Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
File:                     b56WltzPbBpDIJBAhRSuzcP2Bzk.mft (raw, json)
Hash identifier:          V3iafiSv27TOcbhO/tsn6ePDYjdKIsWQLFDE6Gn2TRs=
Subject key identifier:   F6:63:7C:8B:21:EE:37:AC:23:B6:E1:8C:32:1C:08:BB:41:36:18:16
Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
Certificate issuer:       /CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Certificate serial:       01967AFBA6FC3C38E6571EC87F6DBAD69E19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
Manifest number:          0C1E
Signing time:             Mon 28 Apr 2025 06:00:34 +0000
Manifest this update:     Mon 28 Apr 2025 06:00:34 +0000
Manifest next update:     Tue 29 Apr 2025 06:00:34 +0000
Files and hashes:         1: 1-NiC19PFJdVr-VuE1N7tWrIBE9Q.roa (hash: 0HAHPWXREzbwDwtij8FRpFriyrnHpfOye4GKnuxuEBo=)
                          2: 6nWnFXyS5F1ASwTmxTI-OKrVInw.roa (hash: nIb7NvpCUlKnok0WYLAdZJHgh2sr4DtEdqaSpiUSP2U=)
                          3: b56WltzPbBpDIJBAhRSuzcP2Bzk.crl (hash: P7Aifn676qQTdciygFuAR36vMVgkYJKYuuRS5h27GfY=)
                          4: irQ4JJMLztLa--PMkqbpzaYfTLY.roa (hash: yXyLGlncTibO9AJq9TJ+3eEQDyB/oRi2hPfsjF++iN0=)
                          5: tlinpnG0x8FYKHJRgnQl2MhzT9I.roa (hash: xcfqy/HROXDkvuMKBhdlM9zJKi6smcXuo63HPeYf4G4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7a:fb:a6:fc:3c:38:e6:57:1e:c8:7f:6d:ba:d6:9e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739
        Validity
            Not Before: Apr 28 06:00:34 2025 GMT
            Not After : Apr 29 06:00:34 2025 GMT
        Subject: CN=f6637c8b21ee37ac23b6e18c321c08bb41361816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b1:5c:b4:fa:f5:26:29:e8:e7:99:ab:ff:d0:
                    f7:23:1e:5f:df:8c:83:d8:27:1a:09:96:86:15:54:
                    32:8b:90:39:e5:d8:26:2c:d4:1f:9b:c2:d8:cb:eb:
                    df:39:9d:da:e0:1f:44:90:28:e5:0b:88:6c:8d:ec:
                    9f:92:a7:82:10:21:1d:a3:71:03:75:25:e3:84:72:
                    25:84:55:17:e3:ad:86:31:05:54:26:32:e5:a5:7d:
                    e4:f3:b7:27:63:44:90:04:21:1e:27:a1:80:53:e6:
                    24:3a:6e:38:85:15:61:33:ef:dd:d6:eb:a7:23:e1:
                    a8:3c:5e:7d:af:52:49:87:ee:65:ca:96:62:94:6a:
                    a4:4e:5b:a5:5d:a7:86:3d:9c:f8:ba:34:f4:64:80:
                    f5:24:a6:97:a5:9d:5c:60:c0:d7:71:b2:b0:db:73:
                    fb:99:0d:ea:73:b3:9d:2c:45:40:e1:db:a1:22:ad:
                    2f:0b:73:bf:b2:7a:46:61:dd:0a:27:a4:b1:12:d9:
                    ca:1e:55:7b:5c:8d:49:42:68:b9:fe:ac:e3:b9:84:
                    24:53:ab:e3:78:fc:fe:d5:52:49:4e:ad:f3:15:5b:
                    02:dc:01:3a:4a:05:fc:27:26:0a:d6:f7:98:6e:dd:
                    43:50:f6:07:21:df:e4:69:be:90:c6:ce:2c:08:1e:
                    e7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:63:7C:8B:21:EE:37:AC:23:B6:E1:8C:32:1C:08:BB:41:36:18:16
            X509v3 Authority Key Identifier:
                keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:5f:08:6e:09:43:37:0f:fe:f4:df:fd:2c:a9:ee:b6:7b:38:
         80:78:cf:42:2b:b7:47:97:b6:3c:da:35:22:85:ce:38:f7:25:
         a0:3c:64:68:7d:83:cb:30:7c:09:c8:53:80:3a:4a:d5:25:44:
         e5:73:cd:0d:d2:b0:29:52:f1:17:43:22:68:87:5e:bc:6e:82:
         1d:f9:55:26:02:61:53:74:b8:74:d9:3c:e5:dc:5e:e8:a9:fd:
         d7:06:17:69:6c:13:03:3f:b2:d7:6f:28:c1:e0:8c:a6:5a:d9:
         37:f4:5c:62:93:e0:e4:c8:0e:47:8e:5c:ed:a6:ab:b5:00:59:
         7f:61:61:28:c3:b5:12:fd:90:de:31:fc:bc:55:40:52:2e:3b:
         17:bd:4c:7b:d2:06:d1:3e:20:eb:52:45:19:8f:0f:76:c3:31:
         05:74:6a:47:ee:a0:b9:49:b5:28:3a:27:91:d1:07:ae:32:44:
         95:ef:da:50:0b:e9:42:23:fe:08:25:c2:45:f4:8c:ae:b2:5a:
         5a:69:6d:e3:d2:8f:ef:69:64:2e:8c:59:e3:aa:4b:d2:68:5b:
         63:f5:d9:1f:83:c2:0c:94:e1:c7:10:5b:63:c0:f2:b5:0a:aa:
         04:14:d4:9c:65:3f:cf:10:dd:31:f4:fd:31:7a:68:7e:58:7d:
         af:8f:37:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:28:34 2025 by rpki-client