Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
File:                     6MvUwjBi1pU3-y6Kisy_sCfytSU.mft (raw, json)
Hash identifier:          8zOYzwbDetP/APEgH6ku34KnUj5HZ12cq7AFQcN2TpA=
Subject key identifier:   9C:E3:A2:09:01:B9:A1:C0:1D:79:64:D6:5E:D2:B5:70:5C:93:BA:60
Authority key identifier: E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25
Certificate issuer:       /CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525
Certificate serial:       0196BCDBF71F47B2F995C4B6467A7A417222
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
Manifest number:          0A8E
Signing time:             Sun 11 May 2025 01:00:54 +0000
Manifest this update:     Sun 11 May 2025 01:00:54 +0000
Manifest next update:     Mon 12 May 2025 01:00:54 +0000
Files and hashes:         1: 6MvUwjBi1pU3-y6Kisy_sCfytSU.crl (hash: hYNY23awezg3XAZMxepEeEwAdIyI4QYy/ZuyrkFx+dc=)
                          2: zzTnnwQkHzs_ElQNqigVL1ArRdQ.roa (hash: us40hEG1NcVWjJDpzrMVHHjC6ox4uAMOwbjwuL6+2HM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 01:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:db:f7:1f:47:b2:f9:95:c4:b6:46:7a:7a:41:72:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525
        Validity
            Not Before: May 11 01:00:54 2025 GMT
            Not After : May 12 01:00:54 2025 GMT
        Subject: CN=9ce3a20901b9a1c01d7964d65ed2b5705c93ba60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:96:8c:66:06:a7:99:dc:24:4f:18:d5:07:5d:
                    9f:dd:ed:c5:f5:0c:64:f8:b1:f7:0f:48:09:38:3f:
                    ba:ad:04:99:f1:fe:91:5f:da:c0:d6:67:74:d4:88:
                    60:f3:be:67:cb:22:18:47:22:73:f5:ac:10:90:8a:
                    b4:22:38:cc:1c:b3:fc:5a:77:93:29:71:a5:ef:32:
                    12:c8:45:bc:69:1e:30:80:d6:3c:95:f1:19:7e:2c:
                    55:fc:c0:43:a2:ca:52:6b:64:61:96:84:3e:bb:06:
                    05:83:33:e3:77:d8:06:9a:e7:2b:9f:04:32:20:c4:
                    ef:f1:b5:d3:e4:f6:b7:01:d6:a6:c8:38:7b:c6:bd:
                    de:71:aa:f0:8f:f8:51:68:11:06:6d:63:64:97:fd:
                    78:78:0f:75:2e:31:b7:66:28:07:34:22:db:4b:4a:
                    67:a0:c6:66:a9:44:af:3e:c5:1e:0f:e2:43:88:0a:
                    ea:c8:8d:97:c3:4c:03:ee:15:67:f0:e4:de:70:7a:
                    d4:be:5e:d0:c6:0a:df:af:6d:bd:91:14:27:aa:5c:
                    11:fb:87:9e:51:49:d9:7e:fc:52:85:1e:4a:99:8f:
                    20:c1:0e:a0:9f:0a:7a:e6:35:e9:07:2b:2f:31:fb:
                    c8:f9:54:42:4f:14:8b:30:78:b0:a5:53:be:83:56:
                    f2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E3:A2:09:01:B9:A1:C0:1D:79:64:D6:5E:D2:B5:70:5C:93:BA:60
            X509v3 Authority Key Identifier:
                keyid:E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:3f:d9:10:f7:10:fb:34:ec:82:49:83:f7:33:32:91:22:ad:
         a1:4e:68:22:6b:9c:59:62:51:c1:15:f9:93:bd:c6:32:e3:4b:
         41:4f:ef:64:87:28:1d:43:25:23:90:44:ec:b0:3d:f4:6e:ae:
         e0:04:76:88:b1:11:80:7d:e4:1e:2a:9b:eb:3c:6d:fa:11:84:
         e8:ee:d2:76:38:71:15:91:79:44:0a:20:4e:a2:a3:2f:24:fc:
         a1:16:00:6d:66:a1:f6:13:8f:74:b4:6b:c1:42:05:71:65:c7:
         16:16:77:15:66:d1:b1:fb:a6:2e:f0:90:67:25:15:8e:9e:6c:
         3e:47:20:32:5c:9c:c5:30:c4:2a:da:82:62:b5:03:90:91:ef:
         d9:01:b7:c9:c0:09:cb:28:97:b5:11:ef:fc:ec:04:0d:19:c2:
         43:b5:e9:27:bf:8a:d6:ad:5b:7f:97:1a:f8:bc:00:0e:ec:71:
         03:5b:cf:11:ad:96:3d:82:5c:93:81:8a:a4:d4:ce:28:1c:b6:
         20:1d:f2:15:b5:12:f3:d2:d1:f2:fe:2e:06:5b:32:6e:63:10:
         c2:71:cb:95:9b:6c:42:7c:a6:29:1a:17:4b:81:7e:ed:48:ff:
         d9:02:44:a4:4b:ef:10:dc:40:16:84:ab:54:27:34:3c:12:74:
         c7:55:63:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:37:15 2025 by rpki-client