Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
File:                     6xU9o8JM4SNuIMRoYWNdyO-1apI.mft (raw, json)
Hash identifier:          5TEQAElWOHqQrF1kYvT6g/bLUcI+gPz9Uz5U8lOaTfM=
Subject key identifier:   89:E5:E1:7A:64:DC:1E:37:63:F5:AD:05:3C:65:24:87:5A:79:8E:74
Authority key identifier: EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92
Certificate issuer:       /CN=eb153da3c24ce1236e20c46861635dc8efb56a92
Certificate serial:       0197B632D4F8F136D7D990432EA3285A47E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
Manifest number:          0C9B
Signing time:             Sat 28 Jun 2025 11:01:13 +0000
Manifest this update:     Sat 28 Jun 2025 11:01:13 +0000
Manifest next update:     Sun 29 Jun 2025 11:01:13 +0000
Files and hashes:         1: 6xU9o8JM4SNuIMRoYWNdyO-1apI.crl (hash: WGH2COOfOm1j/yYG2RUZAEPAmgCrjny9EL8WnlcYb9s=)
                          2: ipmJ5LQmK4ddp63lgFVAIAYopkE.roa (hash: YVYb+vZufn7OkrWKbNACiC73zlWWGlO/lMGiNA3e8zY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:d4:f8:f1:36:d7:d9:90:43:2e:a3:28:5a:47:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb153da3c24ce1236e20c46861635dc8efb56a92
        Validity
            Not Before: Jun 28 11:01:13 2025 GMT
            Not After : Jun 29 11:01:13 2025 GMT
        Subject: CN=89e5e17a64dc1e3763f5ad053c6524875a798e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:32:42:31:2f:3c:61:2c:fa:f4:14:38:5a:a4:
                    c0:3e:7b:dc:dd:b4:0c:7b:6f:3d:66:ed:ec:96:3c:
                    30:cf:ad:09:5a:6b:6f:25:88:57:51:a0:5c:f4:ce:
                    78:91:34:10:61:5f:e1:d2:c5:47:be:9e:52:1e:2c:
                    4a:17:aa:56:3c:ea:cf:ad:cb:cc:4f:a2:01:a5:4f:
                    e1:af:c4:c0:c6:6f:a6:0b:51:27:d7:74:d3:0a:e0:
                    e8:31:8e:e6:15:8a:78:ff:d8:7e:ba:ae:9d:7a:f3:
                    93:ce:89:94:61:6a:0b:c9:09:c0:2b:ff:b6:16:be:
                    d7:28:c8:b8:59:68:ff:6e:7b:34:fc:3e:57:e8:4c:
                    02:e1:75:c9:be:3a:20:0a:ec:23:b2:e3:5f:a9:c1:
                    8f:31:7a:45:03:2f:6e:b0:d7:e1:ac:ca:3c:47:ff:
                    33:80:d7:63:88:20:57:f8:94:48:24:a4:c1:91:2c:
                    f2:0f:86:c3:bb:5f:bc:1c:d8:45:9a:c9:b0:65:b2:
                    05:b2:55:78:71:de:31:f0:64:e8:c0:90:e3:0a:cd:
                    46:46:de:54:e9:78:3c:aa:7d:eb:5d:c7:ac:c3:00:
                    90:0c:87:e7:5e:67:c8:47:fe:6e:c2:95:78:3f:f3:
                    19:12:3b:54:4d:36:5e:35:9f:08:ee:cd:97:53:d1:
                    91:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E5:E1:7A:64:DC:1E:37:63:F5:AD:05:3C:65:24:87:5A:79:8E:74
            X509v3 Authority Key Identifier:
                keyid:EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d7:f6:b0:fc:5c:c2:7a:2a:a1:0f:78:7d:08:90:02:03:39:
         76:75:e9:a7:fa:5a:56:b6:3a:12:fa:d7:74:81:cb:5d:16:77:
         9f:4b:6f:62:de:67:02:af:f9:99:f7:c9:35:50:b0:c4:d6:be:
         8d:50:c1:57:02:de:c3:d3:4b:ae:51:d5:5d:81:a9:d9:96:97:
         ae:41:32:f1:5f:02:d0:83:2e:34:bf:81:b7:1b:e0:ac:38:f3:
         96:42:2a:a8:8b:bb:dc:a1:f6:25:94:3b:7f:3a:d4:56:97:d9:
         22:23:6b:4e:9e:c1:e7:72:f6:8f:33:6f:9d:a3:9b:97:9b:a8:
         de:ab:12:4b:75:98:a0:76:d9:ca:d9:76:2e:fc:4b:d7:f7:21:
         ab:17:30:1b:00:13:8d:5a:cb:41:98:1c:bf:62:d3:f1:0b:a1:
         b2:24:6d:1a:a4:40:f7:9d:47:43:9a:4e:c9:58:0f:d9:f8:8e:
         c5:e7:8b:55:67:81:19:75:2e:db:23:12:e1:33:47:99:87:e3:
         92:4b:3a:6a:4f:e4:7f:83:65:90:0e:49:ba:05:52:00:ff:0f:
         52:9f:59:e0:81:eb:e1:56:3a:ac:ba:3d:ac:dd:07:8f:7d:d7:
         31:b8:6c:13:02:4a:32:e3:90:4b:5d:97:ac:e3:19:37:d6:c9:
         05:d0:53:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:37 2025 by rpki-client