Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
File:                     6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft (raw, json)
Hash identifier:          5AZ46up1kgYhhpza82rTR/xyvPIg84RkI9yuI1O93h8=
Subject key identifier:   BC:2C:2A:5E:25:96:F5:EB:52:C6:E7:36:C5:C2:A1:82:9C:85:E0:92
Authority key identifier: EA:82:7B:95:56:D5:40:DA:53:6B:80:46:C6:5F:F9:5B:06:EE:49:63
Certificate issuer:       /CN=ea827b9556d540da536b8046c65ff95b06ee4963
Certificate serial:       0196789F3B71E9222B769A11F2A6C3EC0F11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
Manifest number:          1510
Signing time:             Sun 27 Apr 2025 19:00:23 +0000
Manifest this update:     Sun 27 Apr 2025 19:00:23 +0000
Manifest next update:     Mon 28 Apr 2025 19:00:23 +0000
Files and hashes:         1: 2p40Nc2xaHE8kZlDDAIZtTe36X4.roa (hash: Gggun6qomuBE+OhHHJ4qJm9ChIbCJjaRrYY7HesQ4j4=)
                          2: 6oJ7lVbVQNpTa4BGxl_5WwbuSWM.crl (hash: dne2gHQ++vKfyXl7jVIuw18ayEYzzJjGIQE00g0mH+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:9f:3b:71:e9:22:2b:76:9a:11:f2:a6:c3:ec:0f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea827b9556d540da536b8046c65ff95b06ee4963
        Validity
            Not Before: Apr 27 19:00:23 2025 GMT
            Not After : Apr 28 19:00:23 2025 GMT
        Subject: CN=bc2c2a5e2596f5eb52c6e736c5c2a1829c85e092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7d:0a:19:b2:b7:64:8c:6f:7a:e8:b9:c6:1e:
                    42:fd:fc:64:b3:df:c4:72:16:76:a5:86:7a:0e:d7:
                    f9:af:7b:a5:41:a8:76:6c:f9:18:f2:5b:e7:bb:24:
                    79:92:f7:0d:14:68:31:03:73:15:46:69:b9:1a:87:
                    96:00:62:f0:df:12:4d:5d:1d:d4:03:95:e1:8d:b9:
                    25:b3:14:a7:9d:01:08:e2:b0:5f:ae:40:0e:e1:47:
                    0f:0d:25:59:9b:71:0d:a3:1a:7c:06:37:60:85:38:
                    17:ab:e9:14:c0:06:12:4b:94:96:2e:b8:3b:1c:bf:
                    d2:45:e0:e2:99:a4:60:76:20:d9:75:ce:89:89:64:
                    12:49:08:49:5e:97:c4:10:5d:59:fd:61:00:c5:f2:
                    10:71:dd:de:23:24:90:22:d8:72:ef:51:ac:87:dc:
                    93:cc:3f:c3:d1:5f:89:28:f9:68:49:95:5b:ea:12:
                    2b:d2:66:c5:81:66:6f:63:a6:a6:76:e7:3f:3f:fd:
                    c9:4d:d3:7e:ef:83:00:9a:c9:af:65:3c:74:5c:cd:
                    56:4c:81:45:db:5d:e5:b9:74:87:97:ac:f5:51:99:
                    00:0f:03:26:1e:16:6b:49:47:61:57:26:b2:5f:03:
                    97:bd:ff:1a:f1:9e:2a:66:6e:12:24:31:b2:6d:ec:
                    74:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:2C:2A:5E:25:96:F5:EB:52:C6:E7:36:C5:C2:A1:82:9C:85:E0:92
            X509v3 Authority Key Identifier:
                keyid:EA:82:7B:95:56:D5:40:DA:53:6B:80:46:C6:5F:F9:5B:06:EE:49:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:c9:e1:43:ef:7e:b7:f0:bf:0e:01:f0:f3:0c:c6:0f:b3:d5:
         79:b2:25:38:9e:4f:82:31:5f:81:32:7e:31:7d:d4:14:7d:d0:
         61:19:b2:bf:28:3f:a7:98:c7:a1:d8:f5:b1:a3:ea:69:9c:2b:
         f9:32:b6:1e:40:6b:f8:34:c7:cb:0f:45:0a:ad:f7:34:b1:da:
         a9:2a:4a:65:80:74:4d:1f:83:62:4c:2a:be:31:55:33:fa:6a:
         73:f3:a2:ca:71:46:c1:b8:44:88:45:d1:12:92:20:34:d8:58:
         0e:40:57:48:a8:ad:5b:8c:b2:fb:46:ca:89:9b:22:13:e2:d0:
         c5:ce:f7:a6:01:e8:9c:19:04:2d:6d:ff:8b:46:8d:46:cc:08:
         13:70:85:ce:5c:e9:38:2c:8d:22:62:68:f9:1a:e3:43:3e:fe:
         8b:1b:09:f8:19:a2:14:f1:20:33:22:f9:c2:05:58:d4:43:51:
         01:0d:c0:6c:53:7b:bf:d3:b1:32:04:e3:53:43:d8:97:c8:fc:
         d9:26:33:f6:bf:c8:71:3b:f1:a4:90:b9:33:01:e9:1c:f0:33:
         9c:17:9c:19:2f:e8:78:12:a2:22:db:c8:60:7c:73:ab:a5:23:
         6e:d4:a6:c8:3f:fc:16:f3:ba:7a:f3:3f:14:c7:fc:61:e3:23:
         fe:dd:fc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:58:55 2025 by rpki-client