Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
File:                     6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft (raw, json)
Hash identifier:          o5CvE0gfFkuaiQc/jc7zM+nFrRGGQmeiA4qcs3OMqX8=
Subject key identifier:   B6:DE:98:F7:5C:8C:28:95:8B:5E:84:6A:C9:21:86:A9:BB:B8:62:30
Authority key identifier: EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
Certificate issuer:       /CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Certificate serial:       0196AC1EB24CA58D274086A85C985DAE8136
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
Manifest number:          152B
Signing time:             Wed 07 May 2025 19:00:14 +0000
Manifest this update:     Wed 07 May 2025 19:00:14 +0000
Manifest next update:     Thu 08 May 2025 19:00:14 +0000
Files and hashes:         1: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl (hash: hx0aBw/yX6NTGVcfzoi97uopBhF0l51bk6EMLZSs9UY=)
                          2: zLngmWEw_D0Bxeb-kcPWwP9gp_U.roa (hash: Sf54rTElSlunUVvFtUXJDy0FrQ/XeLhMeCRG3/nN1oE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 19:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:1e:b2:4c:a5:8d:27:40:86:a8:5c:98:5d:ae:81:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea51769ce8672c56d1652bf90a5aefca819b488a
        Validity
            Not Before: May  7 19:00:14 2025 GMT
            Not After : May  8 19:00:14 2025 GMT
        Subject: CN=b6de98f75c8c28958b5e846ac92186a9bbb86230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:32:0d:bf:c4:56:bc:59:be:ea:9e:49:d2:25:
                    98:cb:88:a6:4a:7d:41:31:c4:7a:1b:3e:36:36:bc:
                    da:bb:dd:5a:50:b7:3d:73:5f:b4:44:11:a5:eb:c8:
                    01:c1:78:54:a8:07:e9:14:82:b5:02:7f:80:83:c5:
                    ef:92:bb:24:6d:1f:f3:1a:4e:3d:d9:a0:aa:63:b0:
                    ac:d9:d3:77:fe:e5:ad:a5:2e:ee:45:32:ea:cb:ec:
                    c9:da:90:e2:20:c2:05:b6:49:4c:c7:63:a0:c2:20:
                    29:7d:99:13:61:ea:c2:66:c4:16:63:0e:bd:45:91:
                    35:8f:ff:2d:ce:3e:55:73:95:7c:3a:a5:5b:a3:39:
                    92:83:7a:91:ad:20:4c:97:ca:3d:95:9b:cf:a2:5a:
                    c7:40:19:ed:fc:d2:bc:37:1d:68:c3:6f:44:f4:97:
                    f9:27:c2:81:05:bd:f1:38:cc:6c:8c:98:7d:83:c3:
                    6b:5a:6d:ac:69:21:98:b9:35:24:e1:4c:44:e6:1f:
                    42:0a:77:4c:47:40:6d:c1:10:69:bb:46:2f:1d:69:
                    12:56:ae:2b:25:b4:c6:7b:35:c7:04:bf:54:1c:3d:
                    56:1a:e9:7c:87:6d:9b:aa:9b:1d:cd:e4:2c:6b:af:
                    cd:5a:7a:0c:05:e8:07:b7:0f:c1:29:5e:20:92:40:
                    4b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DE:98:F7:5C:8C:28:95:8B:5E:84:6A:C9:21:86:A9:BB:B8:62:30
            X509v3 Authority Key Identifier:
                keyid:EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ec:d5:89:a8:5c:19:10:08:2d:66:a9:89:94:07:b9:03:1d:
         22:69:a9:c7:df:dc:b5:a8:5c:5c:4a:fe:0e:7c:c9:e4:1a:b7:
         f5:21:5a:d8:01:df:17:7b:29:a4:cb:57:bc:a8:ff:98:2e:72:
         ea:e5:6f:5a:23:77:33:42:0b:40:1d:48:13:85:40:1c:84:aa:
         ca:0a:17:22:75:9a:4a:b8:83:2f:f2:db:f2:7a:45:2d:db:75:
         1a:9a:75:0d:1c:48:58:61:de:a4:0e:16:58:28:ea:08:2e:07:
         1a:b8:cb:a8:90:d2:c4:27:3a:72:80:d1:83:a7:66:61:bd:8d:
         98:18:3b:ac:7c:d5:89:78:27:bd:fa:37:ee:54:c5:a3:9d:24:
         98:05:c4:95:bf:02:59:5f:09:4f:ac:74:e8:84:b1:9e:67:19:
         79:cc:57:7f:5a:6c:6e:24:04:ec:aa:08:71:42:b3:8d:17:1d:
         dd:44:a9:81:d7:b5:bb:1e:e9:48:c3:a0:fe:f1:d6:14:24:d1:
         8c:11:19:45:89:2c:6a:20:14:4c:ee:f6:e3:8f:69:2d:07:6f:
         a2:6c:2f:09:dd:72:a4:e2:ee:8c:a7:a9:b4:8f:a0:27:af:a1:
         b6:93:56:ed:9f:3b:e9:99:ee:8e:c5:f6:89:d0:dc:7b:d9:13:
         c0:50:41:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 01:16:52 2025 by rpki-client