78:a0:a3:9d:
                    de:e9:b0:cc:10:6c:d2:e4:61:07:42:03:25:dc:42:
                    9d:a4:97:0c:ee:fe:9a:9f:a0:3e:6b:cf:a0:e8:d1:
                    28:ec:de:08:f2:07:ce:74:69:d2:e6:d0:01:d2:5b:
                    08:a0:54:04:45:2d:87:fd:15:05:0a:83:9a:08:37:
                    f4:80:76:dc:9f:78:4a:0e:c0:f4:32:25:f4:8b:18:
                    bb:02:32:34:20:fa:4f:3a:cc:dd:52:46:18:f7:16:
                    5c:6a:5c:65:52:17:03:c8:ee:a8:ca:d1:85:f3:04:
                    88:af:08:3c:f6:36:00:ee:1a:cb:b0:c8:33:ef:84:
                    6b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:45:B1:C6:4C:61:9E:55:5B:29:4E:A9:31:77:79:EE:DC:4E:68:F5
            X509v3 Authority Key Identifier:
                keyid:E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:30:91:ce:f3:40:2c:4b:9a:ed:44:71:85:7e:0a:72:ba:c5:
         79:d8:9b:3c:cf:66:8c:23:b7:52:64:4a:f4:cf:8d:21:1a:d3:
         74:86:0e:b1:60:f1:02:e3:2a:ff:fa:61:17:07:ec:4a:ae:9b:
         9a:c2:3a:eb:79:2b:c2:8e:48:1a:b0:7e:22:61:9e:87:07:dc:
         72:ad:41:81:c2:04:02:83:8c:c2:0c:0d:12:35:79:44:10:6a:
         9a:43:1b:ce:07:c0:44:d1:ab:a6:34:c7:16:51:26:75:81:60:
         42:f0:20:39:6f:22:84:be:d2:aa:69:ee:a0:b5:af:8f:33:e0:
         95:05:d5:0c:16:9a:87:fc:55:0b:3e:40:32:47:44:16:e8:52:
         60:68:1f:f5:df:10:8a:2b:36:38:23:7d:19:68:a4:91:f9:7d:
         db:e9:55:01:fd:49:89:d2:28:31:80:fe:77:ea:28:fd:1a:37:
         54:77:df:08:a3:b3:2d:f4:d3:c5:84:1b:65:8f:c7:c3:f1:2f:
         d1:46:6b:75:ae:35:17:d8:02:d1:b2:da:f9:f8:39:94:7b:45:
         6e:d0:9a:30:d6:f2:26:01:00:a2:78:21:22:23:56:12:d1:67:
         b7:f6:3f:c4:78:3b:ee:92:28:09:a0:72:f4:22:69:b6:f1:fa:
         44:c4:6b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:55:11 2025 by rpki-client