Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
File:                     6hyVHWG4faGUOXhNI2Z6icsykKQ.mft (raw, json)
Hash identifier:          FnVkhK/DkyCmLw/f1srg5ftBYqeUqAWI7Ceb9PzHWfA=
Subject key identifier:   F0:6C:78:E0:25:E9:27:8A:28:BF:93:D9:4B:46:F3:F8:F4:AC:D2:84
Authority key identifier: EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
Certificate issuer:       /CN=ea1c951d61b87da19439784d23667a89cb3290a4
Certificate serial:       01976C623AF9DDEDD82B70C3999318A8577A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
Manifest number:          0FDD
Signing time:             Sat 14 Jun 2025 03:01:06 +0000
Manifest this update:     Sat 14 Jun 2025 03:01:06 +0000
Manifest next update:     Sun 15 Jun 2025 03:01:06 +0000
Files and hashes:         1: 6hyVHWG4faGUOXhNI2Z6icsykKQ.crl (hash: 9ioshQnKhK6qiilFozOlcLwvA5cN8/1W6EbTdODQL3c=)
                          2: DNuH6oIfd0PY2UVMr4WMzxd7NU0.roa (hash: iqajQOHR2WVqg/fcCZBACzn/zImoOaKBPBj1ANJonPc=)
                          3: IDKX9sPGQlI6MZvv-y5YFAm0ePk.roa (hash: k1Iw/tEDEs1ds0ZzGmimuwWihzs+ZhkkWmj8r8qIDVY=)
                          4: NQVBTx4RbrONvu3Vt7IdOsvxKko.roa (hash: ci9wFGdOR13x1Mk5Vu2208pIxEOz06nAwV5fe0oYKhQ=)
                          5: eD-jgmLjU8l3pyRuumgK9QIMg5I.roa (hash: MI8CkhvzSAw59I9pdOh0qmm9At+Brpo0+Yc/fyYEwKI=)
                          6: t4HOM7223cblLwASPVWvJxWa0P8.roa (hash: 6CJfm+zy3ed5GsTq+D3MyV6sLn5UpIUZ3lP8fBBYmiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:62:3a:f9:dd:ed:d8:2b:70:c3:99:93:18:a8:57:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea1c951d61b87da19439784d23667a89cb3290a4
        Validity
            Not Before: Jun 14 03:01:06 2025 GMT
            Not After : Jun 15 03:01:06 2025 GMT
        Subject: CN=f06c78e025e9278a28bf93d94b46f3f8f4acd284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3a:aa:8c:de:c3:26:29:14:e6:f0:c9:58:35:
                    ee:79:89:3d:54:f3:cc:ab:8d:ba:2f:43:f0:b7:b9:
                    92:9e:49:3a:72:0c:a7:7a:d4:59:fc:e2:94:bd:5d:
                    51:6f:22:ed:96:50:36:2a:8c:c0:9c:50:12:7a:bd:
                    dc:2b:2b:2a:ce:b1:4b:f1:5b:de:e0:13:72:cf:c8:
                    95:90:7c:d6:dc:ef:0e:0e:7f:b5:51:bb:62:2c:69:
                    d5:1a:6f:3d:e5:9b:1a:55:85:be:df:1b:9e:5d:bf:
                    88:b3:1a:40:60:a1:e8:df:59:bb:c9:62:f0:21:1e:
                    fc:db:0a:2a:c1:0a:34:35:99:41:48:50:f7:2d:1d:
                    eb:9a:b1:97:6f:9e:25:22:8d:62:ec:ec:03:36:ef:
                    4a:7e:78:7c:aa:41:b9:a2:d7:a0:a7:58:51:3b:42:
                    82:f5:98:88:33:85:cd:45:be:67:97:ec:55:67:0f:
                    e4:7c:76:ac:73:6a:93:aa:d9:23:00:f7:6c:ee:46:
                    da:4f:7c:a0:aa:18:8c:b1:d0:f2:b8:d5:c4:cc:62:
                    f7:5c:02:8b:85:5d:4d:c7:1d:ae:89:b9:6e:bc:9d:
                    eb:1b:7b:9c:f1:6b:ad:f5:98:35:d2:f0:ed:1f:60:
                    e0:58:04:12:3e:65:ae:ff:06:56:82:5a:d8:00:1f:
                    95:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6C:78:E0:25:E9:27:8A:28:BF:93:D9:4B:46:F3:F8:F4:AC:D2:84
            X509v3 Authority Key Identifier:
                keyid:EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:52:af:79:b5:0e:be:02:43:d7:fd:dc:51:f6:7d:24:93:ca:
         10:cd:fd:39:21:65:48:13:46:3d:42:ef:1e:d2:12:ee:e1:c4:
         24:82:42:bf:b6:c9:52:58:ba:13:64:77:10:8f:cf:77:1d:f6:
         38:75:35:30:7f:55:1d:cf:8f:a1:f6:84:54:a2:4d:90:21:fa:
         a4:62:50:28:28:30:9b:7f:75:e8:fd:1d:98:e6:11:8f:9f:d9:
         0e:db:a9:6a:76:7a:27:b6:f5:de:e0:0a:ac:ae:12:38:eb:41:
         83:4d:24:f5:46:a0:b5:d3:f4:ae:67:59:de:d2:2c:c6:87:1e:
         6a:0e:f3:90:fd:36:24:5f:e4:48:37:1a:d1:d8:28:89:f3:58:
         88:2b:0c:76:6b:99:1c:e5:6f:7a:6b:da:63:4b:c5:3e:77:32:
         39:e0:ca:e5:7f:b4:76:fe:b1:0f:32:f1:a2:a0:87:b5:4a:ba:
         34:64:71:2f:fd:8f:ac:da:18:b3:40:5f:75:4a:b8:61:e9:01:
         f3:7d:13:8d:1c:45:0e:a3:81:ff:a6:28:e3:af:8e:ca:cd:d8:
         3f:7b:b1:02:45:7a:5a:bb:df:4e:92:96:7d:63:eb:84:02:05:
         88:cc:97:3e:c1:4d:45:5b:84:10:c9:7d:85:b5:e0:31:5f:73:
         da:54:d9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:50:46 2025 by rpki-client