Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
File:                     6HFybEwQPg60LC8Oi12ocz-n7-0.mft (raw, json)
Hash identifier:          Le9Jec3QshhQ2td20ZWt/VfFY/dGHfCjhPC2s+EyvXE=
Subject key identifier:   C4:2F:1B:9F:FA:36:7F:CA:88:C2:49:84:4F:54:F5:2B:73:31:BD:7A
Authority key identifier: E8:71:72:6C:4C:10:3E:0E:B4:2C:2F:0E:8B:5D:A8:73:3F:A7:EF:ED
Certificate issuer:       /CN=e871726c4c103e0eb42c2f0e8b5da8733fa7efed
Certificate serial:       01976F2CD408AA01F983A27B22D36C40ECC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
Manifest number:          1591
Signing time:             Sat 14 Jun 2025 16:01:38 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:38 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:38 +0000
Files and hashes:         1: 6HFybEwQPg60LC8Oi12ocz-n7-0.crl (hash: lo5fj+WtwqHq0uqVFfAStVA23bCuefd4n6rgznrdAek=)
                          2: G6m36SSucA1UgGO9o5M5kLYkkg4.roa (hash: eR6QiaUE2YBEvPQTI4qKJi+HqbeIzWqvNHB7ykDHvY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:d4:08:aa:01:f9:83:a2:7b:22:d3:6c:40:ec:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e871726c4c103e0eb42c2f0e8b5da8733fa7efed
        Validity
            Not Before: Jun 14 16:01:38 2025 GMT
            Not After : Jun 15 16:01:38 2025 GMT
        Subject: CN=c42f1b9ffa367fca88c249844f54f52b7331bd7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:01:fd:2c:2f:17:b1:d9:96:e4:5c:55:54:5d:
                    de:08:68:47:d1:67:00:6c:55:e2:c6:cd:4a:0c:77:
                    e0:b3:45:11:64:21:08:3e:4d:10:f1:6b:e1:57:a2:
                    08:e4:64:ab:60:cd:93:7a:01:99:de:a5:1d:f4:91:
                    ff:cb:c9:2b:c0:f1:38:02:2b:91:cb:2e:d8:6d:b8:
                    9e:0c:96:af:0b:dc:7e:2a:88:50:c3:25:e9:bf:ea:
                    91:70:a8:6f:32:58:e6:a1:a1:af:ce:49:c4:79:c7:
                    ce:f2:52:92:17:7f:46:29:55:c0:c1:b8:6c:d6:f1:
                    2a:18:23:aa:3a:40:2e:7a:d5:ef:c4:66:2d:ba:75:
                    9a:f1:a4:17:3c:05:a0:3c:67:1a:fe:7b:c1:fe:7c:
                    8b:e6:11:91:91:ea:74:1f:64:9a:38:30:bd:9c:5e:
                    a1:02:fc:b8:b8:b0:96:09:4c:83:b2:92:b4:e8:50:
                    93:71:ff:b3:c7:83:cb:a5:e3:7c:7a:8f:c3:a2:2c:
                    36:03:89:3a:f1:97:eb:b7:72:f4:77:b0:49:c7:c1:
                    9b:bb:ae:ab:03:8d:03:04:90:e0:36:5a:5b:99:66:
                    c3:01:33:3e:e1:93:e0:d3:ca:c4:3d:09:b6:21:3e:
                    c9:4e:28:84:64:2b:50:5e:46:17:1e:ce:e0:e6:9c:
                    74:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2F:1B:9F:FA:36:7F:CA:88:C2:49:84:4F:54:F5:2B:73:31:BD:7A
            X509v3 Authority Key Identifier:
                keyid:E8:71:72:6C:4C:10:3E:0E:B4:2C:2F:0E:8B:5D:A8:73:3F:A7:EF:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:67:a4:69:b4:89:5c:f2:ac:84:dc:71:3d:8e:28:4a:cd:4f:
         c0:d9:6e:7a:93:ad:ee:43:74:3d:69:47:33:ff:c4:ff:90:4c:
         36:79:4f:67:d2:cc:35:f1:a1:2a:76:82:ce:5f:42:6e:98:c5:
         ef:17:17:80:16:eb:8e:2d:eb:da:2c:1c:3e:69:4a:66:76:ff:
         99:ad:1d:74:73:b8:1d:17:5e:01:f7:9e:77:e4:d7:06:4b:e7:
         52:d1:84:a1:17:93:41:3f:5f:61:a7:f9:eb:1a:80:7c:7d:9f:
         99:02:f7:b8:a6:61:3e:81:a0:c1:16:d9:ed:f2:36:0f:01:77:
         a4:94:71:af:0c:75:cd:ed:39:df:e1:79:39:07:60:d4:a4:3d:
         7c:02:b6:7e:a7:2d:43:93:bf:d4:25:81:11:b9:48:e6:6c:b9:
         f2:e1:b5:9e:92:ee:4e:83:39:80:65:82:b0:62:3b:9c:5b:18:
         f1:ea:77:06:29:03:22:bc:78:d2:3f:81:90:59:66:14:ce:b3:
         7c:82:df:f9:3b:79:a6:9c:fe:23:6b:d6:97:7f:0f:fb:a9:c8:
         47:31:b1:c0:27:20:da:f1:82:ae:56:6f:b1:f0:c7:0c:3d:33:
         a7:22:14:37:54:99:60:04:ec:91:ca:3c:0c:4d:f4:af:91:35:
         2b:3c:94:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:49:20 2025 by rpki-client