Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft
File:                     6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft (raw, json)
Hash identifier:          feUgRx1BxwAUzSiMmARUxo9PIUPjwi66Ro8Z+ABBLK0=
Subject key identifier:   AC:71:EC:80:EB:E2:B7:18:A1:1D:45:9A:EE:2C:F1:0B:1F:06:0F:7D
Authority key identifier: E9:96:D2:CB:39:47:78:7F:15:E1:9B:AC:B1:E3:36:9C:19:F3:EC:94
Certificate issuer:       /CN=e996d2cb3947787f15e19bacb1e3369c19f3ec94
Certificate serial:       0197B6A074D35725840F8F420FFC228EB531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft
Manifest number:          0626
Signing time:             Sat 28 Jun 2025 13:00:58 +0000
Manifest this update:     Sat 28 Jun 2025 13:00:58 +0000
Manifest next update:     Sun 29 Jun 2025 13:00:58 +0000
Files and hashes:         1: 6ZbSyzlHeH8V4ZusseM2nBnz7JQ.crl (hash: Psxh0m3drNqSH3WC26V77RXnu4+JTUOYokPia/9iYhw=)
                          2: q6-9G3aCT5ZgGlkvHjIFz5bA04g.roa (hash: cfokvWEVeqwKPxGczy1eXytgUST2AAuJ7ts04BX5rq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:74:d3:57:25:84:0f:8f:42:0f:fc:22:8e:b5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e996d2cb3947787f15e19bacb1e3369c19f3ec94
        Validity
            Not Before: Jun 28 13:00:58 2025 GMT
            Not After : Jun 29 13:00:58 2025 GMT
        Subject: CN=ac71ec80ebe2b718a11d459aee2cf10b1f060f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1a:dc:7c:54:28:c4:2b:58:90:59:f0:e5:7e:
                    9d:4d:66:0b:76:86:18:c8:27:34:fe:a7:21:7b:b9:
                    ff:23:44:3f:d9:b3:da:c7:89:be:5e:9a:49:db:dc:
                    1b:87:2a:0f:aa:cd:f4:fb:58:48:d1:47:02:b5:dd:
                    92:c4:61:e7:37:52:9d:8b:d4:37:62:89:07:c1:a1:
                    fc:d1:67:fe:f8:78:c9:9e:89:49:75:00:e4:96:f9:
                    f0:90:40:23:8c:a6:14:05:b4:00:2d:a8:39:1f:01:
                    42:22:78:92:f8:ab:89:ef:a9:8a:18:aa:24:20:e6:
                    94:f5:65:45:ac:45:1e:bf:65:22:b6:67:e9:b8:f8:
                    26:0e:07:9f:2b:b0:bd:89:a0:e6:3e:96:23:d2:46:
                    b9:0c:df:03:fa:7d:da:82:d8:ec:84:ae:96:87:bd:
                    e7:2d:ba:89:68:8e:4d:6a:d7:8f:ac:74:1c:6a:23:
                    b5:c6:72:9c:fd:9f:ab:db:f4:04:47:49:d6:9f:85:
                    b7:9f:31:e2:3f:7f:b5:87:d6:f6:91:62:76:2b:34:
                    9a:b3:4a:44:01:b6:75:5a:a8:72:68:c9:eb:dc:43:
                    ce:6a:4f:7c:9a:9d:46:6d:32:63:c9:b7:a6:a9:c0:
                    2a:15:43:10:32:4c:94:87:c8:cd:92:e5:71:fd:a0:
                    41:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:71:EC:80:EB:E2:B7:18:A1:1D:45:9A:EE:2C:F1:0B:1F:06:0F:7D
            X509v3 Authority Key Identifier:
                keyid:E9:96:D2:CB:39:47:78:7F:15:E1:9B:AC:B1:E3:36:9C:19:F3:EC:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:bf:ad:e0:aa:fb:1b:8f:6e:06:0b:56:65:81:02:e9:7e:44:
         25:32:89:46:eb:96:22:2c:18:20:dd:92:10:2d:f2:95:d5:34:
         92:72:79:20:a1:87:26:95:dd:c1:86:46:07:6c:c5:c7:f1:70:
         30:3e:9a:87:d8:33:64:5e:4b:a9:97:74:ef:df:c0:3b:21:e9:
         3e:4c:a0:f5:fd:af:d8:4d:8b:b9:b1:0b:94:f7:99:6c:7f:1d:
         85:63:12:fe:26:06:96:9a:91:9e:35:ec:b1:61:60:97:dd:a3:
         fe:d3:59:02:93:38:0a:44:3b:57:87:d3:fb:16:c4:8a:6e:66:
         60:4d:c3:bd:45:a4:87:b6:b4:f7:23:1e:d4:bc:d6:90:a5:57:
         97:56:fc:2a:6a:69:d0:0b:52:08:e2:c3:45:b8:cb:94:44:26:
         86:3f:14:2d:58:10:fd:50:c7:4b:49:d6:d4:33:14:a9:2e:03:
         7c:cb:83:76:7a:d2:e4:d1:e9:7f:4c:56:5c:d0:40:6b:34:00:
         4d:2c:1a:33:17:a7:57:e0:ee:f8:2c:75:12:cf:87:96:58:8e:
         9b:47:eb:74:99:23:9b:cd:db:ac:06:0e:39:eb:5e:96:0d:b2:
         80:72:a1:eb:1c:e3:60:e8:38:8c:25:0c:ad:1e:fb:7a:03:af:
         96:56:1d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:35 2025 by rpki-client