Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.mft
File:                     6SnD2lr0FZyTY3duwz3FuscKMk0.mft (raw, json)
Hash identifier:          2TeuPdx5WMmI4VOiLXfMPXS1favxvRTnaMyrwQPxPDM=
Subject key identifier:   6E:97:D6:D9:33:09:4E:33:26:3C:D4:E7:31:EA:E1:34:C1:7F:E1:FC
Authority key identifier: E9:29:C3:DA:5A:F4:15:9C:93:63:77:6E:C3:3D:C5:BA:C7:0A:32:4D
Certificate issuer:       /CN=e929c3da5af4159c9363776ec33dc5bac70a324d
Certificate serial:       01967454F6F6087F310DDEF164180C1E6E7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6SnD2lr0FZyTY3duwz3FuscKMk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.mft
Manifest number:          01AF
Signing time:             Sat 26 Apr 2025 23:00:47 +0000
Manifest this update:     Sat 26 Apr 2025 23:00:47 +0000
Manifest next update:     Sun 27 Apr 2025 23:00:47 +0000
Files and hashes:         1: 6SnD2lr0FZyTY3duwz3FuscKMk0.crl (hash: F+dvrbjthcchetCS8I+y1bYkIWYVndCtutQY9HxnVUA=)
                          2: h7PFRK9JVEjEeYKLwrOpI4thEoU.roa (hash: I2CraLnGlKelMJHEzdxSGPPTjEK/b4QFtKA7mGsY/DE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6SnD2lr0FZyTY3duwz3FuscKMk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:54:f6:f6:08:7f:31:0d:de:f1:64:18:0c:1e:6e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e929c3da5af4159c9363776ec33dc5bac70a324d
        Validity
            Not Before: Apr 26 23:00:47 2025 GMT
            Not After : Apr 27 23:00:47 2025 GMT
        Subject: CN=6e97d6d933094e33263cd4e731eae134c17fe1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0a:42:41:2a:95:0f:ca:54:ad:75:4f:ff:02:
                    2e:5a:67:c5:39:70:36:1f:f3:8d:5d:93:de:74:31:
                    c1:81:a5:92:e8:40:f9:9b:5c:75:ca:85:41:83:43:
                    d9:db:4d:b4:c6:79:f4:d2:c2:ed:16:b7:02:9b:64:
                    46:e5:9e:cb:a3:ca:98:fd:d8:01:46:f9:46:b3:28:
                    db:a3:a7:0a:70:eb:df:45:59:11:17:6c:21:a7:c6:
                    df:96:ef:da:1e:31:3a:3f:1a:1c:02:2d:f0:c3:3b:
                    b1:50:71:a2:14:2d:ed:75:bd:ac:f2:5a:b9:67:18:
                    db:c7:db:d8:09:b2:84:dc:27:fc:08:34:b9:82:b3:
                    56:78:b1:a4:40:17:ff:1e:1d:12:02:c7:13:23:a4:
                    75:0b:93:41:24:0f:f0:48:5b:df:3f:41:bb:76:18:
                    a0:db:23:36:ac:02:d4:4e:ae:68:e0:a3:72:f2:73:
                    1c:a2:67:71:53:16:06:cc:be:a8:09:a5:4a:07:17:
                    cc:17:c7:4a:17:51:2b:51:c7:a0:73:ae:97:c8:68:
                    1c:42:fe:66:20:08:80:cd:f4:f5:c2:17:58:c1:0f:
                    81:5a:c2:d3:60:d7:a7:18:0f:ce:46:9c:eb:e2:e0:
                    ae:3a:a3:f4:1c:bc:ca:8e:88:9f:bf:89:ba:6f:c1:
                    41:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:97:D6:D9:33:09:4E:33:26:3C:D4:E7:31:EA:E1:34:C1:7F:E1:FC
            X509v3 Authority Key Identifier:
                keyid:E9:29:C3:DA:5A:F4:15:9C:93:63:77:6E:C3:3D:C5:BA:C7:0A:32:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SnD2lr0FZyTY3duwz3FuscKMk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:5b:c7:d2:8c:b2:90:c1:66:a6:c5:b0:3e:a3:96:3e:28:c6:
         e0:56:a6:b8:56:e3:88:4c:bf:48:10:13:7a:70:fb:b8:bf:4a:
         c4:f9:30:3c:e2:18:28:b2:05:90:67:1b:8d:c8:37:e1:b0:4a:
         58:5d:29:9e:3d:ae:76:c3:73:26:c2:e0:de:9d:32:1c:40:c1:
         76:df:8d:d5:97:ab:2e:3f:57:00:9e:1d:ec:e7:f0:9c:e3:d2:
         f1:a2:70:c9:4c:ab:4f:40:38:8d:90:cc:10:ed:7f:5a:e1:16:
         75:eb:df:87:cb:78:6b:61:d6:7e:d9:26:ba:41:e5:21:2b:17:
         e8:be:b9:df:fa:b0:f8:e6:e4:09:5c:d4:d9:ed:6b:06:5c:07:
         1c:72:a0:3e:4c:69:a9:3d:6d:3a:5f:74:bf:39:fe:b6:d7:51:
         0f:ff:88:d2:d0:32:ca:a2:f4:3c:fb:4b:aa:23:d1:81:0e:5b:
         45:94:30:0b:69:e9:54:ba:a0:92:f1:5d:46:71:a6:8e:b7:8b:
         c5:1b:cd:96:8b:72:ec:e7:d7:1b:d0:e2:d2:61:46:05:86:11:
         73:63:53:af:4b:12:0b:7b:0c:bb:c6:7c:f4:56:ed:98:65:45:
         98:8b:55:84:12:0e:68:ff:5d:75:ab:64:88:e2:e3:d1:29:b3:
         27:81:8c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:14 2025 by rpki-client