Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft
File:                     q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft (raw, json)
Hash identifier:          BGKIcstV2bRSDvh99xm93PeDfrmBYs1xS7/W3SGmX28=
Subject key identifier:   6E:16:A0:64:82:7D:D6:FB:2C:FB:E7:F3:8D:AE:5D:82:77:1E:67:5E
Authority key identifier: AB:A1:00:57:BC:D0:07:62:EE:F4:38:23:C0:30:E7:E3:2D:57:22:41
Certificate issuer:       /CN=aba10057bcd00762eef43823c030e7e32d572241
Certificate serial:       0196A79D78B2D573F43D5B392BDC3796517D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft
Manifest number:          152A
Signing time:             Tue 06 May 2025 22:00:37 +0000
Manifest this update:     Tue 06 May 2025 22:00:37 +0000
Manifest next update:     Wed 07 May 2025 22:00:37 +0000
Files and hashes:         1: 1P9fVQVtxSb2G4sWpvSG7bw0bpw.roa (hash: 6VyhtcepI1NTxHwb+zyOQuM2NICKUmki0vqcGxvdoCg=)
                          2: 5XE0gfIHPBVwos97p8SFxETissU.roa (hash: 6gs7iKR2AXCvfwIabzt43SR9/MCH860ldfvLILxKt+M=)
                          3: anHJmbU7C2zjE1lGpkfnKPRRqS4.roa (hash: svRwOAhrUBlYXwTbfNYBTqirI+LGeE+CWUjAVTOIKpw=)
                          4: q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl (hash: ZqSZObmkxQ/jwX3tkqEg3yT+siKcXWXCoXelgFBthto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 22:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:9d:78:b2:d5:73:f4:3d:5b:39:2b:dc:37:96:51:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aba10057bcd00762eef43823c030e7e32d572241
        Validity
            Not Before: May  6 22:00:37 2025 GMT
            Not After : May  7 22:00:37 2025 GMT
        Subject: CN=6e16a064827dd6fb2cfbe7f38dae5d82771e675e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:40:c3:b1:37:ef:23:f8:f6:ee:81:16:45:92:
                    c7:8e:a9:3c:77:f8:e7:da:d4:74:bc:f3:e0:69:fb:
                    e8:2c:79:72:c7:69:e3:9b:2d:5e:8e:a7:79:0a:2b:
                    62:2a:be:ee:97:d1:3b:b6:39:fa:77:65:6d:00:76:
                    0f:9c:68:06:22:da:8e:bc:03:4d:a3:f0:48:20:4a:
                    0e:4b:0a:58:46:2e:73:1d:ce:f1:d1:e2:d3:97:d5:
                    38:41:d5:a9:b2:ef:a0:06:a2:c6:e0:77:79:2d:01:
                    f3:2f:e7:52:04:5b:8c:0b:4e:a7:e9:38:ac:44:42:
                    8f:97:da:df:9e:ca:2c:63:18:42:d3:0f:b7:e3:33:
                    31:28:6c:a7:7c:46:6d:20:08:05:ad:18:ed:7b:91:
                    2b:9d:a4:fb:33:74:ec:37:89:f2:6e:4d:29:04:15:
                    ed:09:9a:c1:0d:83:b2:39:4f:8b:76:8a:d9:46:59:
                    45:73:0f:7b:f8:a8:5e:3b:87:c4:9d:d5:c5:49:ae:
                    45:20:56:4e:4a:95:85:bd:75:bd:66:75:d2:26:ef:
                    0f:55:23:c7:30:a9:31:e7:a7:d9:41:e0:4d:74:11:
                    1c:77:2b:84:4e:19:e2:97:81:70:28:66:58:70:90:
                    fb:bc:d3:72:f2:cd:08:06:62:16:93:74:87:5a:19:
                    89:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:16:A0:64:82:7D:D6:FB:2C:FB:E7:F3:8D:AE:5D:82:77:1E:67:5E
            X509v3 Authority Key Identifier:
                keyid:AB:A1:00:57:BC:D0:07:62:EE:F4:38:23:C0:30:E7:E3:2D:57:22:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:04:32:f5:9a:b6:d5:9f:b7:68:1c:32:01:11:b8:0c:7d:f3:
         f9:95:7e:6b:cb:ae:10:20:5c:33:f2:ae:fb:04:8b:2b:e6:00:
         ad:bb:1d:5c:ba:5e:08:02:0a:9a:e5:b3:78:46:83:8f:99:08:
         70:22:38:d5:84:3c:ea:7c:a3:a0:18:80:60:87:83:76:1b:54:
         61:39:0c:41:6c:39:cf:bb:9a:d3:55:44:c7:77:73:8c:ca:e3:
         ba:2d:ff:b9:82:8e:d5:fb:73:26:7d:2b:15:5c:47:5e:61:a0:
         aa:87:11:02:d0:37:b6:7a:bc:f0:b2:c9:aa:a5:dc:b4:8e:4c:
         82:79:4b:28:3d:47:49:6a:db:42:73:2d:8a:51:1b:af:4d:d3:
         c6:4e:5e:b8:5b:86:54:a0:f5:88:7a:56:b4:c8:a6:1b:77:47:
         6b:c4:79:e6:2b:40:e3:6d:bd:0d:f4:b6:f1:d9:f1:1d:bc:3d:
         24:a2:17:0c:73:10:26:1b:25:d3:cd:0c:e5:86:56:53:db:41:
         93:d5:85:39:5b:90:fb:7f:e5:b8:15:d7:44:4e:0b:97:ef:83:
         3d:f7:0a:fd:f7:2d:49:73:7f:2b:f4:d2:ea:59:01:9d:3a:13:
         9e:cc:40:42:3e:b1:f9:cd:d2:cb:3b:da:38:d0:f1:c7:08:d6:
         ab:7f:9c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:45:23 2025 by rpki-client