Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.mft
File:                     atlkHKRH6y4wxdtRkcFrzUdyids.mft (raw, json)
Hash identifier:          c2DAiDUM2imWUagN88NjcaqsqrAYCcn4xEdIUBsoIxE=
Subject key identifier:   78:C7:6A:15:B0:00:A1:3E:0E:8B:7E:71:AA:96:A4:5A:1C:2C:82:AC
Authority key identifier: 6A:D9:64:1C:A4:47:EB:2E:30:C5:DB:51:91:C1:6B:CD:47:72:89:DB
Certificate issuer:       /CN=6ad9641ca447eb2e30c5db5191c16bcd477289db
Certificate serial:       0196BDB71C7C8F1B97CE84107B7B90346ADF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/atlkHKRH6y4wxdtRkcFrzUdyids.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.mft
Manifest number:          1488
Signing time:             Sun 11 May 2025 05:00:16 +0000
Manifest this update:     Sun 11 May 2025 05:00:16 +0000
Manifest next update:     Mon 12 May 2025 05:00:16 +0000
Files and hashes:         1: 1-9DbJi5jE57Pl5jrqPEth8zWTyI.roa (hash: FEmrD915t2x/Bvixygwv8jPDu1w/tggDREyxGYTpkL8=)
                          2: atlkHKRH6y4wxdtRkcFrzUdyids.crl (hash: zzAV9tSVuJ0r7avgn9JjBA6RaPGVdApeNpFIodV60y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/atlkHKRH6y4wxdtRkcFrzUdyids.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:b7:1c:7c:8f:1b:97:ce:84:10:7b:7b:90:34:6a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ad9641ca447eb2e30c5db5191c16bcd477289db
        Validity
            Not Before: May 11 05:00:16 2025 GMT
            Not After : May 12 05:00:16 2025 GMT
        Subject: CN=78c76a15b000a13e0e8b7e71aa96a45a1c2c82ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:10:62:35:c6:09:a3:08:5b:8d:30:81:f8:28:
                    c4:53:6b:e1:10:fa:12:0b:6c:e0:d7:99:ca:99:23:
                    01:1f:20:29:82:af:8e:64:03:d2:e1:36:60:46:3a:
                    11:1e:40:81:2f:07:1d:60:f0:3c:75:cc:54:02:21:
                    19:d8:a6:3f:52:97:04:a4:17:14:ef:9e:dd:4e:c7:
                    8a:34:a3:4f:25:21:b0:42:24:d1:6d:97:4b:20:2f:
                    33:9d:d5:69:07:0c:3a:21:55:6e:b0:75:98:c1:57:
                    39:29:09:2f:e1:54:bb:f4:60:96:c8:f5:7e:ba:2a:
                    6b:7b:eb:35:9e:38:7e:60:84:63:94:f7:69:28:b2:
                    07:e2:bf:5c:b1:1e:31:b5:82:1b:85:13:30:20:21:
                    a4:e3:58:46:56:f4:6d:17:23:8e:e1:fa:87:e9:53:
                    65:74:9c:09:92:79:d2:b5:d3:c6:15:b7:e0:b8:4e:
                    18:92:4d:7b:5a:f3:cf:d4:24:d6:ee:7f:ff:55:aa:
                    67:ac:4d:30:a6:5d:e7:8d:43:3d:84:e0:85:be:22:
                    86:6e:0d:02:d9:cc:fd:6f:e4:6e:de:d5:e3:94:3d:
                    4d:93:f3:bd:13:2c:41:8b:36:7d:db:61:af:1e:ab:
                    60:2e:99:e8:5a:61:5e:eb:b6:c1:6b:ce:4d:0f:0f:
                    4c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C7:6A:15:B0:00:A1:3E:0E:8B:7E:71:AA:96:A4:5A:1C:2C:82:AC
            X509v3 Authority Key Identifier:
                keyid:6A:D9:64:1C:A4:47:EB:2E:30:C5:DB:51:91:C1:6B:CD:47:72:89:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atlkHKRH6y4wxdtRkcFrzUdyids.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:a6:37:82:1c:9f:f3:45:43:b6:c8:fd:e2:f0:3b:f3:fa:f2:
         ee:ff:f6:05:bb:12:1a:43:c1:6b:a5:bd:c7:bd:af:b0:7f:90:
         1c:85:20:94:40:b8:fd:17:5e:8b:52:f2:f1:b8:13:38:e3:84:
         19:e0:a2:70:43:bb:a3:38:75:0d:74:30:ed:96:63:f7:0f:7a:
         2f:e1:90:f4:9a:21:5f:3b:4d:ce:6f:a8:fa:dd:fe:b6:10:a4:
         c9:b1:7c:68:22:76:60:0d:10:e0:2f:dc:44:ef:50:f5:f5:67:
         e9:c3:21:70:97:0b:81:72:9a:a5:0b:0a:f2:05:88:a7:95:a7:
         4e:14:e9:0e:12:e6:76:08:a3:35:1b:d2:7e:1e:69:55:8c:d1:
         c7:30:4d:6f:d8:ec:71:2c:80:32:d7:3f:0b:e1:9d:05:c7:10:
         da:e5:8a:48:9a:f5:86:e2:36:2b:73:f8:75:2d:14:a3:8e:d3:
         bf:da:a4:1d:0d:bf:df:84:7e:d3:d9:3a:d2:29:ba:95:46:ce:
         d2:97:b1:ef:0d:91:c4:96:d5:9a:68:9c:21:2b:d9:ea:f4:34:
         55:9b:4f:91:ff:e5:35:b6:c9:32:d8:71:6d:e1:be:cf:4e:06:
         de:ff:e3:dc:0c:ab:aa:8d:93:47:64:9f:55:cd:7c:59:4d:fe:
         ac:c9:2b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:36:14 2025 by rpki-client