Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
File:                     6yOl9H7GfpJakkkauZskujcRg_E.mft (raw, json)
Hash identifier:          KG3r70e9gbqCuwykTBvsbvB3LIdeZRaAgAttvDVeYQY=
Subject key identifier:   9C:13:1A:73:E0:53:C1:7C:03:F1:C1:9F:10:EA:E6:0A:80:E9:C4:BC
Authority key identifier: EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
Certificate issuer:       /CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
Certificate serial:       0196C45E96624C160EA3221882272D22ABF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
Manifest number:          0801
Signing time:             Mon 12 May 2025 12:00:55 +0000
Manifest this update:     Mon 12 May 2025 12:00:55 +0000
Manifest next update:     Tue 13 May 2025 12:00:55 +0000
Files and hashes:         1: 0_VEKJrftYI-EHvTCLarg2lwsBA.roa (hash: kfpPpXA7rFVv7oH2r9JbqI4VMxVD5WROc79GogJD5qg=)
                          2: 6yOl9H7GfpJakkkauZskujcRg_E.crl (hash: 5FPlqbShkKfuRuQ7CUhNC5C8aSrlpGvGK8w2+DR2Lbo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 12:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:5e:96:62:4c:16:0e:a3:22:18:82:27:2d:22:ab:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
        Validity
            Not Before: May 12 12:00:55 2025 GMT
            Not After : May 13 12:00:55 2025 GMT
        Subject: CN=9c131a73e053c17c03f1c19f10eae60a80e9c4bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d5:00:04:ac:ee:2b:24:7b:33:50:57:90:aa:
                    34:50:c1:f7:6c:30:4e:02:77:9d:d6:a6:ab:9d:3f:
                    a4:9a:31:da:31:64:08:60:59:f9:fc:77:91:eb:e9:
                    ab:4b:c7:12:45:12:08:ae:87:79:1b:27:5b:26:05:
                    5b:1a:3c:d5:9c:6a:ee:a4:33:65:97:db:e5:18:96:
                    15:c8:2a:7f:aa:88:1e:c0:20:3f:12:ab:9f:51:ee:
                    1e:5e:23:ba:02:74:57:2b:0d:74:a6:fc:25:5b:35:
                    1f:cc:be:1c:68:73:b2:ec:8c:83:66:c5:82:8e:97:
                    f0:41:16:34:28:03:13:19:9e:23:b4:ca:84:c6:5b:
                    7c:0a:2f:87:7b:7a:95:11:1a:f1:24:26:7b:e4:21:
                    14:cf:bf:57:32:9d:f8:85:69:6e:c9:3f:bd:75:df:
                    55:9f:cf:13:a2:9a:30:fa:fc:ff:91:29:ea:46:29:
                    95:7a:14:99:7a:ed:67:d6:a5:ac:8a:94:41:4d:89:
                    a4:e1:e9:db:74:47:34:88:e1:e0:5e:86:a0:12:a5:
                    fb:e7:a0:55:80:8f:36:8c:a0:2b:cc:ba:01:87:c2:
                    37:d8:58:84:f3:95:e5:bd:d8:14:a7:74:2c:75:f9:
                    87:cd:94:11:5c:9a:c4:06:d2:56:0b:c0:3a:f8:3b:
                    e4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:13:1A:73:E0:53:C1:7C:03:F1:C1:9F:10:EA:E6:0A:80:E9:C4:BC
            X509v3 Authority Key Identifier:
                keyid:EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:94:19:8e:48:9a:f5:69:af:82:e4:81:15:bb:4d:73:82:1b:
         30:74:1f:80:8f:ff:a5:e9:24:9a:47:fe:5b:40:c0:de:08:df:
         6a:9a:1b:c4:7a:64:b1:d6:90:30:ac:4e:e6:1f:be:7a:da:f9:
         33:32:a1:6d:2d:0d:e6:d0:ec:d3:af:43:67:d2:6d:50:d9:bd:
         df:ec:62:43:6e:22:b1:aa:04:a9:60:7f:13:eb:59:56:a1:45:
         ea:bc:98:92:6a:a1:7f:86:02:88:f8:c7:cd:1a:41:d4:d5:76:
         d1:6f:0e:cf:74:93:ed:3c:da:60:2d:de:cf:dd:3c:07:26:e4:
         49:ab:06:39:33:86:a4:bd:71:e4:a6:6f:99:10:ac:38:2a:c8:
         f0:b8:8c:fb:88:06:f8:e8:ac:fc:31:fe:0b:cb:b9:d4:07:69:
         94:8a:b7:aa:5a:ab:6b:5e:d5:d0:9d:a8:13:52:6b:66:c2:e6:
         86:b3:a8:5d:a9:7d:09:f6:23:d5:0f:7a:27:9e:ca:8c:2c:bf:
         47:8b:15:ae:30:43:3e:66:e0:37:ee:1e:b0:31:0e:21:96:8d:
         b4:d7:01:00:82:6e:3b:a6:41:cc:2c:7a:4a:8f:c3:22:e4:03:
         e1:f9:a2:c1:56:5f:10:0d:53:c5:ca:12:49:a5:4a:c7:8f:aa:
         ae:d7:5a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:16:54 2025 by rpki-client