Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.mft
File:                     a0GpW5uUHTQtB7ihfX2DXeEsi_Y.mft (raw, json)
Hash identifier:          z/vQWXAGtRzTnJoqlAMfIaHM3LV2Sp/EIo7Ws5RT++w=
Subject key identifier:   9E:0E:40:BB:B9:4C:49:7A:E4:D2:BA:64:8E:AA:7B:26:4B:32:46:7B
Authority key identifier: 6B:41:A9:5B:9B:94:1D:34:2D:07:B8:A1:7D:7D:83:5D:E1:2C:8B:F6
Certificate issuer:       /CN=6b41a95b9b941d342d07b8a17d7d835de12c8bf6
Certificate serial:       0197684E1886EAC75F58DE629529551885EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.mft
Manifest number:          070B
Signing time:             Fri 13 Jun 2025 08:00:37 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:37 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:37 +0000
Files and hashes:         1: a0GpW5uUHTQtB7ihfX2DXeEsi_Y.crl (hash: 92CH5VFxyw2ksyj+qEXKBsfuBKE4vZc41pgp8ubIFMA=)
                          2: tmEAf9ZXZPWYhkKRSKm2RFZwu58.roa (hash: Wy9lKsdp9Di7MryHAEfUWFGv7fEx23Pr2YF9NFfmLVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:18:86:ea:c7:5f:58:de:62:95:29:55:18:85:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b41a95b9b941d342d07b8a17d7d835de12c8bf6
        Validity
            Not Before: Jun 13 08:00:37 2025 GMT
            Not After : Jun 14 08:00:37 2025 GMT
        Subject: CN=9e0e40bbb94c497ae4d2ba648eaa7b264b32467b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:5c:6a:25:68:af:d3:d6:fa:55:17:33:ce:8d:
                    49:de:2c:d4:55:53:c5:4f:30:02:a1:bd:a7:9c:ea:
                    af:58:89:73:00:d5:e0:ae:22:9a:61:c0:fc:93:72:
                    37:e8:55:6a:38:b6:c5:99:ef:e8:01:f6:74:ca:aa:
                    ee:10:54:ee:f3:47:20:62:06:31:6d:93:f3:de:46:
                    4b:df:a1:d5:a9:78:ad:1f:92:91:19:19:e5:d3:50:
                    4e:6c:47:fd:63:c8:17:30:78:6b:14:f5:86:8b:84:
                    20:8e:36:74:f3:58:fd:93:48:f1:7c:65:2c:b9:b2:
                    27:8d:39:e5:f9:76:d7:27:5b:3d:a5:21:40:ae:68:
                    2f:72:9a:98:9c:e5:95:fa:4c:d0:de:54:72:8d:9f:
                    d5:77:20:9a:c7:d7:92:16:12:91:b3:dd:60:9d:01:
                    98:62:5e:bc:76:44:cb:c6:61:1e:bb:0b:a1:0f:e8:
                    21:43:3d:e3:f2:4f:01:f1:19:d2:4e:2f:d5:67:8f:
                    16:c4:6b:5b:8f:34:45:38:41:16:10:bc:b4:f4:a5:
                    c1:ed:e7:e5:bc:c5:ff:66:13:fd:04:b7:02:a7:af:
                    00:74:9b:4c:23:2d:63:22:ef:ff:cd:88:97:99:21:
                    4d:99:af:56:9c:a4:c4:d4:e8:e3:24:c4:fb:4f:b8:
                    b8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0E:40:BB:B9:4C:49:7A:E4:D2:BA:64:8E:AA:7B:26:4B:32:46:7B
            X509v3 Authority Key Identifier:
                keyid:6B:41:A9:5B:9B:94:1D:34:2D:07:B8:A1:7D:7D:83:5D:E1:2C:8B:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:91:f2:2c:2d:d5:3f:f9:0a:16:e7:a8:1b:50:a8:02:d9:81:
         ee:9c:64:25:0d:67:55:6f:d3:82:66:95:e3:d0:62:14:e7:9b:
         12:15:c6:0f:2b:ce:ad:09:f5:47:c8:4e:a1:bd:73:1f:12:7b:
         27:0e:61:fc:5f:f8:51:dc:27:62:27:cd:20:43:6b:2d:54:b2:
         61:8f:73:7e:4e:8d:2e:b4:c2:8c:50:ac:59:d8:f9:75:2e:4e:
         12:9b:8d:44:24:fb:41:8e:c5:fa:ae:ce:c4:aa:94:c7:5c:0d:
         7b:77:79:a4:c0:ae:ef:24:c5:fc:49:f3:56:e7:93:5f:69:dc:
         3b:d3:d8:99:b3:a6:7a:20:02:37:0a:e1:c6:54:e4:bf:a4:bc:
         b2:05:b5:f7:21:4d:e1:52:e3:4a:ad:98:bf:79:c5:c4:eb:8a:
         54:9e:43:b7:5d:66:cb:5b:e9:e4:d1:ef:f4:a7:5d:d9:7b:48:
         20:51:d1:03:c3:69:01:a8:72:28:92:24:85:fa:98:d8:4c:fe:
         94:d7:4b:14:b5:27:ff:9d:88:0b:26:42:63:69:a5:8e:44:ba:
         8b:b0:04:5c:0d:25:73:a8:7b:43:89:c7:5b:77:69:0a:3a:86:
         3e:c6:12:a9:e2:87:21:bd:0e:ba:f4:67:18:84:cb:b6:18:8e:
         e0:b9:34:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:53 2025 by rpki-client