Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft
File:                     6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft (raw, json)
Hash identifier:          TvEMeHmO7YGgecwXk2xRH+rIpaqp7xLvCQU26RqXSds=
Subject key identifier:   8B:D2:D5:10:63:48:77:C6:9E:B3:92:2B:D9:DC:60:60:8D:D0:F0:25
Authority key identifier: E9:2E:14:6A:1E:9E:83:B3:75:6F:04:8B:6C:1B:31:E0:FC:7D:20:7D
Certificate issuer:       /CN=e92e146a1e9e83b3756f048b6c1b31e0fc7d207d
Certificate serial:       019778D4D1BBF5A277A521DBA8865BD6B284
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft
Manifest number:          09A2
Signing time:             Mon 16 Jun 2025 13:01:42 +0000
Manifest this update:     Mon 16 Jun 2025 13:01:42 +0000
Manifest next update:     Tue 17 Jun 2025 13:01:42 +0000
Files and hashes:         1: 6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl (hash: W3HeHDu7hl0ke5M67Mo6aVx7VlJUhRzgJ9deD3pZgFk=)
                          2: fz0sJARZZ_TYinSLBp8Y46GRSAE.roa (hash: k5Klk32fNc1hp3soFN9xokf0fk3JpGUEVYNQtXZtdqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:d4:d1:bb:f5:a2:77:a5:21:db:a8:86:5b:d6:b2:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e92e146a1e9e83b3756f048b6c1b31e0fc7d207d
        Validity
            Not Before: Jun 16 13:01:42 2025 GMT
            Not After : Jun 17 13:01:42 2025 GMT
        Subject: CN=8bd2d510634877c69eb3922bd9dc60608dd0f025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:15:99:f7:92:53:e8:05:6e:95:a8:fe:17:29:
                    d8:c5:53:ac:d8:a1:ad:ef:b1:bf:d1:0d:cf:1e:6d:
                    63:a7:ce:2d:66:a8:b6:12:96:b7:49:6b:2b:d5:98:
                    8b:7e:cc:48:17:cb:ee:59:2c:fd:48:9b:c1:24:d2:
                    80:2a:5e:d7:20:57:68:68:aa:67:98:77:e7:44:3c:
                    a8:35:51:d4:7f:07:63:64:96:d2:c6:b8:63:a8:8b:
                    93:e1:67:88:55:60:e0:d9:38:7a:85:8e:c9:f4:57:
                    dc:f9:35:61:82:64:b5:f1:d4:4e:91:b5:da:a3:bf:
                    c5:33:10:df:ad:7b:af:9b:ca:39:e8:c2:1e:fe:b3:
                    57:f2:a5:b4:14:07:62:dd:d4:c3:95:cd:f9:e7:fa:
                    41:12:9d:e8:d5:c8:25:4f:75:80:44:41:25:4f:fa:
                    a8:9a:38:30:22:b6:06:f4:95:f8:be:c5:41:3e:4e:
                    58:19:dd:c3:a7:b1:51:73:9e:dc:e6:a3:46:48:f3:
                    3c:c7:ba:fb:60:fc:7f:7d:22:da:23:8d:66:d7:d9:
                    6f:49:bd:fc:4f:55:ac:77:26:16:37:c9:3f:9b:d0:
                    8c:3e:30:64:82:8e:16:40:a4:81:10:93:a5:82:6e:
                    bc:a5:8f:66:4f:c8:a7:c2:5d:a0:91:66:c9:09:fd:
                    89:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D2:D5:10:63:48:77:C6:9E:B3:92:2B:D9:DC:60:60:8D:D0:F0:25
            X509v3 Authority Key Identifier:
                keyid:E9:2E:14:6A:1E:9E:83:B3:75:6F:04:8B:6C:1B:31:E0:FC:7D:20:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:9d:7e:db:75:1c:03:a3:11:5f:79:a7:32:3d:1b:32:c3:d3:
         00:6b:7e:ca:a8:d4:0e:05:be:b2:c9:be:b4:38:8c:99:8f:61:
         a3:89:73:bc:61:59:38:6a:f2:dd:a9:45:d0:71:be:65:1f:db:
         46:f6:fb:28:ce:d3:b4:b5:58:35:86:0e:ce:0f:61:2b:8f:90:
         16:c6:0b:25:9e:7a:16:a0:a1:16:c8:62:2b:e6:cd:c7:e2:0c:
         95:51:fb:d6:05:64:80:d8:b0:2c:72:9e:cf:07:46:43:40:18:
         f8:48:b2:8b:8e:18:dd:59:70:56:b3:3e:ff:8a:75:30:18:ed:
         7f:0d:be:02:3c:85:1d:2f:8d:3d:2c:68:c9:da:1b:29:77:68:
         1a:89:8f:49:3d:ae:98:0c:5d:9c:92:b6:ac:e6:40:03:b5:c5:
         d2:f7:01:e7:8e:5b:88:9b:29:b8:01:7c:71:5a:c4:cf:07:00:
         6c:23:cd:a9:46:8a:92:f8:ea:18:35:92:5c:28:5f:d3:1e:5a:
         db:6b:4c:06:6e:19:2a:da:11:b9:1c:56:4e:22:2f:4e:cb:8e:
         3e:95:a8:08:d7:b7:c3:26:6f:92:9a:cc:25:e5:12:a1:ef:93:
         89:9e:ef:73:7a:8c:90:80:a7:76:02:8f:2b:3e:89:6d:54:e8:
         4d:1d:53:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:22:19 2025 by rpki-client