Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft
File:                     6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft (raw, json)
Hash identifier:          5y/WZ0L8j0X2BN8tXU0cil5Sqmzb1PWL33Khk9bvJCo=
Subject key identifier:   0D:E2:0C:AC:03:E3:04:57:BE:0A:AB:F8:53:72:46:A8:03:F6:6F:B1
Authority key identifier: E8:7C:C6:80:C8:59:83:E7:BF:74:49:8D:0E:6B:E8:00:F8:64:51:C3
Certificate issuer:       /CN=e87cc680c85983e7bf74498d0e6be800f86451c3
Certificate serial:       0197C614F99E90BD20602F713D46BF5D042E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft
Manifest number:          10E9
Signing time:             Tue 01 Jul 2025 13:02:32 +0000
Manifest this update:     Tue 01 Jul 2025 13:02:32 +0000
Manifest next update:     Wed 02 Jul 2025 13:02:32 +0000
Files and hashes:         1: 6HzGgMhZg-e_dEmNDmvoAPhkUcM.crl (hash: +WfUI1P6tyZ/jTY7Ben5GK4KYpaBbIlk9SuFMvyXuEg=)
                          2: RV1OCO6rVYRRtTkZ3woaRdBKO6E.roa (hash: SuF4hxdu7ICIMIbu+gsmbKlo3zzUrtsEXjzwrCv9yIk=)
                          3: fbyo7xw7OVQjt-Z_risAcNBtcH8.roa (hash: QFqUQxFJMJ/HRIgpyInlcTMTKwfoUJaISjB36SzyexU=)
                          4: lxoRTf-wo4YOlgiYkmNsq_STsOo.roa (hash: TqDSPnCDTrr4iXHUBYL0fqJjIVOuIkCFrz5kt7VpmEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c6:14:f9:9e:90:bd:20:60:2f:71:3d:46:bf:5d:04:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e87cc680c85983e7bf74498d0e6be800f86451c3
        Validity
            Not Before: Jul  1 13:02:32 2025 GMT
            Not After : Jul  2 13:02:32 2025 GMT
        Subject: CN=0de20cac03e30457be0aabf8537246a803f66fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:53:a7:df:68:ff:31:d4:4d:5c:e0:15:8b:58:
                    89:44:78:31:bc:8a:0f:cd:e2:1c:f6:ba:8e:9e:57:
                    0b:4b:68:60:d5:06:fb:d1:0a:41:3e:8b:b5:6e:22:
                    d3:a2:08:4d:43:3e:a8:e6:61:13:ce:83:4b:59:15:
                    e7:8b:e1:c3:0f:12:58:2e:70:95:ab:a2:67:06:20:
                    f8:61:cf:6f:22:59:82:33:5a:5d:91:99:36:fe:17:
                    bd:b6:06:11:c4:b1:ec:ba:36:10:2f:57:4d:d1:85:
                    f1:0a:d4:76:18:64:85:0e:30:2a:aa:70:cf:7e:7f:
                    23:1e:f4:57:66:17:a0:5c:f2:4d:e7:0b:a4:c9:e8:
                    86:53:b9:bf:d9:f5:02:72:48:77:2f:c4:fe:a6:0e:
                    ce:25:4a:0c:58:6f:de:ec:ac:ee:c1:97:8c:1e:ef:
                    90:f2:3b:78:be:4f:63:c2:a5:c2:86:b8:7d:ae:9d:
                    d9:e4:10:a9:81:1a:d0:a3:73:5a:7d:f7:d5:0f:c3:
                    70:4a:0f:f9:7a:6c:31:75:90:15:3f:e9:1f:90:e2:
                    a8:43:3c:6e:ae:5e:c8:bf:59:eb:ec:2b:ee:22:50:
                    a9:b6:9d:4e:52:0e:15:00:d8:2f:a0:d1:d3:06:a7:
                    6f:73:d4:6d:01:3b:7d:ec:df:d8:d9:45:36:a7:32:
                    60:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E2:0C:AC:03:E3:04:57:BE:0A:AB:F8:53:72:46:A8:03:F6:6F:B1
            X509v3 Authority Key Identifier:
                keyid:E8:7C:C6:80:C8:59:83:E7:BF:74:49:8D:0E:6B:E8:00:F8:64:51:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:5f:af:62:c0:a3:cc:ea:d9:22:1d:a1:cf:b3:3e:8a:e9:5d:
         33:28:25:97:1b:05:e3:96:f8:a2:44:25:dd:b1:11:52:bf:4a:
         6b:ce:89:83:88:ed:26:7b:f9:e8:d4:46:f3:82:c3:16:27:b4:
         2a:bf:ca:e2:7c:24:65:9e:77:bd:3e:5e:f8:71:37:ea:1f:16:
         92:b2:3c:2d:d8:b9:8f:7c:8a:ee:1c:c7:d7:64:f0:96:2e:7c:
         63:ae:e1:ef:59:b2:07:1f:33:8f:af:8f:79:d1:03:c0:bd:46:
         f7:19:ad:4e:d4:67:e0:89:fa:e3:c3:96:5c:11:41:d7:95:6e:
         a2:f7:4b:01:f2:36:de:b6:4b:af:36:ee:38:2d:37:12:a0:18:
         a5:da:8f:18:47:d7:9b:6c:92:19:38:a7:c3:f7:f5:d2:0a:6c:
         87:bc:62:8a:9b:46:06:27:02:b9:db:c2:dc:29:75:d6:d3:96:
         ae:37:ed:64:e7:44:d4:62:da:df:27:d9:1a:e1:2c:29:9e:74:
         94:1e:e0:6e:71:89:f3:2f:a8:86:0a:fe:dd:1e:a0:58:f8:9b:
         ed:87:f8:0d:db:d0:76:76:bf:15:72:dc:9f:93:d1:01:86:fb:
         6f:b7:86:c3:3d:5f:0f:c3:34:f7:0b:22:31:67:9f:8b:24:2b:
         2d:cf:41:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:26:57 2025 by rpki-client