Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
File:                     6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft (raw, json)
Hash identifier:          8lYE5xCRVmXiP3sD2zJOqH32v5zAu29Kg4CwcqlUjEA=
Subject key identifier:   22:4A:E6:EF:FF:9F:54:3F:22:18:52:24:C1:34:2D:67:87:83:A0:2B
Authority key identifier: E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94
Certificate issuer:       /CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
Certificate serial:       019768F317922142EC45D92CC4BD6969FE8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
Manifest number:          1037
Signing time:             Fri 13 Jun 2025 11:00:51 +0000
Manifest this update:     Fri 13 Jun 2025 11:00:51 +0000
Manifest next update:     Sat 14 Jun 2025 11:00:51 +0000
Files and hashes:         1: 1-lHFpavrRPAxi2mxTPDKpLPcy14.roa (hash: 2r+qTZtO07hGXOIWN+DFEL0ZIWfOdC+x8G7I0hOMy20=)
                          2: 6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl (hash: 6oONKgx49WRvxji3RPekygWA2VrUPT+1KTeoOXwXdv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 11:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:f3:17:92:21:42:ec:45:d9:2c:c4:bd:69:69:fe:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
        Validity
            Not Before: Jun 13 11:00:51 2025 GMT
            Not After : Jun 14 11:00:51 2025 GMT
        Subject: CN=224ae6efff9f543f22185224c1342d678783a02b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:27:33:7b:1c:be:ca:20:a2:6b:67:50:60:25:
                    56:00:15:c8:de:7b:e5:c4:5f:f4:58:3a:d9:53:22:
                    33:a4:f9:c0:94:dd:83:45:72:e9:38:6d:37:ea:0e:
                    b9:64:75:d6:ae:e2:88:c2:75:6d:2a:d5:f4:2b:9f:
                    d5:78:ce:ec:e5:ed:64:f4:6a:3b:81:ac:3b:c0:8b:
                    71:3a:1b:e2:52:c3:d0:3d:d9:6c:eb:c6:d6:b4:ca:
                    c4:8a:2a:46:f1:ec:70:38:57:d6:fb:7d:dc:15:c8:
                    fb:fc:0e:9f:7a:4a:38:8c:03:e3:e0:8b:3d:22:88:
                    3f:82:d7:59:4d:76:d9:8b:24:6f:25:79:8d:c4:a4:
                    fb:65:e4:99:38:bd:ae:d9:1b:87:69:0c:be:43:5c:
                    43:7f:c2:9b:ce:f9:e2:66:41:c7:c2:11:d7:97:e8:
                    1c:e5:28:8b:51:b4:a4:ad:93:fd:5c:99:be:5d:44:
                    8e:de:c5:f9:0c:cc:ff:d9:d5:19:7c:f5:a0:d4:16:
                    60:ea:f8:23:a4:6e:1f:1d:38:2b:ca:ce:1f:6f:3c:
                    c2:15:8d:13:a9:cb:e0:0e:1c:62:25:3f:22:28:e3:
                    21:f1:66:9e:99:c6:fd:7d:0b:7b:d4:7e:48:87:f6:
                    59:e2:ba:78:ea:71:36:e3:04:52:76:09:9a:87:9b:
                    8b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4A:E6:EF:FF:9F:54:3F:22:18:52:24:C1:34:2D:67:87:83:A0:2B
            X509v3 Authority Key Identifier:
                keyid:E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:78:51:89:ec:d8:28:01:af:2f:bc:7e:6f:9f:9e:3e:4f:5b:
         4b:fc:73:7b:e2:1f:96:fe:00:bf:4e:e6:a1:f1:e4:17:98:02:
         e1:00:29:b2:d4:b5:c1:3f:b1:2c:03:a8:ae:c9:16:c2:47:c5:
         b8:bb:96:40:a7:9f:ea:62:5f:22:c6:e0:e1:42:bc:84:07:56:
         22:f2:4f:63:12:a5:f9:6a:46:e6:7e:88:be:79:01:6a:b7:7e:
         95:2c:fb:92:67:8d:b0:48:4d:1a:44:26:7f:59:a5:fb:e9:a5:
         df:2e:6d:d3:d4:c5:06:db:d7:54:50:c7:20:c3:de:0d:6d:6f:
         a9:20:83:b4:87:72:76:78:87:fc:8c:28:50:d3:96:9d:57:89:
         97:22:7e:74:25:0d:33:62:5e:84:3a:4d:04:0a:d3:6c:e4:91:
         a0:a1:c9:98:84:17:59:4b:da:13:40:24:d1:49:cd:94:82:df:
         50:40:32:fe:c4:33:cb:2a:f3:f8:c0:12:40:bc:cc:dd:9a:a7:
         90:5b:ef:83:58:b8:a4:9e:fa:ad:5f:38:48:c8:13:70:58:33:
         43:74:85:31:ac:ab:fe:0d:5d:64:5c:e0:bb:61:de:56:67:83:
         d2:fa:91:be:e8:5d:f0:8d:bd:e4:e2:9b:6c:1e:3f:04:f6:b7:
         22:ff:53:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:30:26 2025 by rpki-client