Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
File:                     6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft (raw, json)
Hash identifier:          rAfqFo5GB9p3mfomkGlVMWa5YmDUgItHW7hMAMwrlF4=
Subject key identifier:   A6:54:8A:5E:B2:30:8A:C2:7A:16:06:1E:02:41:D1:31:95:48:9C:AA
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Certificate issuer:       /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial:       0196730AE3F21191F98CF60486C5ACD098DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
Manifest number:          73
Signing time:             Sat 26 Apr 2025 17:00:15 +0000
Manifest this update:     Sat 26 Apr 2025 17:00:15 +0000
Manifest next update:     Sun 27 Apr 2025 17:00:15 +0000
Files and hashes:         1: 6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl (hash: ZtV5Z8jBwCLnf0CpcUqJaa5MvSEvULmchf3cFc4tNC8=)
                          2: D2lTuKkaihmC2cT7NERa5qSvcd4.roa (hash: RpB2FyxyA/hsoWo7OmImdgwSwJYzZl/vHUqeUb6pNT4=)
                          3: GzCf6eer-0KJGSOeGO_GMefOjZo.roa (hash: JaQqkGT/EuzyZjXMN8QEs56lhsj8e8xWE4PqIQSZNSY=)
                          4: Hqc62MqaiR1ENBvYXYbBphPGFN0.roa (hash: 4i8o9r31Hh5HW+0+aK2z52UE4F0xdqPSMZVRQXOPULo=)
                          5: K8JAHLn3KSgfA6BNl7r1JS984KI.roa (hash: LSiwfsQXMGZVIf1O+jJBxpxI9iVl0ERczCYHt8w0SU8=)
                          6: LrhN4oYSKiTh8G0upF9-sbL8vNw.roa (hash: ZHZWzvwh1ced3ccwuBDiUqK6cHiuqcXgScCLZ6103I4=)
                          7: MGKJpERDE2jnyWueLH30KtbVtvg.roa (hash: 1ThnV+vZEowhnC8JJvBU7EgcOXPtpnTjvVoY61XcB6A=)
                          8: VmIiz7Cnwt8QdQZXsSuJ63A6JhE.roa (hash: VRDLvebsgzN2IopaBRSitbLUQukOe2HbgDWn6E5mzfg=)
                          9: WMdxeCDdDNwc6ymADw8SdQ5SXqE.roa (hash: PgvSeWtg+mLsxBE/P2tTl00AaGi2pSNp8OAj3D57rx0=)
                          10: ntpBaRwHShDbrLZ5pbZfArqQspA.roa (hash: 2Y+EwOeNgS+qK9hzRLLOCEoXJCepKfijfXi8Vyoba10=)
                          11: nytPIUYQ48QhDLlfVIi6pB18SwQ.roa (hash: 3LFgebPoNXiMAwsZ07ED/DZ73Cy6wJRysoaaEC5cNnA=)
                          12: tPH78P19OMyg8GNH0L_VBBgKycE.roa (hash: lwoKVsQS8cNkbPndBQpdH6UBk/fM9ynr6BdoedkZHAM=)
                          13: v5gv7oTWjIuVa1Yqf7whGc0SKGg.roa (hash: iWPDt7P0zADL3HzbERUHmzurGxkuTYnzNn29hWm+GdY=)
                          14: vYFd8PA0YadUvoZOf5GnUFTlGKg.roa (hash: LwvSvFPd1tZvuor2quDZg75Xtv6mx5QL0g9reG8ijGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:0a:e3:f2:11:91:f9:8c:f6:04:86:c5:ac:d0:98:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
        Validity
            Not Before: Apr 26 17:00:15 2025 GMT
            Not After : Apr 27 17:00:15 2025 GMT
        Subject: CN=a6548a5eb2308ac27a16061e0241d13195489caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:61:e2:5d:76:71:cb:65:a7:f1:a1:53:fe:9e:
                    22:f2:e3:db:75:67:67:f5:79:8b:cc:4c:87:2a:3a:
                    96:eb:a6:9f:c1:16:dd:d8:ae:db:75:65:81:ef:c2:
                    71:d2:f1:31:c5:de:27:46:92:5e:eb:c1:5d:15:57:
                    d7:62:a2:20:5e:ec:7f:ac:73:6f:6b:67:92:a9:98:
                    eb:55:2f:49:84:25:b2:7f:c0:19:71:d2:8e:75:29:
                    09:e8:f7:b2:ba:30:a8:92:7e:f0:a7:49:00:ba:6e:
                    07:13:5c:45:b5:ac:81:60:0b:06:5c:44:42:53:08:
                    ce:79:1c:33:83:4f:f6:f4:2f:3a:05:5c:6e:ee:30:
                    07:0f:a2:12:08:18:fd:8e:35:8b:4b:2d:fa:76:50:
                    e5:2a:57:bb:19:e8:fb:16:55:3d:4c:e2:38:7d:11:
                    e3:84:2c:fe:13:19:45:84:50:7e:88:1f:1b:ec:d8:
                    11:22:2e:ad:37:74:79:c0:bd:13:2d:b2:3d:f4:f7:
                    6b:1d:41:1b:d9:44:cc:8e:a3:d3:0e:a5:94:51:12:
                    89:93:02:9a:62:49:7e:15:44:2d:1f:ae:84:4f:ac:
                    4d:27:ad:14:03:96:da:8d:82:d5:50:48:61:d4:37:
                    08:25:87:88:71:c4:b2:f0:e0:5e:79:51:d3:cf:bd:
                    41:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:54:8A:5E:B2:30:8A:C2:7A:16:06:1E:02:41:D1:31:95:48:9C:AA
            X509v3 Authority Key Identifier:
                keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:a2:87:ba:a7:3e:3d:e8:72:6d:b2:18:a7:d4:24:15:b5:78:
         59:1e:e3:1c:92:d9:40:b0:a7:f3:cd:c6:51:c0:f5:5b:8a:09:
         38:2b:0d:fa:29:93:3f:91:b2:e6:60:ed:2d:28:cb:27:24:e5:
         02:ae:6c:7b:97:89:09:34:01:a4:2b:39:a5:ac:26:21:ec:96:
         1a:5d:00:87:91:2e:82:13:2e:bd:93:b2:d1:89:bf:e7:cf:9d:
         92:91:b5:d4:13:65:11:fe:0e:ec:1e:cf:7e:52:fd:b9:bc:89:
         cd:3e:57:0b:b4:1f:e3:af:45:4e:c9:ef:4b:43:25:d2:f0:75:
         ad:78:e5:c3:b0:95:44:94:aa:ad:62:86:35:d1:c8:0a:9f:8d:
         ab:28:16:97:fc:36:94:1a:f0:fb:f0:6c:79:3c:f2:03:24:e6:
         5b:4c:cd:85:b8:03:15:2a:2a:1e:c3:b8:53:54:6e:3e:21:37:
         79:ae:c7:51:80:2d:be:f5:b2:39:ce:94:1b:0a:f2:be:bd:9b:
         4a:7e:ac:03:26:f6:54:59:0d:43:2b:e2:bb:93:b9:bd:84:93:
         e2:79:3c:c6:e4:d8:ec:a9:88:9b:ed:ce:c9:74:a8:35:9b:4c:
         ee:b3:05:c6:71:86:d3:f5:22:30:39:f4:37:e3:17:08:24:4a:
         8f:78:34:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:13:13 2025 by rpki-client