Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft
File:                     6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft (raw, json)
Hash identifier:          sxUGvg2WuNX6LXb7RKG3tGRkpKPMaQC1tNV+TnMSQyA=
Subject key identifier:   63:A3:DC:DC:32:AF:BF:7C:A6:70:57:CF:0F:5E:C1:71:81:5F:A7:A0
Authority key identifier: E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF
Certificate issuer:       /CN=e939540fd16b633501fbf7441a746fc56f9f59bf
Certificate serial:       0197B820F476D309D45F8C98C7AE3D6DAA72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft
Manifest number:          034E
Signing time:             Sat 28 Jun 2025 20:00:56 +0000
Manifest this update:     Sat 28 Jun 2025 20:00:56 +0000
Manifest next update:     Sun 29 Jun 2025 20:00:56 +0000
Files and hashes:         1: 6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl (hash: 1RgivMlE9QRj++Sm7ZhP64DUrpvs4PFaTqT4zw309fA=)
                          2: aMF2nWqBHIhjk25aiuwSzN7-HfE.roa (hash: IMpF5s/0j570fq7XGWlyuKmW+Kc6O3oORXvCBLA1GSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:20:f4:76:d3:09:d4:5f:8c:98:c7:ae:3d:6d:aa:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e939540fd16b633501fbf7441a746fc56f9f59bf
        Validity
            Not Before: Jun 28 20:00:56 2025 GMT
            Not After : Jun 29 20:00:56 2025 GMT
        Subject: CN=63a3dcdc32afbf7ca67057cf0f5ec171815fa7a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5e:3b:d6:a4:3e:ff:04:6b:70:33:ce:cc:50:
                    28:8a:9a:8d:dc:c7:81:6b:b4:69:25:28:05:7c:4f:
                    f6:89:68:f8:1a:b4:43:96:a3:77:42:fd:21:84:8b:
                    9f:02:27:ab:ed:63:dc:f4:86:14:15:e1:91:9c:5b:
                    80:76:93:e9:10:cd:73:0e:e9:d2:b1:75:42:6c:a0:
                    50:27:18:0a:c1:c0:1b:28:3d:00:9a:9b:e7:e8:8a:
                    d5:a3:44:80:25:05:02:f6:07:7e:4e:cb:82:93:9f:
                    cd:e2:4c:9b:01:84:9a:ce:f6:78:1a:06:06:b9:cc:
                    79:70:db:15:7b:5e:73:0a:20:04:4e:fa:42:bf:92:
                    c2:10:77:ad:a1:d5:7f:43:2e:ae:24:76:dd:71:3b:
                    c3:66:41:93:0f:b6:9b:09:fd:f7:bc:f9:76:5f:6f:
                    07:7b:e9:aa:f8:2b:a4:69:e8:48:7f:2c:75:be:a9:
                    2a:c1:4a:9d:38:36:c7:bb:c5:15:fc:fb:2e:e4:07:
                    30:b2:b2:34:c1:87:21:20:43:07:af:f6:e2:f0:ee:
                    96:2e:a1:88:d2:1b:13:e1:d6:9f:82:7b:c2:fb:79:
                    8f:63:51:db:ea:ff:a2:f4:41:ea:7e:77:21:8f:61:
                    f6:a8:94:01:48:f6:04:27:1f:6c:8d:2e:50:61:14:
                    9e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A3:DC:DC:32:AF:BF:7C:A6:70:57:CF:0F:5E:C1:71:81:5F:A7:A0
            X509v3 Authority Key Identifier:
                keyid:E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:97:72:98:9e:cb:65:f3:d6:1c:78:65:d7:5d:01:b4:bb:19:
         53:a9:7f:b5:51:bf:1e:d8:e8:7e:01:0a:0d:f7:e6:ae:83:2c:
         48:21:7a:1d:6b:cc:0e:f5:64:e1:bb:08:68:55:0f:99:96:3a:
         75:c8:95:f3:db:9c:5d:74:49:3d:1f:fc:cd:5c:85:44:3a:24:
         48:8b:5a:33:a5:dc:c2:c3:8c:23:6f:41:85:dd:7a:e1:c4:d3:
         0a:39:9e:fa:ed:90:7f:02:eb:e2:5d:25:6b:01:aa:8b:0e:9b:
         5c:ef:6c:1f:ac:f1:a8:a4:a8:8f:d6:e0:cb:2b:99:1e:d7:5d:
         26:f3:67:cf:5b:16:fc:54:21:42:8d:57:28:30:8a:5d:5d:f1:
         71:d5:99:dc:f4:f5:6c:2c:08:ee:61:12:54:16:ed:d0:54:17:
         36:99:65:a1:0c:5d:79:ec:ea:7a:f2:24:92:9b:57:af:2d:7b:
         bb:32:3d:60:e7:fb:cb:29:4f:44:6e:bf:c5:e4:2d:b2:22:ca:
         28:13:0a:10:0f:e8:f4:87:43:42:61:8f:fc:37:44:63:22:26:
         f3:90:76:a3:b5:fe:2e:ad:94:13:9f:4a:98:7c:52:92:95:a1:
         32:91:66:13:31:f1:ec:a4:a0:05:a2:46:8d:38:07:ce:7e:7a:
         3b:65:cf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:28 2025 by rpki-client