Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
File:                     6EpS3W883rR4C7KZj1AWYMybiP8.mft (raw, json)
Hash identifier:          rW/NfSASDnQSqkvHMAEz7I84zin9ok9Eu6iUfggfY5s=
Subject key identifier:   09:1B:76:2D:CF:0E:99:85:F3:CC:3F:07:04:BF:7E:08:79:82:19:1F
Authority key identifier: E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF
Certificate issuer:       /CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
Certificate serial:       019675D575ABCE2965A6D9558B305E5856F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
Manifest number:          0828
Signing time:             Sun 27 Apr 2025 06:00:45 +0000
Manifest this update:     Sun 27 Apr 2025 06:00:45 +0000
Manifest next update:     Mon 28 Apr 2025 06:00:45 +0000
Files and hashes:         1: 6EpS3W883rR4C7KZj1AWYMybiP8.crl (hash: JoZRyue7NZwA32JO4HzfxKhrhz8adEmDl7800ysjnNU=)
                          2: k-C92F5fBC7tzidpGResaRP_3Y8.roa (hash: cCgzC2CyBMRCMgCeDBY61Xy0TGv8/RtXgzQi7ffbn8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:d5:75:ab:ce:29:65:a6:d9:55:8b:30:5e:58:56:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
        Validity
            Not Before: Apr 27 06:00:45 2025 GMT
            Not After : Apr 28 06:00:45 2025 GMT
        Subject: CN=091b762dcf0e9985f3cc3f0704bf7e087982191f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e3:45:3d:68:d2:87:f6:86:29:14:c2:3f:2f:
                    ce:c3:7c:40:1e:5e:81:8a:2c:04:73:a4:b2:0b:2b:
                    48:02:4d:b1:5f:75:45:f4:4f:b6:52:71:c8:1f:50:
                    8b:b6:c1:17:1a:6b:ae:dd:1d:02:bf:eb:1c:15:39:
                    5c:e4:ad:27:26:a7:76:1b:38:f2:ab:d3:f3:ad:68:
                    af:f3:11:4e:86:7c:da:10:36:53:52:99:96:ae:2a:
                    17:99:84:2d:36:cd:4f:d9:b8:65:e7:1b:18:31:28:
                    88:46:76:cd:5b:8f:8d:71:5d:4b:ac:bc:17:90:7b:
                    38:47:64:fa:01:e7:1f:7b:96:d2:9c:a4:44:38:20:
                    70:77:8c:cb:6e:14:83:bc:40:0b:ea:56:9d:fc:8b:
                    72:de:01:ab:c7:c3:b9:8a:56:c4:36:b5:d4:f0:1b:
                    7e:02:0a:65:9a:cc:7b:29:fe:e4:4e:a8:c3:40:8a:
                    64:0d:7d:eb:96:f8:4a:dc:2d:03:d5:52:0d:53:be:
                    68:66:d4:42:9f:4d:7e:21:d4:67:44:f2:95:1b:56:
                    1f:2a:56:25:6c:68:3c:de:bf:2d:d1:a9:98:69:7f:
                    f1:05:46:1b:65:d2:96:6f:eb:1e:fa:10:a4:09:89:
                    29:93:b8:e4:a9:3c:6f:42:b6:d5:f8:bc:05:c3:e3:
                    8e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1B:76:2D:CF:0E:99:85:F3:CC:3F:07:04:BF:7E:08:79:82:19:1F
            X509v3 Authority Key Identifier:
                keyid:E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:39:3f:f5:c4:ef:89:ae:ee:d3:d5:1f:9c:11:ac:ab:8f:03:
         2b:c9:6a:2a:6c:d0:61:7d:87:04:ba:03:3f:44:e9:fb:54:05:
         8b:9a:cd:84:8a:98:ac:d9:50:67:c4:17:f3:cf:8a:f0:72:95:
         10:eb:07:34:d8:63:90:c4:33:f7:50:99:2f:d6:33:71:53:2b:
         e2:b2:4d:7b:f5:17:41:8e:1e:c0:ee:68:46:50:b1:28:df:b7:
         2c:61:18:31:c1:a0:af:93:13:3a:74:4d:46:6c:a4:d1:b3:ba:
         2c:ff:29:4c:b0:3f:49:10:f3:d2:d0:78:ed:a1:92:c6:60:6d:
         86:e7:e8:6c:21:08:15:fc:fa:39:0d:87:7f:ea:0b:e6:7e:67:
         57:67:3a:bc:dc:31:da:47:92:da:60:93:5d:8b:e8:63:89:6c:
         dd:5a:23:0b:8c:74:00:2a:ea:c2:8f:22:7c:c6:22:c8:01:91:
         b2:84:d9:de:7d:61:de:54:6b:27:60:2f:b3:41:13:f4:2c:03:
         ee:4f:77:cc:c5:f4:4f:26:c4:7c:79:53:d0:93:93:a2:36:06:
         98:61:c2:b4:0a:6d:45:e0:36:46:24:7c:3f:53:13:2a:bc:88:
         e6:22:17:dd:89:09:a5:53:8c:ab:eb:56:76:fa:29:37:df:08:
         28:ea:1b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:14:22 2025 by rpki-client