Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File:                     6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier:          coo0aN22MY5LFNDrdeq98aotL/n5WdlNkU2ewbhrDAA=
Subject key identifier:   59:46:2D:10:89:A4:CC:CD:AF:EB:FA:32:EB:44:60:F7:73:F0:4F:E0
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer:       /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial:       01978357FCDA2285489544CCDD3CE36D053D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number:          15B0
Signing time:             Wed 18 Jun 2025 14:01:11 +0000
Manifest this update:     Wed 18 Jun 2025 14:01:11 +0000
Manifest next update:     Thu 19 Jun 2025 14:01:11 +0000
Files and hashes:         1: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: 7hhOdl5oRoZnocf/zhqx/mM5SBBj8jdN8v6UtPicZiE=)
                          2: JeUrUwbFpGu8iDqDZmLLtLX07Uo.roa (hash: AF4y3k0K4M29JKvnm3WAi9rM2wiDZSTI7KiQY/+WwGQ=)
                          3: LMOHIG2uLaY6GZHZHZ2LuvxqzKM.roa (hash: 4NroWDI/8Q2pwsJ7z2O+ja04jrPKvPKyJQ0j1cEhZ+Q=)
                          4: oDuQtsfWsb20exJBO7QurYBeWk8.roa (hash: gEKk7yZspSpg2oEhPVCqnu3t/dgmJib8oW+i8A65aR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:83:57:fc:da:22:85:48:95:44:cc:dd:3c:e3:6d:05:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
        Validity
            Not Before: Jun 18 14:01:11 2025 GMT
            Not After : Jun 19 14:01:11 2025 GMT
        Subject: CN=59462d1089a4cccdafebfa32eb4460f773f04fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f9:ab:19:a5:dd:81:cd:4a:2c:7a:b8:35:2f:
                    7d:1e:02:73:55:a4:b0:db:79:26:bb:e2:8a:70:c8:
                    5c:9c:20:4c:c3:c3:a5:ef:76:05:fa:e7:17:7a:43:
                    2d:49:9b:c0:77:1d:5b:5a:a7:0a:ef:63:69:4c:9c:
                    35:76:70:36:63:c7:ea:1b:6a:bd:07:69:bf:29:ec:
                    53:96:7b:c2:1a:67:d4:27:09:f9:54:ff:81:b2:71:
                    f5:fd:51:be:67:48:75:2b:d1:0a:56:a8:89:f3:83:
                    a1:d8:ee:85:43:0e:8c:66:d3:52:5d:e0:5b:3c:55:
                    79:60:7d:1a:8e:00:0c:3b:18:30:d7:26:62:59:76:
                    ad:4f:70:9b:b9:ca:bd:8c:e5:ec:03:17:63:fc:95:
                    7c:f4:b6:81:0d:42:96:6d:7d:32:f5:33:8f:eb:76:
                    41:89:f0:ff:68:6d:f9:ef:c3:26:c2:2c:42:75:a4:
                    82:09:18:90:df:ff:01:79:e0:0b:ea:eb:c2:50:36:
                    08:cd:3d:dc:5a:14:b1:67:bb:73:8c:13:a0:eb:70:
                    1d:d4:23:33:f7:1c:d3:ed:91:89:96:81:55:ac:6f:
                    9c:3f:ed:aa:bd:3e:f7:fb:40:6a:0e:bf:12:48:6a:
                    94:1c:be:50:3b:b0:4e:12:22:00:2c:9e:0c:9f:05:
                    3f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:46:2D:10:89:A4:CC:CD:AF:EB:FA:32:EB:44:60:F7:73:F0:4F:E0
            X509v3 Authority Key Identifier:
                keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:79:87:a0:de:2e:78:4c:61:c3:48:99:ba:b6:06:f6:3b:9e:
         a2:cc:8d:64:dc:95:91:29:6e:46:58:e5:38:73:b3:22:1b:4b:
         e1:a4:84:38:4a:6c:f4:92:24:66:c5:9c:2d:4a:95:95:d6:ee:
         2f:a4:de:61:90:e5:c0:58:3b:21:9d:5a:a8:f8:12:59:94:13:
         9b:fc:da:60:95:ed:de:40:1d:ce:bb:8c:99:37:56:48:9d:05:
         97:0d:56:7b:3e:1e:3b:60:33:a5:2b:79:96:0a:a0:81:83:7b:
         4c:5b:1e:ed:65:a6:4c:51:64:f2:6a:db:52:db:b8:e8:af:54:
         bb:0e:5d:c5:ff:ec:d3:6a:00:3f:c1:aa:67:10:d3:1a:35:41:
         05:4c:f8:c7:86:0d:26:c8:5c:ec:fd:2b:48:a2:7b:cc:aa:96:
         d0:a3:a9:8f:b4:2f:62:b8:a1:c3:ea:18:d9:a7:96:ca:76:54:
         85:48:01:08:86:97:38:ab:f1:1f:b8:c4:9a:fe:a2:2e:d8:d8:
         8e:6e:68:01:b8:7c:8f:20:04:40:e4:ca:d9:3e:e3:39:41:65:
         53:2c:91:45:72:f0:8a:d4:26:01:26:55:7e:07:d9:30:a0:61:
         06:b8:3d:11:b2:06:23:a7:62:86:33:3b:07:3a:b0:0e:99:43:
         14:a4:0e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:42:52 2025 by rpki-client