Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
File:                     6MSDt1wtsc-f9OlMeg_fDbAADwA.mft (raw, json)
Hash identifier:          1W7LGOocrjfuSWzLxA7JlwOl6SGsr/m99HBRqVxSRkc=
Subject key identifier:   44:B4:C6:3D:6A:FA:04:BD:FB:DB:79:B0:87:E5:32:7A:BA:4E:83:95
Authority key identifier: E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00
Certificate issuer:       /CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
Certificate serial:       0196789F12376C2CD591A3C81A293CA1E5CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
Manifest number:          104C
Signing time:             Sun 27 Apr 2025 19:00:12 +0000
Manifest this update:     Sun 27 Apr 2025 19:00:12 +0000
Manifest next update:     Mon 28 Apr 2025 19:00:12 +0000
Files and hashes:         1: 6MSDt1wtsc-f9OlMeg_fDbAADwA.crl (hash: 0HT4R2+NOXdAeOgo0wF1xJMVGxKO8t7SozRrlZMcyi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:9f:12:37:6c:2c:d5:91:a3:c8:1a:29:3c:a1:e5:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
        Validity
            Not Before: Apr 27 19:00:12 2025 GMT
            Not After : Apr 28 19:00:12 2025 GMT
        Subject: CN=44b4c63d6afa04bdfbdb79b087e5327aba4e8395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b8:68:11:2a:e0:ff:22:f5:1a:96:75:d7:a9:
                    43:66:1a:39:f8:1c:66:93:19:a1:1f:81:95:48:48:
                    36:2a:8c:55:44:13:02:12:86:06:2d:2f:c4:a3:7d:
                    07:eb:a6:f9:bd:54:f5:3a:4d:a6:21:90:c8:43:d7:
                    8d:13:bb:55:36:a6:8d:b1:c6:cc:4a:a1:e2:2a:77:
                    63:d3:2b:c6:70:94:d8:82:d0:e5:5b:14:b6:b9:69:
                    ba:cb:d1:79:71:d1:21:c1:00:72:0a:0d:b5:76:fa:
                    79:5c:e9:c1:40:9a:79:29:85:5c:db:fe:ee:04:bb:
                    84:ca:59:86:00:00:bc:69:8c:0a:0d:a4:67:e1:2b:
                    62:96:bb:a7:3a:23:42:b3:fe:ed:6f:62:35:6a:62:
                    7e:d3:66:75:ec:d0:5f:5c:a3:d3:49:8e:ca:b1:18:
                    ee:b0:00:fe:58:31:93:b3:50:d1:93:e5:b9:8a:62:
                    79:5e:16:e1:de:d7:15:bf:54:e4:2f:45:c1:d9:1b:
                    ce:a7:da:fd:1b:07:28:d7:5b:04:6a:66:fc:a0:2d:
                    c0:a4:97:97:fc:ec:31:f6:bd:ed:0b:b1:47:fe:70:
                    ec:98:3b:b3:79:fd:8b:1d:5f:eb:8e:0c:44:97:d1:
                    ed:87:db:0f:d6:62:4d:d1:be:e3:93:3c:b1:66:0e:
                    46:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B4:C6:3D:6A:FA:04:BD:FB:DB:79:B0:87:E5:32:7A:BA:4E:83:95
            X509v3 Authority Key Identifier:
                keyid:E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:90:a7:98:f7:12:51:95:72:63:f1:1d:2e:83:23:3d:23:73:
         5e:97:18:4b:d8:a1:74:4b:99:ec:99:ed:41:09:a2:36:aa:d7:
         f7:95:14:d5:1e:9d:26:36:bd:bb:27:a5:03:32:e3:0b:93:ca:
         eb:c6:f5:b2:2a:db:b2:d7:cc:b9:f3:5f:45:c8:6f:72:ce:5b:
         8b:1f:c9:36:3e:ef:10:db:0e:62:ea:5a:43:53:30:ac:fe:5e:
         05:3d:0a:78:02:04:6a:aa:74:10:e1:54:d5:3b:78:c2:27:80:
         cc:fc:e2:4f:25:54:42:68:d1:16:c8:09:ca:90:a4:f8:77:53:
         4c:18:d1:76:e2:37:fa:ec:db:3f:19:1e:20:b0:ac:ba:28:13:
         25:a7:35:89:6a:bc:cb:4f:93:8b:bf:6a:96:0b:90:01:8d:9f:
         43:f9:13:87:40:36:9e:76:b6:d2:03:f6:75:86:d5:0f:53:dc:
         3a:cc:9c:b8:6d:13:ad:27:ce:5a:0d:8a:67:e7:ce:f2:5c:29:
         33:7b:24:79:6b:f5:8c:42:f8:c1:4f:9d:7f:53:31:9f:b4:42:
         f3:ca:c4:c0:d1:26:a5:15:44:da:b2:03:07:15:87:6f:71:cf:
         39:74:da:4b:fb:a9:f5:3c:98:b0:03:ea:ce:20:64:6b:7a:8e:
         30:67:a6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:18:30 2025 by rpki-client