Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
File:                     6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft (raw, json)
Hash identifier:          SOSsh2dt0bU67h5zsJ960n5OqExu3VlBEEkyaL6/0z8=
Subject key identifier:   9A:C6:02:33:47:5C:48:5C:7B:25:4F:63:FA:9F:72:5F:72:BE:F7:AD
Authority key identifier: E8:72:44:89:7C:79:17:B7:91:E1:00:D4:68:03:39:C4:A3:59:3F:C3
Certificate issuer:       /CN=e87244897c7917b791e100d4680339c4a3593fc3
Certificate serial:       0196C04A96D1B95EDFBFB595B33C320C2601
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
Manifest number:          1533
Signing time:             Sun 11 May 2025 17:00:35 +0000
Manifest this update:     Sun 11 May 2025 17:00:35 +0000
Manifest next update:     Mon 12 May 2025 17:00:35 +0000
Files and hashes:         1: 6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl (hash: bZuKxrqxl/FCEx5zIrAOyHQgDhspfSnLqr7HDUjFX+0=)
                          2: bnk0ln2aj6MfWOT6o9kQMXhL3ow.roa (hash: nUC34YHIv92VX7i6tmE4A0fGDBK2kzWYfNC+d/UuSnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:4a:96:d1:b9:5e:df:bf:b5:95:b3:3c:32:0c:26:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e87244897c7917b791e100d4680339c4a3593fc3
        Validity
            Not Before: May 11 17:00:35 2025 GMT
            Not After : May 12 17:00:35 2025 GMT
        Subject: CN=9ac60233475c485c7b254f63fa9f725f72bef7ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ad:8a:c0:71:8f:c0:e6:25:fb:36:5c:68:ab:
                    5d:85:0f:85:37:6a:02:9f:de:9c:3e:2b:c4:f5:15:
                    d6:06:13:64:ee:8d:ac:e7:a0:ff:bf:40:83:52:b8:
                    52:97:44:d6:fa:03:28:f7:bc:64:b0:2e:d8:0b:91:
                    01:3f:6a:28:48:89:26:6b:af:70:fc:ce:bc:d4:84:
                    39:8e:a2:37:2a:74:79:96:b8:15:e7:a2:d0:64:80:
                    6a:f4:52:38:bc:b6:73:95:46:77:81:72:bb:d0:33:
                    d5:25:35:82:ef:a1:3c:5f:75:a3:d8:2c:f8:f9:a7:
                    6a:da:8a:6e:75:84:be:ac:46:0c:0f:85:ec:ae:0c:
                    b8:de:29:f6:00:50:02:c6:31:02:9b:b5:04:dc:31:
                    0c:9e:cc:c7:7e:e7:8f:a7:50:27:58:4a:0f:2f:b8:
                    ca:ad:93:3a:2b:f2:72:c5:c3:8b:16:ff:f3:ea:da:
                    7d:f3:5f:20:cf:c7:66:3d:c9:61:33:5e:e7:d0:27:
                    c2:6f:84:e7:25:c3:ff:9e:eb:3b:a0:89:8d:30:a2:
                    50:2f:55:8b:64:ef:9e:a3:eb:0a:52:95:d9:67:37:
                    c9:91:e2:cd:c5:99:92:09:10:de:c7:1f:bd:d9:cb:
                    72:4e:66:cb:e1:4d:4e:87:26:f0:a4:70:e9:86:27:
                    ee:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C6:02:33:47:5C:48:5C:7B:25:4F:63:FA:9F:72:5F:72:BE:F7:AD
            X509v3 Authority Key Identifier:
                keyid:E8:72:44:89:7C:79:17:B7:91:E1:00:D4:68:03:39:C4:A3:59:3F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:82:a4:04:74:e8:ea:74:52:2b:de:b9:66:74:2b:7e:93:0c:
         92:14:f4:e3:75:95:5b:05:78:cd:58:c9:44:75:52:6d:0f:a4:
         db:46:b5:d7:ef:cd:23:35:cf:46:98:00:4c:34:5f:a1:19:85:
         bc:a6:94:49:91:f6:40:60:63:30:9b:d3:94:a5:33:cc:b2:49:
         6b:0b:a0:57:84:ca:3d:d9:e4:c6:6f:1b:55:2b:c4:72:92:41:
         61:19:50:51:24:5a:23:c0:40:67:61:d7:77:d5:14:74:ad:ce:
         4d:26:a8:db:f7:16:3b:f6:94:56:90:a9:a4:7d:8b:ed:29:2f:
         4c:71:ed:ef:f0:70:44:47:36:d1:15:05:a8:ab:f0:40:00:cb:
         7b:07:19:f6:22:e1:98:1e:ac:f2:2e:fd:53:94:e9:05:4d:d3:
         68:72:e6:9a:0f:c9:c6:7f:53:a8:97:44:85:1c:06:46:3c:4c:
         66:96:95:cf:31:64:36:f7:36:2c:56:8f:1d:23:e6:e0:97:29:
         1f:38:b6:04:06:0f:38:7f:4a:b4:6a:8c:4e:a5:7d:6e:e8:5d:
         ec:59:6a:88:63:51:cf:c1:39:11:a9:18:5d:9d:cc:2a:27:ff:
         36:53:e2:34:ac:ac:a1:13:0f:3e:0c:af:3f:1e:d8:44:24:7f:
         60:af:81:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:28:42 2025 by rpki-client