Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
File:                     6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft (raw, json)
Hash identifier:          QEhlCoC3Wt77fGRa9nrFneVoi0Vxin1uLiR9BD3xwp4=
Subject key identifier:   9D:8B:4F:46:18:E8:91:02:4F:57:FD:FF:C0:3A:90:96:33:3E:49:26
Authority key identifier: E8:2B:EF:EC:70:6E:ED:27:7A:9D:98:F7:0B:B3:FB:66:84:9B:F2:96
Certificate issuer:       /CN=e82befec706eed277a9d98f70bb3fb66849bf296
Certificate serial:       01967ED879DBA3369A12A553A82E04325AD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
Manifest number:          0E2A
Signing time:             Tue 29 Apr 2025 00:00:38 +0000
Manifest this update:     Tue 29 Apr 2025 00:00:38 +0000
Manifest next update:     Wed 30 Apr 2025 00:00:38 +0000
Files and hashes:         1: 6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl (hash: sITw6SwtqIGcA3AEXR2ImsOUe3zFSGBRdy7xKwwXm4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 22:36:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7e:d8:79:db:a3:36:9a:12:a5:53:a8:2e:04:32:5a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82befec706eed277a9d98f70bb3fb66849bf296
        Validity
            Not Before: Apr 29 00:00:38 2025 GMT
            Not After : Apr 30 00:00:38 2025 GMT
        Subject: CN=9d8b4f4618e891024f57fdffc03a9096333e4926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bd:fb:f3:af:3c:a0:a2:61:aa:66:d6:f5:e2:
                    75:91:50:3b:c8:f0:69:9e:03:7a:b9:c6:14:e1:4c:
                    60:be:ad:a9:8e:9b:99:6b:1d:13:6f:3d:a1:4a:40:
                    b5:7b:97:45:22:e8:5c:28:7b:ec:b1:f7:a6:d8:3f:
                    04:56:05:a7:14:e6:1c:08:10:f0:cb:1f:8f:1d:03:
                    05:87:c9:45:e9:79:0e:e7:e0:22:56:42:0b:ce:50:
                    26:73:01:8a:dd:ea:61:db:38:93:54:5b:01:0d:09:
                    9d:ce:54:d1:7d:7b:3b:5a:3b:5f:55:d4:8b:16:e8:
                    e4:6d:66:88:94:33:77:da:08:58:68:69:2e:75:5d:
                    a9:e2:bb:4a:fa:a2:a3:09:28:19:52:5c:95:19:59:
                    66:ed:ea:0b:7b:2e:bc:45:76:e7:83:3f:6a:f8:b2:
                    74:a4:eb:54:12:b0:10:73:29:e0:79:47:24:54:cd:
                    e2:55:ba:42:12:e1:ed:8d:6f:ef:58:06:ec:e7:14:
                    83:f3:24:e5:de:a6:63:39:cc:c8:b7:c8:f3:e2:bb:
                    d6:54:cf:09:9a:4b:a3:1e:8b:48:5b:9f:4b:0c:f7:
                    28:d9:31:8b:f1:82:27:aa:e0:f5:f4:03:24:58:19:
                    ff:0c:5d:bd:e4:5b:f0:66:44:01:bc:6b:35:47:84:
                    60:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8B:4F:46:18:E8:91:02:4F:57:FD:FF:C0:3A:90:96:33:3E:49:26
            X509v3 Authority Key Identifier:
                keyid:E8:2B:EF:EC:70:6E:ED:27:7A:9D:98:F7:0B:B3:FB:66:84:9B:F2:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ae:8c:1e:76:25:06:8f:2b:5a:e2:03:83:47:9a:89:2c:06:
         7c:45:d4:ac:5f:7f:14:9a:d7:3d:e5:9f:47:35:55:e6:f9:99:
         ac:b8:96:3f:b5:c2:78:59:18:02:b7:93:26:5f:68:5a:46:70:
         89:8d:0b:18:97:94:a4:e2:56:e2:f0:be:c6:96:c7:91:8f:4b:
         d6:c0:41:30:e2:8f:19:46:a9:80:d1:5b:eb:3d:23:b3:df:29:
         56:f3:34:b5:06:df:0f:20:5f:71:d8:a5:08:55:cf:48:ab:47:
         44:51:43:84:88:08:67:06:0d:f5:50:05:dc:3f:04:d7:99:e5:
         33:d6:50:2e:b8:a6:14:9e:a1:1b:42:22:e0:c1:78:8e:17:99:
         f6:c9:46:67:11:6b:96:aa:09:7c:6d:36:c3:57:ce:37:fe:b5:
         7e:a5:b1:1b:14:50:60:ff:ad:81:9e:c7:d0:0d:5d:31:4d:23:
         3e:64:3c:96:de:43:e3:92:6b:20:60:4f:6c:99:f6:9f:e7:d2:
         b9:75:b4:a0:b0:76:7e:63:07:9b:5a:c0:b5:7e:dd:7e:00:b0:
         d1:8b:b8:ca:ea:01:1e:ce:cb:18:68:5a:eb:ba:d2:ca:e6:44:
         64:4e:7c:46:bf:cc:14:07:7e:98:8f:a9:ca:7c:63:e5:f7:93:
         e7:1f:d4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:06:01 2025 by rpki-client