Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5f3a02-0650-4e5c-b8d0-c701f279c6de/1/65Hpk6SkDOfl2chjJfGG3waeys0.mft
File:                     65Hpk6SkDOfl2chjJfGG3waeys0.mft (raw, json)
Hash identifier:          vWq3w3BnXORh6hnizj+JGVekFZ1DcLUy8/I59V+uPf0=
Subject key identifier:   6C:DF:07:EF:83:1E:F8:35:F0:71:27:E7:6F:3A:BB:3B:C8:AB:BE:7D
Authority key identifier: EB:91:E9:93:A4:A4:0C:E7:E5:D9:C8:63:25:F1:86:DF:06:9E:CA:CD
Certificate issuer:       /CN=eb91e993a4a40ce7e5d9c86325f186df069ecacd
Certificate serial:       0196B823079629555E723F9A25E37DE2423A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/65Hpk6SkDOfl2chjJfGG3waeys0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/5f3a02-0650-4e5c-b8d0-c701f279c6de/1/65Hpk6SkDOfl2chjJfGG3waeys0.mft
Manifest number:          061B
Signing time:             Sat 10 May 2025 03:00:25 +0000
Manifest this update:     Sat 10 May 2025 03:00:25 +0000
Manifest next update:     Sun 11 May 2025 03:00:25 +0000
Files and hashes:         1: 65Hpk6SkDOfl2chjJfGG3waeys0.crl (hash: SejKxQjmSGSIjWatZyoYfP+a50XHb1ZcdFDsqgfwQkg=)
                          2: ctxe5Lnf-P92Y-aRF-aTwCxvQ-Y.roa (hash: JuvYZG1KASTZcCfggftiqfbWLqoSmP/ETYKyhfPlx0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/5f3a02-0650-4e5c-b8d0-c701f279c6de/1/65Hpk6SkDOfl2chjJfGG3waeys0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/5f3a02-0650-4e5c-b8d0-c701f279c6de/1/65Hpk6SkDOfl2chjJfGG3waeys0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/65Hpk6SkDOfl2chjJfGG3waeys0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:23:07:96:29:55:5e:72:3f:9a:25:e3:7d:e2:42:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb91e993a4a40ce7e5d9c86325f186df069ecacd
        Validity
            Not Before: May 10 03:00:25 2025 GMT
            Not After : May 11 03:00:25 2025 GMT
        Subject: CN=6cdf07ef831ef835f07127e76f3abb3bc8abbe7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:25:a6:11:37:4f:06:8e:57:4a:64:af:03:ea:
                    f6:88:17:a5:6c:65:0c:17:4e:7b:7d:9f:d9:a7:1c:
                    aa:67:6e:73:c4:d3:f5:e0:f0:66:d3:f9:d6:4e:70:
                    14:a2:d0:4a:86:b4:fa:c5:42:f9:0d:ed:e5:b1:3d:
                    f8:0a:22:a7:75:ae:6c:02:74:52:c3:56:9f:55:6c:
                    97:f3:79:0e:6d:5c:81:7d:21:8a:7f:bb:66:9f:9f:
                    6b:72:89:b1:90:c1:b2:59:35:d1:9a:35:a1:cd:3f:
                    34:76:6c:85:f6:20:6c:24:65:22:cc:b3:6a:e4:ca:
                    cc:ac:07:31:6f:1f:93:fa:83:ea:21:6b:06:8f:0a:
                    68:0a:13:a2:fd:2c:9f:0e:73:2b:a7:89:d8:ae:64:
                    31:de:eb:1d:84:41:d3:27:dd:d3:c1:d4:2b:f3:13:
                    62:ed:e1:b1:93:dc:a6:b4:5a:60:f7:dd:2f:7e:09:
                    c9:47:1f:4d:7e:1e:25:80:49:bd:28:49:94:ac:61:
                    ea:b7:05:d2:f1:2b:f7:2c:7b:af:21:ab:5d:05:a7:
                    0c:16:3e:49:51:3e:aa:a7:4c:ac:92:22:6c:90:68:
                    0f:88:dd:af:d6:69:d9:7c:db:9d:ef:ba:6f:33:08:
                    17:06:82:0b:59:70:dd:d3:fb:ba:c7:7b:f8:e2:55:
                    35:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DF:07:EF:83:1E:F8:35:F0:71:27:E7:6F:3A:BB:3B:C8:AB:BE:7D
            X509v3 Authority Key Identifier:
                keyid:EB:91:E9:93:A4:A4:0C:E7:E5:D9:C8:63:25:F1:86:DF:06:9E:CA:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65Hpk6SkDOfl2chjJfGG3waeys0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f3a02-0650-4e5c-b8d0-c701f279c6de/1/65Hpk6SkDOfl2chjJfGG3waeys0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f3a02-0650-4e5c-b8d0-c701f279c6de/1/65Hpk6SkDOfl2chjJfGG3waeys0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:f2:ca:bf:58:5c:63:ea:ac:92:12:b0:6d:ca:2a:64:ae:a6:
         52:67:ee:a2:e6:3d:87:7a:fe:ac:42:32:55:25:47:cc:7c:86:
         fc:2b:be:4c:66:f9:93:92:f4:6a:67:69:b1:b9:5e:3b:24:7f:
         10:2e:c5:95:01:98:cd:73:e1:11:e4:e4:04:c5:8b:94:df:c7:
         24:a7:35:f1:fc:5c:57:3d:99:eb:3a:61:35:47:bc:8c:81:06:
         45:c7:34:03:9a:aa:a2:f6:ac:06:ef:34:48:7e:a0:16:14:ca:
         8e:d3:01:f4:ba:b1:25:a6:96:2c:d5:07:42:5c:27:04:69:ae:
         ff:da:2d:8d:27:cc:a0:b1:bf:30:49:75:19:d6:a3:a7:51:0f:
         bf:06:bb:80:24:45:1f:13:d8:47:17:ea:d5:b6:7e:f9:53:bf:
         74:b8:67:97:5b:31:57:b8:62:9c:a8:23:78:15:af:cf:6c:b4:
         fe:27:ce:1d:c6:9a:f6:0e:3c:6e:2e:5a:8f:35:24:11:29:b8:
         18:61:84:8c:fa:59:e1:c0:69:fe:04:21:74:10:2e:1e:5d:75:
         2a:0c:fa:97:a7:f4:00:b7:4f:5b:2b:f3:5c:d7:fd:06:29:ba:
         6e:6e:07:88:ac:36:b4:56:8c:f6:5c:b0:c3:e0:ab:4a:8a:6b:
         b4:f1:f9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:50:33 2025 by rpki-client