Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
File:                     612h2h-h1CXPHcnoJtZe2u1s2Jg.mft (raw, json)
Hash identifier:          4Pd73D/2P/9YhqyciZ8adsBkdXFCC3zK2cK6D3v1ubM=
Subject key identifier:   6D:9F:AC:80:6C:CE:4B:E9:24:80:65:14:91:3A:C6:D6:39:49:C3:0C
Authority key identifier: EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98
Certificate issuer:       /CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898
Certificate serial:       0196BAB66FDA9827A11E530F20468339A1A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
Manifest number:          12E5
Signing time:             Sat 10 May 2025 15:00:40 +0000
Manifest this update:     Sat 10 May 2025 15:00:40 +0000
Manifest next update:     Sun 11 May 2025 15:00:40 +0000
Files and hashes:         1: 612h2h-h1CXPHcnoJtZe2u1s2Jg.crl (hash: enbpJ/RQynSquLIxbFoI4oCoRWYo9rdQc/53OBU3pSU=)
                          2: T71-lLx_IRd0xdRoRiuKn01ramI.roa (hash: NdMh7OdN9MHFrjt5MDBsZ76I4BvEZisy0vA5gq92uHA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:b6:6f:da:98:27:a1:1e:53:0f:20:46:83:39:a1:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898
        Validity
            Not Before: May 10 15:00:40 2025 GMT
            Not After : May 11 15:00:40 2025 GMT
        Subject: CN=6d9fac806cce4be924806514913ac6d63949c30c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:49:a7:a1:42:45:c7:a5:ab:70:65:47:55:10:
                    e1:b5:cf:e6:e0:73:a0:83:a5:25:bc:74:1b:df:df:
                    87:11:d5:93:67:8d:f1:49:00:0d:a6:0f:d9:0c:7b:
                    c3:68:2b:2a:5b:6b:9f:e1:11:cf:36:e6:76:a5:12:
                    0b:04:63:a7:eb:82:6c:fa:e1:4d:f8:12:25:65:30:
                    70:64:8f:13:67:e1:59:d9:25:58:8b:6c:74:1a:02:
                    94:42:b6:2b:b8:fe:7e:91:59:8f:b8:bb:dc:d0:38:
                    12:99:cd:0b:6c:36:3d:98:f1:ac:66:33:8b:4a:8f:
                    07:19:86:92:d2:d3:1c:9e:22:e4:41:91:b1:5c:53:
                    ce:c2:9a:b9:53:38:95:8f:a1:1d:cd:d8:4a:2a:6a:
                    6f:42:61:4d:49:9a:c6:37:96:2d:2c:56:f7:39:a0:
                    b3:d3:d8:04:9b:e5:25:e9:09:a4:45:60:a0:c3:99:
                    cc:de:2e:60:16:13:df:71:17:31:82:45:00:bf:1f:
                    15:18:9a:1a:da:40:0b:a5:60:04:12:92:70:2f:22:
                    6c:02:28:65:93:59:be:b3:4f:c1:a1:c1:3b:3f:42:
                    83:e7:bf:5e:0b:3c:dc:66:9b:83:ef:e5:01:5f:3c:
                    d8:cb:b0:ff:1c:bd:4f:04:15:08:ee:fb:d1:93:55:
                    30:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9F:AC:80:6C:CE:4B:E9:24:80:65:14:91:3A:C6:D6:39:49:C3:0C
            X509v3 Authority Key Identifier:
                keyid:EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:6e:be:85:3c:17:84:d5:e6:ed:eb:0f:86:80:d4:dd:7f:28:
         c5:47:6f:f5:eb:dd:6e:72:ca:93:a7:9b:a0:18:f7:a2:fb:02:
         2f:60:23:3a:ec:f6:ec:0e:d8:81:13:7b:56:25:bb:91:5b:d6:
         6a:1b:7e:c2:36:0c:5d:63:43:57:d3:62:96:7d:b9:f0:a8:37:
         ad:90:3e:96:5f:35:69:0c:d3:01:b8:0a:cd:86:b5:18:69:43:
         70:90:d1:c0:6f:79:11:35:d7:8f:ff:7d:59:48:97:68:94:74:
         2c:0d:82:fc:e4:be:cf:61:09:d7:d7:21:80:75:ec:e0:e3:a0:
         d3:87:21:94:d6:d8:d9:c0:0c:54:ef:10:4f:71:6a:53:fa:60:
         c9:74:5b:af:1f:b2:e7:13:8f:c7:37:60:e1:d7:a7:eb:47:db:
         36:84:8d:51:52:0f:2c:39:52:56:8b:78:c4:3b:02:df:c5:c7:
         11:84:3e:63:ce:18:ff:98:e3:d0:1b:b8:df:2b:ab:9a:e6:9a:
         3a:10:b0:fe:99:23:9d:a2:51:ae:1b:7a:86:6c:e4:c3:85:db:
         74:fd:d0:bc:85:02:ea:f2:cb:7a:07:a0:98:92:b5:7e:25:3f:
         9b:2b:6e:78:45:3f:47:12:f5:8a:f9:b7:21:6a:b0:2d:fa:7f:
         24:68:48:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:13:43 2025 by rpki-client