Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
File:                     6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft (raw, json)
Hash identifier:          BiNcieBSeVbIbio57KraDoydXn9F3HZIgXDKtHzxSfI=
Subject key identifier:   6A:45:D3:C6:E3:70:B1:0F:AB:AD:9F:79:57:B4:08:0A:16:38:59:75
Authority key identifier: E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36
Certificate issuer:       /CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036
Certificate serial:       019770753F6DB264628AF56B5FD48B2BC491
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
Manifest number:          1593
Signing time:             Sat 14 Jun 2025 22:00:21 +0000
Manifest this update:     Sat 14 Jun 2025 22:00:21 +0000
Manifest next update:     Sun 15 Jun 2025 22:00:21 +0000
Files and hashes:         1: 6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl (hash: 1ms6qOfSY8/JMymOxrYJhmtn8bimX3tB3ahDFrgxaME=)
                          2: XGdgxOrZAEASnwG-E4mJgIZXt9A.roa (hash: r7+Ew2fux06ZFhsm5QtmYCoespwgwuFRQ3Ky/AsDSy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:75:3f:6d:b2:64:62:8a:f5:6b:5f:d4:8b:2b:c4:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036
        Validity
            Not Before: Jun 14 22:00:21 2025 GMT
            Not After : Jun 15 22:00:21 2025 GMT
        Subject: CN=6a45d3c6e370b10fabad9f7957b4080a16385975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a2:a0:df:38:d1:db:66:8e:e8:2a:5b:9a:15:
                    a6:2a:0d:82:2c:d4:6a:bd:8a:2c:1d:83:11:bb:5c:
                    2d:14:13:d7:6a:6b:0a:ac:f6:f8:7b:bb:63:88:22:
                    21:d6:80:b9:78:dd:6a:e4:a4:41:71:cc:e3:13:1a:
                    1f:73:5c:73:11:b0:09:4a:50:3a:91:96:8d:f3:ca:
                    5e:88:1a:39:d7:7c:64:3f:c6:95:cd:39:10:9e:0e:
                    91:96:89:f0:c9:7c:e6:4c:3c:c3:a7:7a:8d:00:31:
                    f6:72:96:c2:91:b3:99:41:5b:71:2f:b2:0e:08:0d:
                    cf:56:ff:66:93:1a:39:56:82:21:d0:1b:9c:d4:cb:
                    5b:eb:18:38:0c:a3:99:c2:bf:b7:57:80:4e:85:e3:
                    f7:59:27:e8:92:98:47:f6:60:8d:f5:72:bf:f6:b7:
                    43:8a:8b:ff:f6:1d:da:ea:0e:19:a1:99:92:cd:f5:
                    42:4c:82:7c:de:0a:3d:53:85:5b:53:f7:4b:39:27:
                    92:ea:88:ae:50:85:ff:a7:7a:b0:4e:68:d0:00:b8:
                    33:18:fd:09:75:7e:eb:69:cc:33:ab:f5:7c:fb:2e:
                    fa:26:73:00:dd:41:8e:c7:44:c3:93:c5:e3:d7:77:
                    df:f8:f6:5e:03:2a:a3:fb:74:59:ad:dc:b6:63:f0:
                    22:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:45:D3:C6:E3:70:B1:0F:AB:AD:9F:79:57:B4:08:0A:16:38:59:75
            X509v3 Authority Key Identifier:
                keyid:E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ac:59:11:41:61:63:41:a9:a5:ff:20:f9:cd:76:68:aa:2e:
         6a:03:06:77:07:dc:5e:e2:3d:e6:af:51:f1:79:4a:e5:45:21:
         e0:24:60:b3:50:21:ac:26:00:0e:da:cd:89:d0:96:0f:5f:71:
         ec:ec:65:5e:1f:b0:28:c3:ab:62:38:a3:31:c9:b8:4f:aa:2c:
         49:26:94:72:b7:e0:2c:a3:e5:2a:48:65:45:73:c6:0e:39:ee:
         14:e3:80:ca:91:de:13:26:fa:b1:c9:32:14:da:1b:1f:3a:a6:
         d0:de:90:4a:c5:09:8d:bb:99:eb:eb:6a:48:8e:83:d5:38:c6:
         fa:97:bc:29:10:ff:1e:dd:07:e2:9a:1a:83:fd:b5:ce:6c:a3:
         a8:b7:73:82:a2:33:f9:51:4a:b4:dd:b0:72:08:ca:11:3e:b0:
         77:90:b6:6b:46:6b:39:c4:9d:13:15:d3:ca:63:d4:e2:65:5c:
         df:9e:4b:dc:e9:aa:33:0a:02:b8:83:43:56:2b:f9:d8:99:14:
         0c:0d:a5:58:d4:33:54:8b:db:62:aa:71:d6:b9:86:7d:85:15:
         91:f7:a1:67:e3:4e:a4:3e:4d:c2:7c:89:3a:0b:5e:f5:e8:e4:
         f4:a5:8d:f9:c9:3f:02:8b:f3:45:11:1b:10:de:16:27:33:ce:
         be:ab:ac:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:58:53 2025 by rpki-client