Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
File:                     6EKPwtpbZWN0nMuZd1d16CC3czw.mft (raw, json)
Hash identifier:          Bs/wZyNlbG0NwaQYkQQDXMUeqbov731yVEqd4CnO+a0=
Subject key identifier:   A6:30:A6:A1:91:E1:5C:B9:45:1B:C2:16:D1:91:7C:FB:2D:7F:05:D1
Authority key identifier: E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C
Certificate issuer:       /CN=e8428fc2da5b6563749ccb99775775e820b7733c
Certificate serial:       0196A6C1BA607F610F34A591B09E5384E463
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
Manifest number:          0F59
Signing time:             Tue 06 May 2025 18:00:36 +0000
Manifest this update:     Tue 06 May 2025 18:00:36 +0000
Manifest next update:     Wed 07 May 2025 18:00:36 +0000
Files and hashes:         1: 6EKPwtpbZWN0nMuZd1d16CC3czw.crl (hash: 13Fj0AIwa/NUX3LDF3iXaabIayzDJVYoQ+PBnEbKy+M=)
                          2: LFFuuAaPymw7mrLkEc1dJw_pneU.roa (hash: roCdm0ObDLqCzKMIH+P6b5BVl1CPDBPmD6VmUXfwJys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:c1:ba:60:7f:61:0f:34:a5:91:b0:9e:53:84:e4:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8428fc2da5b6563749ccb99775775e820b7733c
        Validity
            Not Before: May  6 18:00:36 2025 GMT
            Not After : May  7 18:00:36 2025 GMT
        Subject: CN=a630a6a191e15cb9451bc216d1917cfb2d7f05d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:56:82:61:08:cf:61:d4:a8:8d:bc:6d:55:2c:
                    45:04:26:01:be:eb:dd:81:e3:fa:9a:2a:c0:9a:5c:
                    64:14:18:80:3a:55:cf:e9:4f:99:d1:78:15:9c:66:
                    01:5e:de:15:52:e1:20:4e:5b:88:a5:ff:d6:80:50:
                    cd:a3:3b:b6:d8:58:dd:06:e1:94:bc:65:66:76:76:
                    17:3f:6c:89:e7:a3:44:fb:80:9e:5e:a2:6d:03:00:
                    4b:41:77:17:08:10:4e:70:eb:41:90:c3:95:9c:ff:
                    a0:e4:b8:e2:df:16:4b:b5:a4:c7:7e:71:50:c1:53:
                    4d:35:c4:16:ca:2d:c4:5d:bd:d3:67:bc:50:d2:d6:
                    bd:65:d5:f7:41:0d:45:73:fa:86:07:18:1f:92:08:
                    ff:42:81:de:83:41:51:c7:8b:d4:87:1e:e7:c2:0a:
                    58:6b:c1:7e:12:60:06:bd:9d:da:ea:ef:db:39:67:
                    5d:fe:15:5d:5f:d7:81:a7:de:48:77:d8:85:61:67:
                    6f:b6:9d:c7:f6:0d:45:d3:fa:9b:8d:75:76:52:31:
                    fa:aa:e8:d5:30:08:0d:7b:09:d2:11:af:f4:78:0e:
                    52:bf:1d:3f:ec:f6:35:3c:92:8c:e6:67:a8:46:0c:
                    68:df:5a:31:d2:95:1c:97:58:7e:33:b2:d4:90:12:
                    bf:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:30:A6:A1:91:E1:5C:B9:45:1B:C2:16:D1:91:7C:FB:2D:7F:05:D1
            X509v3 Authority Key Identifier:
                keyid:E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:40:b0:12:4b:45:e5:58:7f:16:af:11:0a:72:77:ad:c4:fe:
         a8:34:36:c4:16:1b:61:ff:98:85:64:d7:7b:45:e4:a4:bd:f6:
         cd:ac:75:3f:cb:e1:31:55:3a:9a:96:d8:8d:8d:35:24:a8:75:
         fc:4f:de:a4:5d:eb:b9:7d:0b:68:c4:db:b9:2f:10:d2:70:0e:
         9d:f2:3a:16:53:87:7e:96:31:71:25:b5:f7:7e:27:44:6e:9c:
         1f:66:8e:8b:12:75:bb:6c:21:de:c2:43:04:4e:0e:5f:7a:e2:
         05:72:42:72:94:dd:93:d1:0f:ea:ce:9c:9b:d5:ad:ba:8f:5d:
         ec:7a:c9:f0:d4:e7:42:ce:e3:38:35:61:3f:27:d5:a3:3d:20:
         dd:f3:63:c6:6b:2c:cd:c9:05:fd:77:6b:d9:ad:f2:09:10:ae:
         af:f7:ed:e4:9e:99:15:89:42:3a:b1:96:76:ea:40:36:c8:b1:
         02:2e:88:b2:1d:ae:3e:91:7e:ca:2a:35:2a:ea:e7:f3:47:4f:
         b9:e2:89:6b:3c:b2:b2:32:9b:4f:2f:72:f7:da:be:1e:23:8e:
         d2:21:57:11:d0:73:00:0b:b9:36:47:d0:0f:cd:88:b1:66:44:
         f3:0d:9f:c5:a1:04:42:1d:27:55:12:56:38:70:c4:02:12:56:
         8d:b0:22:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:06:53 2025 by rpki-client