Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
File:                     6Zam_9rVzrJiZhe9btnE7FcdDzo.mft (raw, json)
Hash identifier:          OwsFHFKgKswRb9I6nVl9qYUy7fwotLK3NqUXsS7nMV8=
Subject key identifier:   DD:3D:AA:B1:DE:80:75:A5:C5:46:3C:C2:60:5A:58:22:6F:7F:18:20
Authority key identifier: E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A
Certificate issuer:       /CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
Certificate serial:       0196760D0AF83E2271787B0A7CFF29BF8CD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
Manifest number:          0F0A
Signing time:             Sun 27 Apr 2025 07:01:28 +0000
Manifest this update:     Sun 27 Apr 2025 07:01:28 +0000
Manifest next update:     Mon 28 Apr 2025 07:01:28 +0000
Files and hashes:         1: 0DP07uLmhCaYUKz4-De4vVyiQvU.roa (hash: tLlgxWvlov28mbUFOnnNCCYCPUkvTsTiijysrOZYrbM=)
                          2: 6Zam_9rVzrJiZhe9btnE7FcdDzo.crl (hash: VECIL3vqZ16SBKHKvkoU1oVEmqWrtQJrXKjknvPfnAE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0d:0a:f8:3e:22:71:78:7b:0a:7c:ff:29:bf:8c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
        Validity
            Not Before: Apr 27 07:01:28 2025 GMT
            Not After : Apr 28 07:01:28 2025 GMT
        Subject: CN=dd3daab1de8075a5c5463cc2605a58226f7f1820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:84:64:45:1e:33:16:c8:4b:64:1c:59:dd:c6:
                    85:e0:63:20:63:fc:e4:71:5f:00:c4:91:e9:e3:81:
                    bb:60:4a:fd:ac:fa:26:5a:d1:f9:ac:bc:50:8e:fe:
                    31:2f:8e:6c:cb:c8:36:4a:98:66:8c:21:16:ec:59:
                    cf:44:bb:06:70:f5:e1:a9:53:87:20:a9:62:eb:b4:
                    d0:b9:cd:8e:b3:cc:20:ab:61:6f:13:94:c8:80:42:
                    f2:7e:2c:cb:b0:3a:a7:a4:63:11:a4:5b:73:73:8c:
                    1d:23:ca:53:5f:6a:7a:33:84:1b:1a:fd:2d:b5:a9:
                    2d:3c:da:ff:1e:de:53:f5:79:69:b5:15:ca:83:98:
                    c7:d5:1b:8d:cb:13:50:83:7a:34:44:b0:b6:43:c4:
                    2c:a9:aa:dd:c2:c8:59:58:86:17:58:98:2c:c7:bc:
                    1f:cc:30:64:13:83:99:22:67:02:68:4e:7a:54:e0:
                    b9:2f:43:7c:dc:1c:d7:5a:92:d1:d2:78:6e:84:4a:
                    f7:23:b9:10:f8:6c:01:4f:da:11:9b:d5:4f:69:93:
                    3d:de:ba:26:14:be:0d:ee:70:74:a0:c5:00:76:32:
                    98:c9:66:0e:02:f9:82:5e:fd:69:a5:4c:31:58:fb:
                    ca:d1:06:76:65:ac:ab:d4:da:3b:60:50:96:33:69:
                    9b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3D:AA:B1:DE:80:75:A5:C5:46:3C:C2:60:5A:58:22:6F:7F:18:20
            X509v3 Authority Key Identifier:
                keyid:E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f7:57:75:59:a0:a6:68:f8:cf:22:ee:43:46:a9:ee:6d:28:
         ed:35:05:e8:b4:ec:a5:66:48:95:5a:3a:54:17:39:cc:38:61:
         9a:e4:42:cf:fb:7e:4c:2a:ba:53:4d:5e:f8:49:1a:95:d6:3b:
         23:9c:66:fd:47:43:65:47:c5:15:f1:8f:c6:14:65:37:fc:3d:
         c7:82:1d:1e:25:fa:3f:68:0d:13:de:db:3d:b1:1c:a3:2d:45:
         77:fa:47:af:0a:f6:b8:c6:ce:c8:db:df:e5:86:f6:d2:ab:0c:
         44:e4:16:62:c3:54:b5:69:9e:74:44:c2:9c:d4:21:83:3b:5c:
         3f:6f:6d:d9:f3:0e:1f:22:04:51:26:b8:5a:a1:13:22:70:29:
         96:71:e7:d2:93:4e:2c:61:b4:bf:fd:aa:31:82:9b:34:7f:d5:
         20:b3:12:72:f0:b7:b9:53:86:10:1b:ab:39:86:d1:a5:5e:4f:
         08:43:fa:16:2f:0a:84:1d:c0:e4:1d:6d:e6:62:ba:dc:55:b3:
         08:7b:d3:d2:d5:98:89:80:d6:ab:09:a8:50:d6:3b:5a:81:ad:
         d3:8e:1b:ff:39:f8:20:cf:ba:a6:f4:4a:21:34:72:db:af:0d:
         fa:26:d9:a8:c8:c1:02:92:00:84:c2:81:53:eb:c6:aa:55:59:
         a6:26:dc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:27:31 2025 by rpki-client