Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
File:                     MT6-Q2p1YpuPPbdKmj-h1dMK038.mft (raw, json)
Hash identifier:          OpnocNp1eT+V0xW1dRUFNNaqOhfytMMcDxaOoOaXfKY=
Subject key identifier:   C3:3A:38:6F:D8:08:4D:74:A4:8E:45:A7:04:B3:CD:68:35:CA:87:53
Authority key identifier: 31:3E:BE:43:6A:75:62:9B:8F:3D:B7:4A:9A:3F:A1:D5:D3:0A:D3:7F
Certificate issuer:       /CN=313ebe436a75629b8f3db74a9a3fa1d5d30ad37f
Certificate serial:       0196C3B949FFA9AA9114E4EA667524BB1B21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
Manifest number:          04EF
Signing time:             Mon 12 May 2025 09:00:22 +0000
Manifest this update:     Mon 12 May 2025 09:00:22 +0000
Manifest next update:     Tue 13 May 2025 09:00:22 +0000
Files and hashes:         1: MT6-Q2p1YpuPPbdKmj-h1dMK038.crl (hash: fTh+mqLvul3JS6uLyWXty/I6PY0PgYYe0ZL6OziwpGM=)
                          2: _LdyI__CtBUyN3KKHO7DmbRhOVc.roa (hash: BMSl9hLbGqGu2thmt7Hy6s7t4a2k9exnTVleWfEcqU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 09:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:b9:49:ff:a9:aa:91:14:e4:ea:66:75:24:bb:1b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=313ebe436a75629b8f3db74a9a3fa1d5d30ad37f
        Validity
            Not Before: May 12 09:00:22 2025 GMT
            Not After : May 13 09:00:22 2025 GMT
        Subject: CN=c33a386fd8084d74a48e45a704b3cd6835ca8753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e4:48:78:dd:86:1f:8e:36:fd:13:45:de:23:
                    17:66:80:8f:ff:d6:f9:81:e0:aa:97:5a:1c:b9:d0:
                    b0:88:ec:f9:d0:37:00:36:60:19:8b:aa:f3:40:74:
                    df:6c:35:72:4c:1e:5d:60:b9:3e:28:cc:21:06:c6:
                    e0:71:98:0b:28:9b:a6:17:33:9f:27:12:9d:37:44:
                    11:e7:38:e9:3e:d1:2e:91:d6:34:11:bc:a3:65:e9:
                    44:e4:0b:1b:63:e2:61:1e:40:d3:42:59:a3:89:65:
                    70:bb:08:ec:f5:4e:8b:9a:04:b1:1d:a7:3e:e1:9f:
                    a1:59:13:0c:fa:30:cb:0b:34:1f:b1:db:91:09:3b:
                    13:ee:9f:72:74:f7:a6:c2:6c:45:ff:1a:00:b5:4c:
                    be:02:ff:a2:fd:37:8d:4f:13:56:a6:7b:f6:7b:80:
                    7e:5f:f6:f6:8e:4d:f8:1b:6a:a5:97:7c:d9:c6:0c:
                    47:4e:67:6b:a2:ee:7b:46:e8:7e:5f:41:58:da:59:
                    17:8f:5a:b7:8b:66:b4:0c:d7:b0:2f:6d:dd:34:14:
                    51:95:d3:36:e7:b9:b6:3b:c3:0b:54:98:e2:fd:80:
                    09:e0:f3:e7:be:f8:e7:00:0a:7b:e2:d1:9e:da:14:
                    09:3b:a7:22:90:3d:72:b4:66:9c:11:50:b7:d9:10:
                    06:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3A:38:6F:D8:08:4D:74:A4:8E:45:A7:04:B3:CD:68:35:CA:87:53
            X509v3 Authority Key Identifier:
                keyid:31:3E:BE:43:6A:75:62:9B:8F:3D:B7:4A:9A:3F:A1:D5:D3:0A:D3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:16:a6:25:4d:06:30:a1:c3:a0:4b:ed:d3:62:85:9d:52:6f:
         19:67:e1:f1:c1:19:a0:37:01:19:5a:55:9c:30:4b:15:4d:fe:
         8f:0c:7c:53:78:3b:23:6f:cc:df:f2:13:5c:65:00:f4:f0:07:
         b5:94:1e:53:97:bb:cd:6f:ac:d5:2b:4e:95:91:9b:68:8c:1c:
         3f:24:9b:11:63:ef:fc:0b:ba:e8:9f:8c:f7:67:ca:2f:01:23:
         33:56:a5:3a:41:e9:c5:03:e4:08:9b:a7:61:05:93:59:20:da:
         cc:f7:97:df:80:6a:54:37:f7:95:37:82:63:5d:f9:7f:94:21:
         02:35:9d:91:49:fd:2d:3f:c8:6a:4d:ce:8a:88:2c:bd:d3:b9:
         3d:1c:e2:50:b9:3d:33:2b:9a:3f:f8:16:1d:8f:78:88:2a:52:
         1f:69:53:c5:e8:99:ab:2d:c8:74:dc:f6:0d:b7:71:76:a7:3b:
         e5:d0:76:d6:32:7f:60:3c:cc:b3:6b:47:f2:34:cb:0d:33:b0:
         d3:1a:b0:08:1b:99:72:b8:26:9e:00:6c:6e:fb:d8:14:f7:39:
         73:bf:42:12:d1:fe:d7:c5:5d:ee:0f:f5:21:dc:2c:c6:e7:de:
         4a:ce:33:cd:d9:12:4f:7f:8c:3e:80:f6:67:67:8d:e6:d8:85:
         6c:dd:4a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:23:04 2025 by rpki-client