Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
File:                     6aqxRGEAqPzgPfGddV4GMp7iRxM.mft (raw, json)
Hash identifier:          2L3Tcb7m3wWIWoTGA7xCagHMNegdBO3jK6pT0siNiCg=
Subject key identifier:   3D:62:5F:F9:3F:18:B7:40:66:D7:FA:DF:15:88:C3:A0:FB:AB:3C:91
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Certificate issuer:       /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial:       019768BBF5852A6B97AE99F87CE1B3AF30A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
Manifest number:          1598
Signing time:             Fri 13 Jun 2025 10:00:37 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:37 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:37 +0000
Files and hashes:         1: 6aqxRGEAqPzgPfGddV4GMp7iRxM.crl (hash: AC8c8StBDH9nc6YuJ90WxOuArhxpIqrWmownsv2tXCw=)
                          2: QkQP_fe9Qbaw_h7Gyszbo7ypS-0.roa (hash: RFUIAsDNjezppynlHDg3Yb1GDBSbUKtltRoi+VjSqN8=)
                          3: fLRTTBlGuXvzenVsLXjVIru2ZhY.roa (hash: K+Pyp4HdZQZlYpDx7COlUM/X5sosLmMqlyaPbzQnWwQ=)
                          4: m3gXujpVCrLpKlGaZZVKGdX7bVs.roa (hash: uZ4Pf6R3TRRDYB1bD3rWYxiLeW6EkMyazvCn4ZXP57Q=)
                          5: mlsN5JNowac1d7ZpQD1BZ-DZoyI.roa (hash: 18rSoxMsfSZRIEFe2Gj+h7BjnwCeSt199DHvViicRCg=)
                          6: pqacqNCldBSnhIBD0D7GqNdirRA.roa (hash: wRFidqB3JkBPQf/uxHF54KwEhS5EFfyJb9MtlsfkioM=)
                          7: ql3I8l6cLh1Cnd-QRruZmhB8qY4.roa (hash: 0n2wtsItY6EXyYhZk/oculHNPoyTZ+0itali9el5fBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bb:f5:85:2a:6b:97:ae:99:f8:7c:e1:b3:af:30:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
        Validity
            Not Before: Jun 13 10:00:37 2025 GMT
            Not After : Jun 14 10:00:37 2025 GMT
        Subject: CN=3d625ff93f18b74066d7fadf1588c3a0fbab3c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:18:16:25:7a:2d:ae:0a:8c:31:c4:e8:67:24:
                    c2:f9:ba:96:6d:cb:fd:fa:38:11:96:3f:d6:89:d9:
                    52:f9:8a:25:04:45:b7:a6:ab:a9:46:74:49:f0:75:
                    dc:19:5f:27:30:1d:8c:5f:90:8d:e4:82:14:75:bf:
                    a0:37:0e:a3:3b:d8:5e:15:84:cc:37:af:0b:75:cd:
                    25:f5:dd:d8:b9:1c:3c:cd:4a:52:fb:02:01:4d:8f:
                    a4:14:e0:04:35:58:5c:7e:a3:7d:29:68:03:17:55:
                    22:3e:70:10:34:8f:69:cd:7d:fd:47:a8:9f:7c:40:
                    5d:fa:16:e7:59:15:40:8c:7a:54:fb:e3:7f:2a:6c:
                    f9:5a:11:4a:e9:66:85:d3:de:e7:3a:54:2c:61:c3:
                    77:65:01:8c:ce:65:5b:b4:5f:9c:6d:3b:62:11:d8:
                    dd:f7:f7:b4:52:f0:83:85:45:72:99:c8:e6:e9:b7:
                    df:b0:42:03:0e:56:ed:db:ba:48:ec:d6:1c:6e:80:
                    2b:7c:29:23:36:c5:36:bf:a4:f5:30:a0:35:90:fe:
                    41:4b:c7:40:22:90:16:46:09:4f:d9:f6:86:8f:5e:
                    f7:1b:d6:d4:9a:d6:2e:8c:5f:b5:ed:c8:95:6a:ca:
                    6c:98:22:a1:8e:8c:33:51:54:3c:51:82:0c:51:39:
                    eb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:62:5F:F9:3F:18:B7:40:66:D7:FA:DF:15:88:C3:A0:FB:AB:3C:91
            X509v3 Authority Key Identifier:
                keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:8f:e4:85:fa:61:49:43:18:bb:2a:3a:f0:87:9f:69:dc:d7:
         50:80:0a:1b:51:ce:26:a8:5c:ce:ec:08:a9:9d:f0:71:18:81:
         67:0e:c9:5c:93:f3:1d:5e:cb:bf:10:2c:fa:ec:c1:c4:1d:8e:
         45:dd:2f:26:f3:3d:af:bd:c1:cf:82:06:b7:48:b7:05:10:f5:
         17:5b:a9:78:a4:d8:be:c7:a1:ab:a1:fa:97:34:b3:f7:5d:59:
         45:40:cb:e4:ef:47:dc:3f:85:08:a8:98:17:d3:51:3d:87:df:
         8b:50:93:70:d7:d1:1a:f8:9a:d8:b3:cf:fd:71:37:50:0d:ba:
         a6:f5:d0:83:99:5a:0f:17:cb:a5:0b:3a:18:60:2f:a1:b6:5c:
         fc:04:aa:c4:c0:78:57:f3:8e:ce:fc:78:41:aa:72:e5:fd:b6:
         f1:fb:f1:72:24:77:64:40:b9:12:af:5f:ce:5a:61:07:d4:3b:
         0b:8c:8e:c7:e1:1c:31:38:31:85:68:45:95:70:e3:40:f9:12:
         21:5a:52:4f:f1:af:f1:94:94:7d:c5:6a:f6:bc:80:27:3d:24:
         9f:41:6c:4b:1b:49:9c:30:9f:72:3a:21:08:fe:e0:29:46:63:
         9a:d8:af:8e:f7:b8:03:20:b2:54:0d:78:e4:e2:c5:17:66:5b:
         59:68:ed:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:41:59 2025 by rpki-client