Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft
File:                     6hvqpk83AzxoCTVAtc2c4zdHKG8.mft (raw, json)
Hash identifier:          lvPbkOEKiJyRxJhOmE2Wr94eOXMxJKUjpIbpmJMmPnA=
Subject key identifier:   60:F6:1D:B3:B7:19:60:EF:DA:7A:48:F7:AF:9E:11:37:25:0F:8E:5F
Authority key identifier: EA:1B:EA:A6:4F:37:03:3C:68:09:35:40:B5:CD:9C:E3:37:47:28:6F
Certificate issuer:       /CN=ea1beaa64f37033c68093540b5cd9ce33747286f
Certificate serial:       0196A84310D440EF34EF6BDA46DDD430BC05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft
Manifest number:          0DAA
Signing time:             Wed 07 May 2025 01:01:29 +0000
Manifest this update:     Wed 07 May 2025 01:01:29 +0000
Manifest next update:     Thu 08 May 2025 01:01:29 +0000
Files and hashes:         1: 6hvqpk83AzxoCTVAtc2c4zdHKG8.crl (hash: 6WjuairYDdjMtLTIeZE9RTvrU8oEj0pd9pokrjVFzgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a8:43:10:d4:40:ef:34:ef:6b:da:46:dd:d4:30:bc:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea1beaa64f37033c68093540b5cd9ce33747286f
        Validity
            Not Before: May  7 01:01:29 2025 GMT
            Not After : May  8 01:01:29 2025 GMT
        Subject: CN=60f61db3b71960efda7a48f7af9e1137250f8e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7c:5c:0a:f2:d1:8d:e3:5f:52:05:37:fe:0f:
                    d4:9d:93:ae:21:01:40:0b:39:4d:38:0a:25:36:d9:
                    ea:00:97:95:23:7b:e0:17:62:65:48:12:14:c3:b1:
                    38:e9:a8:53:f4:73:9a:b1:0f:b5:e0:00:23:5b:a8:
                    bb:bb:17:e7:0f:2b:13:b9:16:79:9d:94:d7:e5:f0:
                    db:c9:d7:af:58:fa:74:26:78:90:6d:49:5d:27:0d:
                    2c:b7:47:ca:36:e8:0b:22:90:15:28:ed:e8:0b:72:
                    e6:c1:17:95:9b:06:cc:33:b1:79:06:c8:33:75:ca:
                    9e:99:59:99:61:de:c5:06:88:da:0c:8b:cf:de:78:
                    a6:a8:97:b0:2f:f3:f5:c6:90:40:bc:0c:db:ae:99:
                    00:2f:77:2e:0f:b2:dc:e3:bb:5a:8b:69:3c:9c:10:
                    25:32:b1:70:1c:26:80:91:ce:3f:02:ec:4b:b2:5d:
                    de:c7:87:d8:01:24:f1:58:c5:0c:60:7d:08:2c:8e:
                    4c:58:6a:98:42:a5:55:95:7b:cd:a7:57:4e:f6:ac:
                    55:61:13:8e:03:3a:68:27:bc:4c:89:2b:c3:5d:ab:
                    88:85:bb:2f:ce:d3:81:4e:e6:ad:07:91:07:eb:3b:
                    bd:a2:81:d8:d8:cd:be:e3:0d:83:56:31:ad:b6:fb:
                    59:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F6:1D:B3:B7:19:60:EF:DA:7A:48:F7:AF:9E:11:37:25:0F:8E:5F
            X509v3 Authority Key Identifier:
                keyid:EA:1B:EA:A6:4F:37:03:3C:68:09:35:40:B5:CD:9C:E3:37:47:28:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d8:41:42:f2:c0:77:04:1a:64:ff:66:30:c5:58:c2:76:7f:
         84:89:d7:7e:0d:91:54:8b:28:1c:db:a9:36:65:e9:04:f5:5f:
         84:b1:8d:cd:0e:6b:5d:f4:c3:22:67:65:9a:8a:68:ec:6b:22:
         b5:cd:ea:58:84:cc:c5:e2:37:4c:a9:41:70:dc:92:0c:17:42:
         1e:ed:37:d1:e0:25:17:61:5d:82:08:cd:a5:07:7d:b0:75:1a:
         51:fc:62:e0:95:dd:53:b6:1a:c8:ea:dd:b8:4c:99:64:12:21:
         8c:72:3b:7c:db:de:1c:68:81:20:2d:d7:70:87:40:d0:c6:b6:
         44:68:f1:93:a7:5b:8c:48:5e:bb:67:84:60:bd:59:a4:5c:19:
         1f:25:31:bb:79:96:c1:bf:f0:5a:06:09:bd:c5:85:8e:19:7b:
         1d:65:89:26:25:22:1a:8d:d3:f4:c8:ff:32:2c:b7:b6:67:b8:
         b3:b7:5b:b4:25:4a:2d:9b:23:6f:d9:ff:ca:d5:13:c3:73:62:
         55:1f:36:81:d7:f0:8f:58:5e:7c:40:c1:f9:3e:53:69:f2:bb:
         ef:bc:72:68:79:20:f7:96:47:78:38:77:be:87:30:3e:5c:29:
         b9:22:8a:c5:0c:3a:9a:92:0d:39:2d:bd:54:c8:ea:c9:f2:d2:
         e1:ee:5b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:46:19 2025 by rpki-client