Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
File:                     6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft (raw, json)
Hash identifier:          Cg30mG2MySTeZuOhaT8wEannPipjDY66vue9O1C0RWA=
Subject key identifier:   03:A9:F4:78:92:2D:E2:C0:B3:DC:E4:8D:F5:EF:A2:A1:CC:D0:4F:2E
Authority key identifier: E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E
Certificate issuer:       /CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
Certificate serial:       019690A7EC0A2DB96BCCD9268FB095A53F95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
Manifest number:          151D
Signing time:             Fri 02 May 2025 11:00:46 +0000
Manifest this update:     Fri 02 May 2025 11:00:46 +0000
Manifest next update:     Sat 03 May 2025 11:00:46 +0000
Files and hashes:         1: 6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl (hash: T+M61UeU1Gisq46nuW5dd0E98jTlrauAIqeahzfE99s=)
                          2: CEi11oDah-Xj3CSyKJ8iomoOYoM.roa (hash: ez/wVHjqJzETmetoc7ih07UD25PAbuMs0U3dxKCFOXE=)
                          3: h_PujoF1idQej6mkI673sMCS4CI.roa (hash: gJAR6zsyEp9IfdpTVmdU+2Uly1ejVeeDkLflgAL2GD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:90:a7:ec:0a:2d:b9:6b:cc:d9:26:8f:b0:95:a5:3f:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
        Validity
            Not Before: May  2 11:00:46 2025 GMT
            Not After : May  3 11:00:46 2025 GMT
        Subject: CN=03a9f478922de2c0b3dce48df5efa2a1ccd04f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:0b:72:cd:1e:59:d7:68:ce:cc:b3:26:bc:
                    95:c3:77:bf:83:6d:19:08:ec:75:4b:cc:89:c7:a0:
                    db:9c:ff:8c:8f:94:25:d3:c9:f4:a6:f9:cb:00:8c:
                    61:c7:48:eb:76:3f:c2:dd:72:0f:91:5a:57:81:9b:
                    e9:e1:16:d4:11:29:a8:3f:42:8c:01:9f:17:fe:f6:
                    1b:97:d0:a6:ab:80:4c:f6:d3:5a:80:cf:48:46:ad:
                    96:68:0e:d6:04:61:62:b6:7d:ab:ff:01:c7:fb:8e:
                    44:76:cb:6a:3a:c5:cb:3f:64:2e:92:d5:5b:61:13:
                    7f:f0:f1:90:d8:25:09:a8:f0:ac:57:88:ab:6c:68:
                    a5:54:18:57:02:5e:38:e6:88:65:2e:81:b0:4f:aa:
                    c6:b2:7b:48:2e:28:68:36:a4:21:a7:4d:89:a9:ba:
                    12:79:ae:f7:c2:4d:cd:79:95:33:8c:6c:b0:49:86:
                    46:23:fa:b5:b8:b0:25:fb:1a:4b:63:5c:f0:e8:0a:
                    1e:ec:08:39:0e:10:d4:df:5a:40:ec:de:f4:65:bc:
                    94:c8:9c:0f:9f:39:25:d0:d4:af:a1:75:c7:fb:00:
                    96:5e:93:e3:59:a4:73:c3:35:28:3a:58:1e:22:ea:
                    96:48:2f:34:0c:dd:11:15:2e:71:a3:a9:1c:9e:93:
                    84:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A9:F4:78:92:2D:E2:C0:B3:DC:E4:8D:F5:EF:A2:A1:CC:D0:4F:2E
            X509v3 Authority Key Identifier:
                keyid:E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:cf:1d:2f:b2:fd:cf:58:da:17:56:e1:da:ae:99:2b:d4:07:
         b8:26:f0:f0:bb:c1:8f:06:5d:41:63:93:ad:73:8c:e5:af:2d:
         24:ba:d0:ed:29:82:b3:33:37:15:ba:a5:c8:dd:1f:24:e9:db:
         68:11:02:71:5c:2f:13:f1:93:7a:bd:fd:e5:9f:43:7a:d3:7b:
         10:70:d8:15:a4:e8:1b:04:5b:57:80:b6:b3:db:53:90:c6:44:
         39:d4:ce:95:a7:06:c7:d7:e9:90:26:4e:5d:54:b7:28:22:29:
         b7:84:e7:28:30:74:45:f1:32:2d:82:73:ce:b5:18:83:9d:e2:
         df:fd:5b:b0:19:12:b4:77:27:69:4d:3f:5c:0f:d5:ba:21:2c:
         4f:45:bb:b5:5a:51:96:01:25:a6:db:d9:4f:3b:00:45:37:3f:
         7e:4a:72:a0:c2:19:e5:38:c7:d7:a9:21:e3:71:b2:db:f1:83:
         df:16:0a:95:40:24:05:32:fb:8f:ff:46:91:c2:ba:27:02:1a:
         14:1a:5a:96:96:90:c5:0f:8d:69:77:83:70:da:73:0d:b3:df:
         cf:d0:a8:1d:09:98:83:b4:87:fb:59:0b:43:f6:03:81:44:be:
         d0:02:70:0f:fb:90:af:b8:9e:34:0c:64:45:73:22:ae:73:27:
         d1:9c:65:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:36:42 2025 by rpki-client