Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft
File:                     6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft (raw, json)
Hash identifier:          OAcoh90J0/CfevCS0/UlxqCKKzJoCuyhvDujyEn358A=
Subject key identifier:   B3:87:D2:B6:08:14:F6:7A:C7:D1:AC:D8:56:88:65:EB:96:EE:D5:13
Authority key identifier: E8:96:4E:4E:8F:FE:31:F6:92:F7:13:18:C2:B7:28:20:28:D0:F3:A4
Certificate issuer:       /CN=e8964e4e8ffe31f692f71318c2b7282028d0f3a4
Certificate serial:       01976F62A3C3359C9DCF3D4B39E7F6230DB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft
Manifest number:          1097
Signing time:             Sat 14 Jun 2025 17:00:24 +0000
Manifest this update:     Sat 14 Jun 2025 17:00:24 +0000
Manifest next update:     Sun 15 Jun 2025 17:00:24 +0000
Files and hashes:         1: 6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl (hash: x9/S6uOZM4eFwZxVJJDaFoJMeLVJcsyCCbkVKOJJ558=)
                          2: zzkHgU3pPK_renmca_tjyEqX_S4.roa (hash: ANmTP8T5HJ5lr31OcBilkarY0aetBNgPCtaIRztJMUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:62:a3:c3:35:9c:9d:cf:3d:4b:39:e7:f6:23:0d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8964e4e8ffe31f692f71318c2b7282028d0f3a4
        Validity
            Not Before: Jun 14 17:00:24 2025 GMT
            Not After : Jun 15 17:00:24 2025 GMT
        Subject: CN=b387d2b60814f67ac7d1acd8568865eb96eed513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e9:d8:ca:55:3a:81:c2:8e:c1:e1:5f:8e:17:
                    44:87:a1:b1:e5:70:d0:12:a8:b5:9f:05:79:20:8c:
                    f9:e7:ec:ff:2a:ec:26:07:ac:fb:0e:aa:53:33:4e:
                    7d:dd:75:32:fb:78:de:61:3e:25:8c:51:a3:c1:a9:
                    a7:4a:cc:13:28:04:b9:74:f6:c4:dd:a6:4c:fd:c6:
                    d6:89:12:3e:c8:46:7f:79:6e:6a:4f:10:be:17:9b:
                    1b:0c:d9:ac:ae:ac:57:52:43:c0:9d:95:f6:7e:36:
                    16:15:63:4f:ad:b4:0f:f3:55:1e:15:36:0c:53:93:
                    8f:0e:45:53:09:5b:84:59:be:b0:c6:73:16:44:34:
                    97:2e:bb:35:e5:06:b0:cc:7a:e7:1d:e1:dc:2d:46:
                    8e:ca:0a:bf:32:76:8f:e1:60:47:e8:76:b4:04:3b:
                    8f:4e:cf:87:5c:1e:db:19:1e:c7:86:b9:ec:42:71:
                    f4:c8:06:56:02:14:17:bc:9a:f6:d6:b4:ef:00:4c:
                    a5:1a:ac:66:28:f4:df:fe:9d:1d:05:76:43:c6:aa:
                    7a:af:fe:90:07:07:4b:fa:c5:7c:61:5e:5f:7b:33:
                    d0:5b:69:aa:eb:41:16:26:6a:d6:5c:59:df:19:61:
                    28:00:bf:1d:3e:a5:ea:dc:a2:4b:57:c0:97:91:e3:
                    55:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:87:D2:B6:08:14:F6:7A:C7:D1:AC:D8:56:88:65:EB:96:EE:D5:13
            X509v3 Authority Key Identifier:
                keyid:E8:96:4E:4E:8F:FE:31:F6:92:F7:13:18:C2:B7:28:20:28:D0:F3:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:19:3c:37:e4:6f:d1:1a:62:b3:54:cd:39:21:f7:70:5a:26:
         21:41:1b:cf:fc:4e:b9:c6:dc:d6:08:92:f9:fd:73:1b:d1:40:
         e6:9f:ca:2e:1f:69:92:02:4b:88:82:d4:a3:bd:8b:5f:7a:ba:
         d5:6d:20:73:f3:a2:6c:6a:8d:b7:ff:43:f7:72:08:25:0b:c4:
         80:82:95:63:61:a0:47:d2:85:2f:f3:8b:5d:44:d1:ff:ae:11:
         d0:af:d4:04:06:54:9e:18:73:4e:9f:27:e9:75:1f:70:05:72:
         35:81:ca:cb:6e:c7:a0:4a:0b:c2:b0:08:3c:a3:8e:b1:9a:e8:
         e4:0c:a5:73:01:c4:c1:75:a7:b3:2b:57:13:1d:62:5b:3f:74:
         65:57:fc:3d:cc:21:81:4e:42:21:f1:a3:02:50:23:e1:d6:94:
         cd:f7:ea:74:59:1d:67:79:a4:be:d4:8e:24:96:59:89:ae:0d:
         e7:66:80:a3:89:e5:9f:89:01:5c:46:2a:5d:9c:68:ea:b7:63:
         cf:71:a9:5d:5e:ad:6a:8d:a9:de:ae:cd:d2:a9:80:ba:bf:df:
         bb:e7:60:5a:3a:30:de:7a:44:b7:b5:de:99:af:67:46:b4:09:
         16:1c:10:90:25:03:dd:a4:3e:76:56:f9:3c:78:17:ff:9e:38:
         35:67:3a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:01:28 2025 by rpki-client