Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
File:                     6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft (raw, json)
Hash identifier:          sZ3lpZOkrt6whP/XWaGHCZIgrZ5jejqjKfZawU/AlBs=
Subject key identifier:   77:B4:83:97:DD:E0:5A:17:49:75:39:5E:AB:E0:35:16:FB:DE:F2:D8
Authority key identifier: E8:4B:EF:96:61:6B:65:2D:C3:64:18:47:05:55:FE:8D:59:22:18:88
Certificate issuer:       /CN=e84bef96616b652dc36418470555fe8d59221888
Certificate serial:       0197B6A1B90621745EF37CB65AF39147CCD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
Manifest number:          94
Signing time:             Sat 28 Jun 2025 13:02:21 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:21 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:21 +0000
Files and hashes:         1: 4Gofx77thE1H70ueVHLD9j47btM.roa (hash: 9EbLzC5Y1+8DffIsLyCHPxc8JLdUo3GxnL9ubC3vyyI=)
                          2: 6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl (hash: wuwin1ShAiGqfcBgNGHOQA5wB3BGZIYAwUpdPGiYYTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:b9:06:21:74:5e:f3:7c:b6:5a:f3:91:47:cc:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84bef96616b652dc36418470555fe8d59221888
        Validity
            Not Before: Jun 28 13:02:21 2025 GMT
            Not After : Jun 29 13:02:21 2025 GMT
        Subject: CN=77b48397dde05a174975395eabe03516fbdef2d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4e:95:9a:5d:53:df:01:0d:9b:62:06:73:b7:
                    0c:98:ab:ab:1a:67:34:45:64:6e:23:e8:1e:64:3d:
                    ef:25:79:fb:a7:b7:d0:d8:43:a3:cc:c0:31:38:e7:
                    70:5a:a7:16:4e:46:4c:ff:a2:4b:1a:45:8d:32:09:
                    8b:11:0c:b1:25:0f:95:a9:42:3c:bf:eb:3b:f1:ea:
                    b8:a7:0f:69:15:07:fc:68:72:d6:eb:a6:c3:6f:94:
                    0a:0c:95:93:b1:ba:16:3d:c6:95:21:d5:69:a7:38:
                    29:aa:20:01:9f:12:03:36:dc:3b:f0:66:be:e3:68:
                    57:67:60:80:49:67:25:05:b6:c8:db:0b:85:4d:f5:
                    80:ee:34:73:1c:b6:f1:2e:7e:f8:e0:ac:e0:88:ac:
                    03:42:59:2c:4e:46:1e:5d:c7:8c:b3:4f:16:4d:66:
                    3c:0a:98:cd:1f:93:bf:d1:a9:ab:4b:1b:54:08:5b:
                    8a:a8:5f:d2:2c:fb:e3:08:f4:2e:9a:e6:e2:88:2f:
                    60:95:8a:19:b1:ae:2d:f3:34:75:c2:ef:d2:b1:c9:
                    54:89:bd:a8:42:be:84:64:07:81:a0:b6:86:09:a7:
                    d9:ee:e7:9f:2b:bb:b2:f2:d6:27:eb:25:5d:ec:ba:
                    56:61:3c:4a:1b:0a:f0:5f:7b:54:00:59:fb:6a:4f:
                    09:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B4:83:97:DD:E0:5A:17:49:75:39:5E:AB:E0:35:16:FB:DE:F2:D8
            X509v3 Authority Key Identifier:
                keyid:E8:4B:EF:96:61:6B:65:2D:C3:64:18:47:05:55:FE:8D:59:22:18:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:1d:9c:49:32:2b:35:9b:ab:07:c0:e7:bb:2b:be:3e:56:97:
         36:da:e3:32:73:a0:4e:95:ed:55:9d:7d:2b:d5:53:24:f8:45:
         65:37:52:2a:9f:b4:81:51:1f:25:a0:dd:95:ec:f7:b1:d4:84:
         c2:0b:ad:35:94:5c:58:9f:5b:64:3c:80:e0:f6:4b:f9:e5:35:
         af:98:ad:94:fd:4a:91:88:98:ae:61:0f:b7:62:94:4b:6f:76:
         02:7d:03:43:bd:84:0d:76:42:8d:fb:d5:8b:46:55:55:83:c7:
         38:79:24:9e:7a:76:a3:0c:b1:8b:1d:1c:3c:36:f0:b5:60:5c:
         c8:cc:39:b4:65:03:09:af:07:e9:85:a8:da:d3:73:db:25:f7:
         6a:02:a2:75:8b:1b:d7:09:b9:32:78:81:7b:2d:b4:56:f2:f0:
         1f:53:1a:39:81:41:33:15:ba:5b:70:e0:fe:42:c9:b8:d7:01:
         16:06:1a:d1:10:7a:a6:fb:e3:d7:6e:9e:72:09:43:b7:3a:88:
         20:64:23:97:bf:af:e9:ac:fb:ea:ca:ea:19:24:63:c7:05:3f:
         b9:81:4e:c6:79:d0:d4:c1:1d:a4:51:88:f5:0b:8a:61:b4:f9:
         4d:62:ca:43:66:69:42:ab:da:13:99:d1:a9:73:5f:82:2d:9c:
         7b:c5:44:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:49 2025 by rpki-client