Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
File:                     6ixOp53bewA94B8dBfbb9xaxEzY.mft (raw, json)
Hash identifier:          O0+c5+DoQyRxWOpUK6yCiMNSVULFLyaHZMjIp8P8aGg=
Subject key identifier:   33:01:C4:F5:D1:9C:CF:99:8A:C8:A5:0E:8E:39:BE:E1:02:BB:31:D0
Authority key identifier: EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
Certificate issuer:       /CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Certificate serial:       0196A9F9D22FEF4AF2496F165589BACBD570
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
Manifest number:          14BC
Signing time:             Wed 07 May 2025 09:00:43 +0000
Manifest this update:     Wed 07 May 2025 09:00:43 +0000
Manifest next update:     Thu 08 May 2025 09:00:43 +0000
Files and hashes:         1: 6ixOp53bewA94B8dBfbb9xaxEzY.crl (hash: 8V6OGEDR0ILHUpbjJ9sbL0ImdiOOTkD+Fkl3A+1SnXQ=)
                          2: UBg5H2PYYwmFwtuuB5TxJD258zc.roa (hash: mETMUQGm3Ge4vPrABQSGfrYWzYlfLqVqloDe3yUr+lM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 09:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a9:f9:d2:2f:ef:4a:f2:49:6f:16:55:89:ba:cb:d5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
        Validity
            Not Before: May  7 09:00:43 2025 GMT
            Not After : May  8 09:00:43 2025 GMT
        Subject: CN=3301c4f5d19ccf998ac8a50e8e39bee102bb31d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:98:b3:58:8a:e9:aa:8f:c9:4b:69:6d:8e:87:
                    09:f3:d2:0a:d3:ee:29:30:ab:6e:c6:5d:e0:e2:c1:
                    4f:e6:95:08:47:cd:70:7b:04:fb:fa:dd:17:a2:e6:
                    e7:e9:84:ed:ba:05:e9:fe:3c:62:29:9e:49:7d:12:
                    23:19:76:09:a2:2a:a1:1d:f2:3b:0c:b5:4d:87:28:
                    14:2b:96:68:bb:73:d6:37:db:48:a6:b2:aa:3f:71:
                    74:ce:f1:b4:f8:0e:a5:34:98:69:d7:03:24:9d:de:
                    43:73:d2:ab:4b:c8:f9:60:58:4e:fc:8e:93:b8:dc:
                    a6:0f:3b:9c:d3:15:8f:e4:59:1d:f5:d7:69:ea:c6:
                    a7:01:6e:fa:9c:e3:16:71:2f:59:3b:57:8b:65:8c:
                    e8:66:8e:dd:85:d2:84:0c:8d:db:7f:11:f3:4b:85:
                    8f:ea:55:30:d8:0b:f5:8e:2f:0b:b8:f1:3f:a2:ec:
                    d2:dc:54:92:31:79:a7:e1:ab:b0:ec:99:6a:aa:68:
                    87:0a:4a:6c:5c:28:ac:ea:72:65:e9:b2:11:6b:f8:
                    2a:14:f8:a8:72:d6:b5:74:ee:7a:e9:68:b5:5f:a6:
                    72:22:c5:07:12:70:5b:53:f6:aa:d5:e4:7c:42:6b:
                    88:63:a9:9d:5b:17:93:bf:0f:a0:89:3f:11:dc:95:
                    51:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:01:C4:F5:D1:9C:CF:99:8A:C8:A5:0E:8E:39:BE:E1:02:BB:31:D0
            X509v3 Authority Key Identifier:
                keyid:EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f9:25:84:3e:a6:14:d4:cd:8f:af:91:97:e3:71:76:63:a3:
         25:06:7f:67:81:3a:71:2b:12:e8:ae:46:ed:3f:29:be:45:5a:
         77:e5:37:9d:4e:87:fe:a3:da:73:6a:08:cd:b4:31:9c:d0:10:
         6a:a4:54:5b:b8:5a:bf:ba:a0:8f:2e:a5:42:aa:37:c4:04:c1:
         99:06:c4:94:1e:58:7a:dc:c2:94:f7:f7:67:6d:1b:74:5a:b8:
         e0:2b:6f:1a:37:db:e7:33:44:18:6a:23:22:de:b4:2e:84:25:
         b0:2d:18:ca:82:7d:9d:56:45:1b:3f:c6:4a:74:8f:67:ff:36:
         87:27:18:12:38:b9:28:f7:ba:f2:7d:f7:83:64:36:6f:f7:c4:
         74:9e:64:9e:ae:80:8f:27:a6:fb:87:49:bb:c1:b8:96:58:15:
         8f:e5:da:03:5f:7d:ee:f1:e9:00:02:2c:47:7c:7d:fc:b2:f7:
         7a:e4:be:7d:c5:e1:3b:89:bd:4f:3a:54:5c:27:5e:86:37:aa:
         59:66:aa:fd:f5:88:19:03:b5:ee:9f:4d:ad:9f:be:47:0c:f0:
         de:7f:00:a6:16:15:10:da:4e:a5:1d:bc:df:1f:0e:49:ea:46:
         4e:d6:1e:ed:a9:98:54:65:48:18:a0:51:39:36:4d:0e:87:d5:
         a8:80:4c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 15:47:09 2025 by rpki-client