Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
File:                     my2tSBy6VIO6qw16DM3BregyrRY.mft (raw, json)
Hash identifier:          qTvt4BLy9OoUsmmywCTUktI4uUAto5jKcRg3f9/wLOo=
Subject key identifier:   C6:2D:40:8C:0C:21:78:A3:79:FB:5C:29:FC:6A:3E:2A:EC:71:99:DE
Authority key identifier: 9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16
Certificate issuer:       /CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16
Certificate serial:       0196A68AED3916FBA157DE315231C50ACEC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
Manifest number:          06C3
Signing time:             Tue 06 May 2025 17:00:44 +0000
Manifest this update:     Tue 06 May 2025 17:00:44 +0000
Manifest next update:     Wed 07 May 2025 17:00:44 +0000
Files and hashes:         1: iUGe5ciIVDZ_vtvHcYAi2dKEvOs.roa (hash: GD3GHNZKL4fdpgdi7l7xwFI/fIJOKFQjsdvcNA8UW4E=)
                          2: my2tSBy6VIO6qw16DM3BregyrRY.crl (hash: 9LAaWZN32XD0+9M4GtmcRFyB0vMDHjDLgzRAmCvQikI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:8a:ed:39:16:fb:a1:57:de:31:52:31:c5:0a:ce:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16
        Validity
            Not Before: May  6 17:00:44 2025 GMT
            Not After : May  7 17:00:44 2025 GMT
        Subject: CN=c62d408c0c2178a379fb5c29fc6a3e2aec7199de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:72:ab:46:45:18:7b:62:47:4c:74:be:2e:94:
                    5a:fa:e7:b5:8a:24:cf:40:03:7c:50:74:b0:89:97:
                    9d:87:e2:c5:70:db:61:54:df:49:f9:d2:b3:b4:94:
                    fb:11:1d:08:85:90:71:62:e5:e9:e4:c5:74:60:b3:
                    40:fe:ea:ef:1f:a9:f8:e0:6b:4d:b7:33:da:90:2d:
                    7e:77:08:5a:5e:f0:25:3d:c2:50:d3:49:c8:a7:9a:
                    92:1f:20:f0:e6:6d:b9:8f:8b:b9:d8:e7:23:63:c1:
                    84:7b:94:f3:13:07:c8:e4:62:57:fd:4b:c3:37:db:
                    f2:8b:69:30:1d:4f:f5:2f:dc:59:66:ca:17:b8:45:
                    cc:fc:81:6e:c8:ce:7e:9b:61:75:17:27:fa:d0:14:
                    56:7d:04:a7:91:d6:e5:53:10:76:d4:07:a7:af:31:
                    45:ad:61:eb:fb:28:ad:18:90:40:d1:f5:3f:87:8a:
                    20:0f:a5:cf:1a:81:a6:8f:89:44:dc:18:e8:05:d3:
                    f4:ac:cf:bb:a0:dd:4a:44:11:5a:a0:21:58:33:c4:
                    19:2e:db:00:b6:ea:ea:eb:e3:88:35:19:ae:38:9b:
                    96:43:91:67:e6:cb:77:1d:eb:c5:f0:f9:86:e7:62:
                    48:4e:b3:15:66:0f:b0:6c:e6:74:b5:82:b7:ca:e0:
                    e6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2D:40:8C:0C:21:78:A3:79:FB:5C:29:FC:6A:3E:2A:EC:71:99:DE
            X509v3 Authority Key Identifier:
                keyid:9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ae:cc:a7:47:d8:dc:9f:d6:a2:59:db:4d:5f:7d:c2:f6:56:
         10:57:0f:49:45:3a:37:a1:5c:4c:b0:12:54:af:79:38:73:9c:
         60:2b:94:8d:b5:da:cb:1e:80:e3:fc:c0:9f:93:9a:52:3f:a0:
         33:8d:36:37:61:0f:e9:22:20:e4:f8:23:07:74:af:b3:20:b0:
         ba:35:93:2c:0a:70:d2:ab:38:da:35:ce:ea:5a:a6:80:22:c7:
         d6:a1:c1:83:9e:13:4f:53:52:a4:60:f1:e0:a4:d6:db:bd:1e:
         de:01:8d:5d:17:6a:5e:68:3b:e9:e0:b5:17:c8:b6:77:d0:c6:
         b5:f7:61:3f:0d:2b:2c:3e:a9:80:3a:d8:d4:5b:7f:2a:8b:f9:
         1e:75:23:f0:85:98:a5:72:6e:14:f6:2a:85:b2:e4:3c:76:27:
         9e:99:8e:1a:18:57:96:6c:a6:d0:96:74:db:84:15:cd:a1:a6:
         2e:55:ed:77:db:50:53:70:2e:ee:5c:ce:d7:bf:fb:15:9e:e9:
         65:7d:51:5f:ec:bf:11:46:86:d0:52:96:7e:2c:a3:06:32:86:
         6c:ba:1e:9c:97:2d:67:1c:55:17:e2:a4:46:57:f5:03:92:8c:
         59:f7:cd:6f:28:5e:6c:29:02:bc:3a:3a:c1:30:4e:6e:73:25:
         76:e0:bb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:45:34 2025 by rpki-client