Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
File:                     6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft (raw, json)
Hash identifier:          Gf79FADt0OAee2biTJ9UcX/32sunTgB0rhlzjUTWJlE=
Subject key identifier:   20:B3:C7:4C:5B:3B:C2:C9:C5:36:48:37:E7:AC:F1:44:2E:2F:2E:72
Authority key identifier: EA:82:7B:95:56:D5:40:DA:53:6B:80:46:C6:5F:F9:5B:06:EE:49:63
Certificate issuer:       /CN=ea827b9556d540da536b8046c65ff95b06ee4963
Certificate serial:       01969F3F6380194F489D1AECB8DD09CCD089
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
Manifest number:          1524
Signing time:             Mon 05 May 2025 07:00:53 +0000
Manifest this update:     Mon 05 May 2025 07:00:53 +0000
Manifest next update:     Tue 06 May 2025 07:00:53 +0000
Files and hashes:         1: 2p40Nc2xaHE8kZlDDAIZtTe36X4.roa (hash: Gggun6qomuBE+OhHHJ4qJm9ChIbCJjaRrYY7HesQ4j4=)
                          2: 6oJ7lVbVQNpTa4BGxl_5WwbuSWM.crl (hash: aX826o910qsIfeC86F8WAj4P6hU7+PzQbNiZEUjeV4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:3f:63:80:19:4f:48:9d:1a:ec:b8:dd:09:cc:d0:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea827b9556d540da536b8046c65ff95b06ee4963
        Validity
            Not Before: May  5 07:00:53 2025 GMT
            Not After : May  6 07:00:53 2025 GMT
        Subject: CN=20b3c74c5b3bc2c9c5364837e7acf1442e2f2e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1d:83:8e:c7:b6:e0:31:27:bf:16:ee:29:96:
                    0d:0d:b6:fb:08:d6:bb:e1:04:aa:b7:04:4d:55:05:
                    36:bf:df:67:03:a3:15:5d:31:6d:ef:46:80:ef:03:
                    db:e2:4d:ed:6d:6d:0f:31:21:3c:ba:2c:27:41:fa:
                    93:35:f2:0f:f5:b6:a7:ca:f3:8a:5d:cc:26:1e:2a:
                    37:77:4b:e1:b3:f0:0a:34:ff:67:d0:6a:92:3f:df:
                    73:9a:8f:37:35:6c:3e:43:5e:4b:6e:08:41:0c:1c:
                    55:2a:86:e5:fe:6d:3a:46:f5:eb:ac:99:59:39:bc:
                    2b:7f:58:ee:1d:7e:fb:b4:bd:5e:8b:01:50:72:57:
                    ee:f6:f1:a7:cd:ce:d3:e9:f3:4a:df:60:c7:b7:0e:
                    96:ad:06:5c:e5:9e:58:54:e4:86:e1:ed:02:8f:c7:
                    41:f1:b9:9b:57:0d:e3:91:a3:d5:62:1e:f5:28:d5:
                    d8:27:d0:e0:0e:39:00:36:4d:74:77:cd:9b:04:ae:
                    b7:c0:14:e0:19:07:1f:b4:59:25:5e:a4:46:18:53:
                    bd:f3:ce:07:ab:1d:91:50:7b:ec:6f:46:d1:5c:72:
                    3f:2d:71:7e:32:1a:64:af:4c:b8:83:fe:2c:ba:8e:
                    78:b2:83:e5:ce:9b:d3:0a:cf:f9:4a:c8:e6:89:27:
                    9e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B3:C7:4C:5B:3B:C2:C9:C5:36:48:37:E7:AC:F1:44:2E:2F:2E:72
            X509v3 Authority Key Identifier:
                keyid:EA:82:7B:95:56:D5:40:DA:53:6B:80:46:C6:5F:F9:5B:06:EE:49:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e5:23:db:38:56:47:40:0b:bf:62:1e:2b:a4:20:57:43:01:
         25:cd:65:29:45:a9:c3:7b:0c:e1:7a:97:77:1d:7f:3f:19:b1:
         a6:87:e8:fd:6b:6e:ec:4e:c5:af:9a:f8:43:fc:37:34:21:50:
         02:e4:40:86:d9:a3:5e:63:23:1e:40:e5:63:6f:cc:87:24:01:
         0b:59:5a:21:0c:19:41:e8:93:88:4f:91:5a:41:b6:4c:93:af:
         4e:a4:16:19:16:38:d8:5e:e8:93:ba:e9:d4:d3:22:02:f0:95:
         da:a1:a4:e0:7a:26:61:01:3c:a0:3e:c1:3c:0e:67:f4:73:6c:
         da:f1:8c:21:8c:8e:a8:d0:d7:d5:71:e1:63:79:6f:30:ef:d8:
         49:35:90:f0:f3:1a:35:27:9d:94:ac:14:3f:fd:93:fd:31:e9:
         17:1d:8a:68:03:40:fe:49:29:3b:f3:3e:7b:80:67:b8:1c:34:
         99:6d:40:22:2d:fc:18:38:5d:a7:cf:cb:55:24:4c:f4:b4:df:
         1d:71:ab:b6:b9:e0:5c:2b:bc:fc:16:8e:c9:08:d7:7e:a3:19:
         ab:33:18:8e:d1:92:33:1d:64:36:4f:73:41:6e:54:f6:55:91:
         1e:19:50:44:03:e5:97:7c:d1:6f:c4:91:8d:76:8e:8e:1f:48:
         02:d6:62:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:55:11 2025 by rpki-client