Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
File:                     6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft (raw, json)
Hash identifier:          Ve/GSbM2pfnpguDlfsDRt8J7hAn+uE1aaBXenzVt2UQ=
Subject key identifier:   C8:A6:6D:D4:BE:21:EA:D6:52:96:8E:D7:8D:45:EB:47:05:ED:21:BB
Authority key identifier: E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24
Certificate issuer:       /CN=e847e88749704294552fef54886111ed0586ec24
Certificate serial:       01969227F6D4DAC3885C2FFEAD21CAD19411
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
Manifest number:          02AD
Signing time:             Fri 02 May 2025 18:00:14 +0000
Manifest this update:     Fri 02 May 2025 18:00:14 +0000
Manifest next update:     Sat 03 May 2025 18:00:14 +0000
Files and hashes:         1: 6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl (hash: Hq3Ovux+o+9k98Ru43UFCaX2ku5NtckQWfJGaMzrWD0=)
                          2: fcrIgsFTuq19FBKqvOpJqv38n8M.roa (hash: NL7GdVXSlx1fCyZ9yJikitlzZCSr51QpP5vN2zoZyfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:92:27:f6:d4:da:c3:88:5c:2f:fe:ad:21:ca:d1:94:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e847e88749704294552fef54886111ed0586ec24
        Validity
            Not Before: May  2 18:00:14 2025 GMT
            Not After : May  3 18:00:14 2025 GMT
        Subject: CN=c8a66dd4be21ead652968ed78d45eb4705ed21bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5c:84:64:cf:dc:c0:5b:16:1f:3e:a7:bf:8c:
                    22:b1:be:1f:7d:0f:14:0f:a7:26:cb:db:16:04:c1:
                    4b:1d:b3:3c:f9:fe:5f:16:be:0e:ca:de:c5:84:0a:
                    54:a6:e8:a0:26:4e:ea:12:e8:64:89:93:6f:69:d2:
                    1f:93:e9:59:a6:c1:ba:2d:83:b8:df:f2:bf:ed:4c:
                    ee:dc:fb:55:95:ae:3b:60:26:b2:f2:66:e8:1a:62:
                    99:8f:a5:4a:96:3e:47:26:4d:bc:ab:37:fa:21:12:
                    bc:3b:fc:dc:f1:03:83:77:92:90:0b:cd:bd:0e:ac:
                    57:b8:20:21:04:fb:1c:9a:1a:95:a6:1c:39:9e:c6:
                    60:aa:41:fd:ba:f8:ae:ea:48:d6:f8:33:83:bb:c0:
                    bc:13:64:b1:bc:52:de:1e:61:3a:47:e5:b5:6c:e4:
                    39:55:7b:fe:cb:3b:50:9f:8a:fa:57:ab:56:fa:e9:
                    11:e9:57:ae:c9:ef:91:21:14:80:3e:e7:62:b4:78:
                    c9:22:77:6f:ce:d8:64:ee:58:d7:32:f8:25:55:11:
                    69:88:75:fd:18:32:a0:ce:ab:24:e8:5a:be:5e:ab:
                    e9:43:9d:86:1a:01:e9:18:b2:78:89:77:3c:47:d6:
                    cf:42:ca:c1:64:91:23:57:b6:46:df:5b:93:26:3e:
                    15:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A6:6D:D4:BE:21:EA:D6:52:96:8E:D7:8D:45:EB:47:05:ED:21:BB
            X509v3 Authority Key Identifier:
                keyid:E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:9a:4a:c1:39:b4:51:c4:42:63:3f:d0:b9:70:ce:c1:0e:56:
         8e:68:ee:44:e2:a6:3c:63:e5:00:43:0b:75:f5:bd:4c:b0:c0:
         d5:f0:ba:11:a1:94:8a:8b:4e:f2:ea:62:77:c4:e7:2d:64:30:
         e0:27:5a:4c:15:8f:99:ea:00:e3:12:53:8d:96:1d:9a:f0:1b:
         f9:c3:1b:07:ee:11:4f:05:88:7d:83:8d:99:6b:c5:2e:6e:a0:
         5b:cc:52:54:30:7d:f0:d8:2f:23:f0:14:dc:2c:e2:53:7a:3e:
         bf:c3:59:32:21:c1:45:18:ee:63:7e:2b:db:32:50:83:ba:1b:
         69:30:b1:cb:58:cc:85:11:2c:e5:a3:a8:3a:fb:d0:8b:a2:5f:
         d1:e3:7c:ea:d3:d8:5f:ba:44:b1:c5:99:b2:e7:fd:c3:81:9a:
         ac:bd:54:60:ee:26:e7:32:09:c4:d4:73:17:a9:50:37:e4:63:
         5d:41:de:01:f3:8a:2d:1e:4a:b2:67:2c:1f:58:68:4c:91:5c:
         70:e6:b4:d0:e5:a3:f0:7c:e8:36:7d:78:fe:a8:07:3a:8f:e7:
         a3:15:55:91:b0:c3:60:83:33:4c:b7:43:48:eb:d0:ff:d5:5c:
         be:41:1f:0c:06:39:01:6d:87:c0:80:ee:1c:e1:b3:88:53:58:
         74:35:c6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:24:27 2025 by rpki-client