Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
File:                     a6TjY5dLLvkOywU0CvXa9rJBYMs.mft (raw, json)
Hash identifier:          Jltl3U3SXPsZZwJaF5fu8ecro3u8waykZINCEb7XFLE=
Subject key identifier:   C0:B3:D0:A3:26:83:3C:D3:34:56:27:5D:8A:4D:77:EA:55:68:1D:E7
Authority key identifier: 6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
Certificate issuer:       /CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Certificate serial:       0196AFFC2A65C1CE3BB9D87882BC64E93707
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
Manifest number:          0A76
Signing time:             Thu 08 May 2025 13:01:00 +0000
Manifest this update:     Thu 08 May 2025 13:01:00 +0000
Manifest next update:     Fri 09 May 2025 13:01:00 +0000
Files and hashes:         1: 6m7j2x5GGq7W52qf5FgsTL2uZFM.roa (hash: yw3o2fOj27y6FNYr5DEC0pNcsBL8VcXlNTgJH2EfiEg=)
                          2: a6TjY5dLLvkOywU0CvXa9rJBYMs.crl (hash: ddkOAg2r77GJOHn9lXKMHUHib/0IWUfzFjzAqYXh/r8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 13:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:af:fc:2a:65:c1:ce:3b:b9:d8:78:82:bc:64:e9:37:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : May  9 13:01:00 2025 GMT
        Subject: CN=c0b3d0a326833cd33456275d8a4d77ea55681de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4a:5e:7d:c1:80:2b:00:4f:d3:59:ba:be:f0:
                    52:96:ac:8e:4d:98:f3:db:4f:8e:02:28:03:9c:b7:
                    4d:3e:0e:8d:da:fe:2f:a8:99:37:26:00:d0:af:ae:
                    6a:27:e8:22:58:e7:e9:75:2d:52:5f:bb:14:9d:2d:
                    bf:4b:6c:7f:fc:85:56:de:a0:1d:1c:ec:c2:93:f1:
                    1e:01:d7:cd:87:e9:1d:d8:ca:f2:ff:e3:c3:c1:75:
                    95:f3:f5:5e:c2:15:68:0b:8a:95:7a:d1:c2:5b:a4:
                    64:b4:24:3f:30:5f:30:cf:c6:5f:13:ea:d3:7f:31:
                    1c:f7:0e:75:e6:d0:29:73:34:07:e3:73:0b:1b:9e:
                    5e:e9:4f:27:45:01:23:04:35:a1:2f:07:ba:07:c1:
                    ef:8c:cf:9d:9e:74:c1:82:53:6c:0d:75:44:a6:5e:
                    5c:84:bf:59:44:5e:5e:1e:50:76:1b:30:aa:fc:df:
                    8b:ed:40:7b:26:48:3f:e2:ce:6f:c6:7c:19:b0:dc:
                    b5:f1:02:4f:98:b3:f9:92:cd:6f:97:51:43:4e:a1:
                    e3:2a:d6:b4:0c:d9:ec:fe:8e:7b:00:e8:17:98:77:
                    93:ac:55:67:e4:59:df:e9:13:73:8e:3f:29:b2:12:
                    ea:1d:e9:d3:17:29:c2:84:d4:33:65:99:1d:40:ee:
                    c1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B3:D0:A3:26:83:3C:D3:34:56:27:5D:8A:4D:77:EA:55:68:1D:E7
            X509v3 Authority Key Identifier:
                keyid:6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:d3:37:c3:33:d4:26:9b:e6:6b:20:6e:88:86:9b:6b:a6:a9:
         54:2a:97:7e:67:f4:5e:f4:af:41:d1:fe:6a:6f:70:e4:e1:5c:
         a5:a7:51:a1:13:f0:c4:b0:59:1f:59:db:43:52:bd:67:51:a3:
         86:bb:78:03:91:3d:db:3a:a0:84:f9:2a:f5:65:ec:90:95:6d:
         78:ac:77:53:7e:72:4f:d1:ff:27:39:11:1f:e7:b7:aa:28:c3:
         0e:c3:f2:7b:d1:c3:de:85:64:9e:1d:21:5a:e9:43:30:f2:c2:
         45:03:d3:8b:cd:87:3b:7e:d0:1f:cb:dd:9f:50:91:3f:34:b2:
         88:ed:27:27:86:3e:b0:16:37:af:56:a7:72:5d:56:17:4a:5f:
         da:8a:47:b5:88:56:f7:16:eb:f5:9b:86:c8:ae:08:20:3c:6a:
         79:3d:4c:49:00:bf:f4:37:e5:5d:0a:6e:f2:a9:88:24:fc:fa:
         ac:8b:a7:33:df:5b:fa:7a:bd:0f:7a:b6:80:fd:95:48:a1:70:
         93:26:d4:cd:80:97:c7:7d:ca:cb:be:04:ef:a7:7e:75:e7:0f:
         36:92:95:c6:77:25:e5:94:58:7b:00:2b:87:43:9f:14:9c:d1:
         dd:77:aa:16:f7:0c:59:e8:6f:b8:42:a6:b9:f6:19:ba:91:ed:
         6e:ef:f7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:49:36 2025 by rpki-client