Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft
File:                     bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft (raw, json)
Hash identifier:          jLgy5s5xYyZU3KguMo3IgsJR/uv3emPXtheMeqd4yP0=
Subject key identifier:   20:51:23:A4:BA:7B:5B:3C:66:94:B4:51:61:24:FE:F5:15:03:99:E3
Authority key identifier: 6D:7E:A4:3A:1C:47:55:78:7D:49:1F:BA:56:3B:88:81:1D:CC:C5:F8
Certificate issuer:       /CN=6d7ea43a1c4755787d491fba563b88811dccc5f8
Certificate serial:       01977D559B8AEAB0156B0378AF91811E9694
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft
Manifest number:          0604
Signing time:             Tue 17 Jun 2025 10:00:51 +0000
Manifest this update:     Tue 17 Jun 2025 10:00:51 +0000
Manifest next update:     Wed 18 Jun 2025 10:00:51 +0000
Files and hashes:         1: bX6kOhxHVXh9SR-6VjuIgR3Mxfg.crl (hash: OM7+yNJslkL6TIrrNUGldQc4cIU7gtpZ+MJ2+79/S6Q=)
                          2: e_fKzyMGP2BAukkTPFbz9htGhsU.roa (hash: R8piax2BZXmCIRcmiQxJAzyQx3Kr2idqCRP3833Mldo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7d:55:9b:8a:ea:b0:15:6b:03:78:af:91:81:1e:96:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d7ea43a1c4755787d491fba563b88811dccc5f8
        Validity
            Not Before: Jun 17 10:00:51 2025 GMT
            Not After : Jun 18 10:00:51 2025 GMT
        Subject: CN=205123a4ba7b5b3c6694b4516124fef5150399e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:18:b8:22:1c:3c:53:8c:05:68:89:ef:bb:
                    33:1a:ff:6a:b6:d5:cd:dd:a0:f2:f7:b9:b3:b3:ef:
                    5f:3f:39:34:72:5a:a6:0c:95:54:31:a8:86:0a:bb:
                    0e:cb:2e:95:aa:fc:d4:72:0a:9a:1e:7e:20:6e:a2:
                    45:ae:04:37:54:e7:36:e8:03:9a:32:b5:f3:e7:00:
                    35:10:6c:7f:18:aa:a1:38:26:97:f1:1e:fc:ef:16:
                    a6:89:60:00:50:26:5a:9c:7e:01:31:77:dc:f7:7e:
                    5d:bc:c5:89:04:2e:cc:18:e7:53:e3:a0:3e:5b:b5:
                    6a:c0:3a:4b:27:50:ae:38:fd:5f:0f:b3:a7:8d:8f:
                    4c:e4:8f:1b:7d:17:c2:66:4b:63:bf:d1:d6:d2:ca:
                    c4:b7:d1:69:d0:a3:8b:54:0f:1f:81:78:eb:92:3e:
                    bc:ee:ba:c4:9c:04:89:3e:44:98:8b:e5:50:ac:57:
                    dc:ae:78:6f:c2:cf:7b:dd:84:58:13:52:b7:6a:2d:
                    b3:da:38:9b:ec:af:74:fe:2a:5c:d9:e0:93:22:10:
                    de:20:9f:02:bf:e9:1f:86:8c:90:28:c1:cf:a9:a5:
                    78:0a:27:5f:da:22:5d:c1:a6:74:29:25:ba:3a:f5:
                    e6:58:0f:3f:d6:f3:e2:3d:5c:33:33:2a:f6:e3:68:
                    e3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:51:23:A4:BA:7B:5B:3C:66:94:B4:51:61:24:FE:F5:15:03:99:E3
            X509v3 Authority Key Identifier:
                keyid:6D:7E:A4:3A:1C:47:55:78:7D:49:1F:BA:56:3B:88:81:1D:CC:C5:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:62:96:54:d1:ef:43:8a:95:90:8a:ef:6f:f3:36:6d:5f:68:
         70:52:29:9e:ec:ff:83:73:13:f0:97:f5:7a:7d:03:aa:1d:19:
         41:92:58:88:35:40:05:34:51:6c:be:23:de:c5:06:91:67:b2:
         1f:ec:2a:d5:0d:61:7c:56:90:b8:3c:4d:14:7d:b8:e6:19:3e:
         10:bd:12:1d:72:ee:48:8b:f0:e8:aa:8f:ba:a9:66:c5:a1:92:
         bb:f2:fa:75:15:30:93:d4:50:e6:05:3c:5c:88:4b:4f:88:66:
         63:8f:ce:da:e9:0f:aa:bd:b4:0d:80:7e:6a:a1:de:d6:b2:ff:
         47:75:08:14:b7:d1:95:77:cd:35:9c:c7:30:d7:55:37:a2:cf:
         a8:f6:b1:90:aa:fd:ed:c6:5f:38:8d:76:cc:37:4d:1a:d2:77:
         d9:b6:d7:2d:9f:e3:2e:f1:f3:2b:16:ee:72:80:38:c5:0e:eb:
         80:a7:b1:a9:98:6a:51:d3:96:e7:c4:72:65:bf:8f:bf:80:f5:
         e7:54:7e:ca:68:1e:5f:1b:c1:6d:ff:81:fa:35:a3:41:78:fb:
         42:aa:60:dd:f1:19:ff:74:28:8a:b8:62:38:18:15:16:45:40:
         1f:d2:21:4b:d7:61:00:70:7e:83:00:84:c7:82:7b:e5:0d:95:
         76:a9:d6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:52:15 2025 by rpki-client