Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.mft
File:                     6y7LDykkUqe-lOaWD3znIBa9GAU.mft (raw, json)
Hash identifier:          WzTBhyCvH/CyfgT4jRE09jmc1zY8LCQYp0dIFXnuLRI=
Subject key identifier:   3D:75:DB:DF:FD:41:10:E3:99:8A:39:1A:A5:F1:E3:CE:C6:00:87:7D
Authority key identifier: EB:2E:CB:0F:29:24:52:A7:BE:94:E6:96:0F:7C:E7:20:16:BD:18:05
Certificate issuer:       /CN=eb2ecb0f292452a7be94e6960f7ce72016bd1805
Certificate serial:       019677FAC9569CD3E6313778080166131829
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6y7LDykkUqe-lOaWD3znIBa9GAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.mft
Manifest number:          02BC
Signing time:             Sun 27 Apr 2025 16:00:46 +0000
Manifest this update:     Sun 27 Apr 2025 16:00:46 +0000
Manifest next update:     Mon 28 Apr 2025 16:00:46 +0000
Files and hashes:         1: 6y7LDykkUqe-lOaWD3znIBa9GAU.crl (hash: dVIg2nJLEiCDkavYL2k7clnteUYsF76ZB9pThlUCd9A=)
                          2: Aa0efsIBSZxQ_4T_iZQY03PtXFg.roa (hash: OuiSoz74OGRgJiBoShoGAfl/wamUvwrfazeBnaRaH+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6y7LDykkUqe-lOaWD3znIBa9GAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:fa:c9:56:9c:d3:e6:31:37:78:08:01:66:13:18:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2ecb0f292452a7be94e6960f7ce72016bd1805
        Validity
            Not Before: Apr 27 16:00:46 2025 GMT
            Not After : Apr 28 16:00:46 2025 GMT
        Subject: CN=3d75dbdffd4110e3998a391aa5f1e3cec600877d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b4:01:47:a2:79:02:a8:a3:1b:ef:d7:61:27:
                    33:1d:f4:cc:75:64:c1:75:99:fb:79:89:86:a7:1c:
                    78:20:b3:25:85:5b:23:66:72:30:03:2e:48:a1:31:
                    f0:85:11:d3:61:00:35:f2:11:bc:4a:ec:db:a1:a9:
                    3e:48:d2:ff:c6:f1:23:10:14:de:01:03:09:f9:1d:
                    a0:76:0e:0c:46:56:f3:cc:0e:06:c1:b5:8a:19:42:
                    78:6f:b3:a0:ef:a9:11:d0:6d:a9:e7:7d:0c:87:dd:
                    a5:b9:11:7a:0a:c0:1a:56:b2:bd:7c:88:4c:03:a7:
                    93:f7:10:18:a1:02:5f:f6:53:13:4d:a3:fa:7f:3c:
                    b2:e5:16:af:e3:53:ad:76:4a:15:1d:12:44:6d:cc:
                    74:63:92:27:3c:b8:e1:1e:3c:92:25:31:1c:91:70:
                    35:8c:99:5a:5c:22:1b:3c:a9:37:86:b9:47:1e:8a:
                    d8:5b:0d:97:2e:65:a2:55:b6:cd:75:e4:a2:71:45:
                    88:d0:6b:6a:66:2c:7d:05:d9:ad:9f:8c:bc:99:3d:
                    06:29:d4:40:17:fc:81:dc:60:f6:3d:00:f1:ff:20:
                    9b:36:8c:08:21:61:d0:22:84:5c:49:9f:16:94:0c:
                    51:9a:63:32:f2:1b:9e:8b:89:cb:35:b6:71:b7:4b:
                    9f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:75:DB:DF:FD:41:10:E3:99:8A:39:1A:A5:F1:E3:CE:C6:00:87:7D
            X509v3 Authority Key Identifier:
                keyid:EB:2E:CB:0F:29:24:52:A7:BE:94:E6:96:0F:7C:E7:20:16:BD:18:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6y7LDykkUqe-lOaWD3znIBa9GAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:35:5d:d9:e5:15:c0:34:7c:7b:91:b1:d4:54:8e:46:b0:e7:
         5d:23:16:d7:d4:11:51:0c:5e:58:aa:77:67:0a:c3:fa:bb:f1:
         84:35:3b:fc:22:e8:c7:3d:77:57:60:6a:fd:b4:26:0f:bd:af:
         70:0e:0e:4d:ea:3e:bc:8c:35:90:fe:b6:65:db:99:e7:b8:f7:
         d7:a7:7f:0c:04:44:95:77:69:04:45:d4:d2:c2:42:9e:51:b7:
         7d:8d:f7:c2:0d:a7:61:8f:5a:75:96:c5:0d:76:60:75:bf:56:
         e6:0c:ba:39:3b:90:6e:1d:60:3d:e6:1f:7e:1e:57:7f:2e:59:
         2a:5b:57:41:71:3d:72:da:c9:d7:d0:a9:4b:06:47:c2:e9:80:
         82:7d:bb:d5:9c:5a:e7:09:1d:9f:70:be:28:b8:41:ce:5f:b5:
         25:24:ee:7f:b8:76:82:1f:61:d9:f5:b5:f7:9f:d0:58:e0:b5:
         a0:85:e6:93:e5:47:af:8a:cb:cc:2b:33:6e:d1:24:1b:4c:b0:
         4c:4c:3e:4f:7a:99:40:5e:bb:ac:94:9d:69:33:cf:ef:4c:af:
         8c:1a:3b:d6:b4:00:1c:69:15:78:0d:35:55:a7:5a:d5:04:45:
         99:bd:7d:86:25:9a:56:0a:b4:27:49:a8:01:d9:fe:fb:c4:22:
         ef:79:2d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:05:42 2025 by rpki-client