Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
File:                     eSf20AYql2a9WPDQdcTw0QJX5gY.mft (raw, json)
Hash identifier:          URsLHn124S99x9ji4qA0DLgofDnjDXIKKySYV3/LiF0=
Subject key identifier:   56:96:5D:86:91:D9:B4:4E:84:97:14:62:91:F8:8A:2F:83:73:BC:9B
Authority key identifier: 79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06
Certificate issuer:       /CN=7927f6d0062a9766bd58f0d075c4f0d10257e606
Certificate serial:       019768850A3C9B93FB97262250E90AC232D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
Manifest number:          0177
Signing time:             Fri 13 Jun 2025 09:00:38 +0000
Manifest this update:     Fri 13 Jun 2025 09:00:38 +0000
Manifest next update:     Sat 14 Jun 2025 09:00:38 +0000
Files and hashes:         1: eLGVH-huMc8rapx-zBQol7W6wbs.roa (hash: dBq0SVYODoTbT9noZtho2o8DhkqOnGRrlJMatl/O+48=)
                          2: eSf20AYql2a9WPDQdcTw0QJX5gY.crl (hash: RwBejE6EaA1igFrj4trcl32dd7HqnNqGJBNakxiCKqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:85:0a:3c:9b:93:fb:97:26:22:50:e9:0a:c2:32:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7927f6d0062a9766bd58f0d075c4f0d10257e606
        Validity
            Not Before: Jun 13 09:00:38 2025 GMT
            Not After : Jun 14 09:00:38 2025 GMT
        Subject: CN=56965d8691d9b44e8497146291f88a2f8373bc9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4b:09:7e:d5:62:9c:54:65:25:6f:cf:26:f0:
                    44:5d:19:08:15:f1:90:ba:af:61:51:b4:31:45:ad:
                    30:93:90:69:30:e4:1d:6c:7b:87:a3:8d:79:23:ff:
                    a6:63:f2:03:75:e7:a7:b0:1c:ab:cf:98:17:81:41:
                    5b:c9:74:f7:79:a9:ba:e3:58:91:0c:71:e4:7f:ab:
                    a9:ed:0c:87:46:51:d9:4e:58:cb:53:d8:be:d5:55:
                    af:80:54:90:9a:d4:98:cf:cd:e3:c6:35:d4:97:f2:
                    45:bb:07:45:24:d6:9e:33:63:c6:93:36:4a:d6:9f:
                    cd:2e:7a:41:19:26:9a:71:59:93:53:63:23:36:03:
                    78:53:0d:9e:ff:70:aa:a9:65:eb:0b:57:70:6a:56:
                    be:c1:08:35:57:0a:ef:36:94:39:39:78:3b:75:0f:
                    ec:e6:5e:e5:88:59:f3:bb:14:56:6c:a2:7f:eb:ed:
                    e0:d7:d8:f6:49:a6:8f:61:4a:de:b9:39:83:aa:d7:
                    a9:f3:e4:5d:88:15:ec:3a:62:6c:af:e0:ea:fa:b2:
                    a0:9c:a2:95:bd:ef:a5:86:a0:de:c8:dd:b2:25:05:
                    5e:70:37:ac:5a:a4:d1:c9:ed:70:4d:78:60:67:d1:
                    a8:7b:c9:44:82:96:c5:5b:49:96:93:3e:51:a9:78:
                    96:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:96:5D:86:91:D9:B4:4E:84:97:14:62:91:F8:8A:2F:83:73:BC:9B
            X509v3 Authority Key Identifier:
                keyid:79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:53:29:96:20:1c:89:ab:e9:e5:11:d1:bc:08:a0:ec:72:83:
         1c:16:8d:e3:e4:a5:0f:df:70:b2:1c:d3:6f:0d:94:db:d4:a7:
         2e:2c:b1:62:99:7a:8b:6d:86:29:c7:25:fe:12:d6:2d:c8:ce:
         48:92:a9:ee:49:3e:c2:21:13:25:8a:36:a0:d3:11:7a:41:e1:
         90:ca:dc:ff:9a:09:8f:c4:11:bf:20:42:30:fd:c6:32:c4:bf:
         88:70:dc:96:26:4c:a4:cc:ea:b6:3f:84:28:97:3f:e1:d3:66:
         34:b4:61:97:12:7e:5a:07:c1:8e:10:0b:a6:12:2f:11:16:32:
         25:8c:15:08:e6:ec:c0:ab:cc:8a:b8:47:29:48:e1:d6:1e:b1:
         75:29:ad:c9:8f:39:79:24:f2:32:1a:73:16:76:0f:d3:36:5f:
         c6:6f:4c:3d:0b:61:4c:07:cd:7f:83:10:7c:d3:26:45:1c:3f:
         ac:34:5e:1a:3e:e8:20:a5:4a:82:08:e9:89:79:db:7c:08:9f:
         9b:e8:54:4e:f6:26:c5:f0:f8:e7:d1:5c:e1:7e:f9:e2:ed:7f:
         00:e2:50:0b:53:a8:fb:6a:37:c8:11:25:05:69:b4:f0:77:0f:
         62:7a:23:fa:62:79:70:d6:da:ca:8a:da:a2:f8:ac:fd:fb:da:
         23:df:41:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:52 2025 by rpki-client