Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
File:                     6MC119fK9-9NNVXA2Q6V17-G5gY.mft (raw, json)
Hash identifier:          JB50fFftLa+/m8PLsn9kT2uRhlGWIvGiwcWTzq8IxXI=
Subject key identifier:   F3:32:A4:B1:03:37:91:B1:EE:3C:96:54:69:2E:D5:37:F4:62:8A:96
Authority key identifier: E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06
Certificate issuer:       /CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606
Certificate serial:       01976C61B53C5E343A320BF95CCF24C8794C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
Manifest number:          040F
Signing time:             Sat 14 Jun 2025 03:00:32 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:32 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:32 +0000
Files and hashes:         1: 6MC119fK9-9NNVXA2Q6V17-G5gY.crl (hash: ROh+zpDbkt9dI/+wTVmAB/gxTI4c103ozpo/SnJGhG0=)
                          2: zLqJ2jk1gnb1U6_xEyeO1kXar2w.roa (hash: f9xXsOCbyfrGDmPeAHiz1i2Ip8aFRkb7BmV8Krt70eA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:61:b5:3c:5e:34:3a:32:0b:f9:5c:cf:24:c8:79:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606
        Validity
            Not Before: Jun 14 03:00:32 2025 GMT
            Not After : Jun 15 03:00:32 2025 GMT
        Subject: CN=f332a4b1033791b1ee3c9654692ed537f4628a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5a:ad:d1:2b:2b:2e:03:b2:a4:59:1b:eb:e8:
                    1c:7b:8a:3f:da:52:f5:3d:32:40:21:01:25:e8:23:
                    8c:e6:cb:9c:7a:2d:a0:e0:4e:51:ac:21:f8:0d:74:
                    82:20:37:15:f3:6a:d2:3e:ef:55:dd:73:63:21:c7:
                    15:0d:7a:e3:33:5a:9b:26:4f:eb:07:b4:a3:05:89:
                    6b:0c:71:ee:c9:d9:8e:89:fe:a7:cb:17:4d:85:1a:
                    2f:72:b7:d7:78:32:69:40:d7:8a:e0:14:f4:56:f9:
                    60:ab:d1:71:29:34:93:0e:0d:63:d5:93:ba:ff:dd:
                    6d:07:64:fa:a1:26:7d:04:6a:71:b9:32:24:ae:74:
                    e6:a4:04:a5:b8:f2:50:fb:e9:28:f4:c0:73:1f:1c:
                    5d:d1:55:44:7f:82:06:77:73:aa:64:51:57:a3:0e:
                    90:6e:44:67:c3:2f:05:79:ef:1b:46:9e:35:6a:c5:
                    57:27:e1:e1:f2:40:f4:32:68:54:35:d3:51:61:7b:
                    33:87:8a:3f:80:2f:2f:6e:72:19:fc:ec:6c:92:d8:
                    e5:ac:bb:bb:f2:64:e5:cd:b0:92:c7:b2:51:97:c8:
                    a0:d9:34:bb:4e:ed:8c:b3:78:91:69:2f:b9:ab:c1:
                    bb:38:95:40:63:75:ee:3f:eb:89:6f:8e:72:b5:ce:
                    5b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:32:A4:B1:03:37:91:B1:EE:3C:96:54:69:2E:D5:37:F4:62:8A:96
            X509v3 Authority Key Identifier:
                keyid:E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b9:1f:3e:c8:11:4a:7f:8e:ce:32:d9:42:83:d2:2e:ca:7a:
         31:84:76:99:91:39:58:31:1e:2f:6a:40:d8:2a:c5:5f:68:52:
         7d:47:69:79:e9:19:87:fa:12:71:2e:4d:76:cf:24:ca:00:c3:
         a2:65:75:47:aa:56:08:73:8b:92:83:23:fb:4f:db:3e:f8:ee:
         8a:a0:7b:aa:73:73:a4:9c:73:3f:2d:d2:00:f7:f0:53:58:9e:
         b2:f6:ab:51:55:23:6d:fa:a2:49:64:5d:36:29:ee:59:f0:8f:
         d1:88:c6:a9:6d:ce:99:d5:c6:60:74:c1:95:e6:01:91:0a:01:
         71:05:dc:00:df:55:52:70:6e:ed:2e:cd:12:2f:81:3b:61:0a:
         40:28:2a:b5:43:e6:24:a6:42:44:24:96:71:55:64:bc:1b:9b:
         b2:ad:55:be:ac:62:e5:77:22:74:02:47:e0:ae:39:bc:f9:f9:
         97:71:ea:57:7e:fe:4e:bb:68:7d:e1:8e:1a:71:45:43:da:95:
         f4:b9:2f:1e:9e:03:43:36:ef:3c:0e:18:2b:e0:22:6a:b2:24:
         70:35:95:2e:2f:60:66:32:b7:e7:dd:b0:c4:27:cd:e4:4b:0e:
         12:5d:91:e5:05:cb:71:7b:52:e4:5b:a9:7e:5a:f6:9c:78:95:
         01:8f:6d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:57:21 2025 by rpki-client