Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
File:                     _6vCNZX9gER9mPXsNRMWG9JHP8Y.mft (raw, json)
Hash identifier:          UmRGZxGCxdoqcHKEKe1gxWeD9/sTwDWgaAL1FB07Wes=
Subject key identifier:   6A:D2:55:CE:E1:02:5E:A7:47:C9:E9:7C:14:3E:C7:87:D6:C9:24:E7
Authority key identifier: FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6
Certificate issuer:       /CN=ffabc23595fd80447d98f5ec3513161bd2473fc6
Certificate serial:       01967868AE3C368E20E64E8F5C2B9BDE0855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
Manifest number:          150F
Signing time:             Sun 27 Apr 2025 18:00:48 +0000
Manifest this update:     Sun 27 Apr 2025 18:00:48 +0000
Manifest next update:     Mon 28 Apr 2025 18:00:48 +0000
Files and hashes:         1: _6vCNZX9gER9mPXsNRMWG9JHP8Y.crl (hash: tE6yV5CFEUI7otsV+xVwzCKTQKZUMlHhoJbz2vWkdGY=)
                          2: n0WE9rwocCHCYcBXCKZfpxQ3G2M.roa (hash: BVGoc++GdN0W0NrCtzzymI9R4sw/BZhgTYZXjkBBFbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 18:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:68:ae:3c:36:8e:20:e6:4e:8f:5c:2b:9b:de:08:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffabc23595fd80447d98f5ec3513161bd2473fc6
        Validity
            Not Before: Apr 27 18:00:48 2025 GMT
            Not After : Apr 28 18:00:48 2025 GMT
        Subject: CN=6ad255cee1025ea747c9e97c143ec787d6c924e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2e:f2:c6:09:21:8e:4e:5e:33:87:86:a9:50:
                    db:42:9e:11:3c:e0:b9:bb:ef:c3:c8:d6:56:d5:f5:
                    eb:b3:68:6b:ea:f4:ea:30:55:8a:2f:7e:a9:5d:e6:
                    57:5d:4d:c7:f0:ac:24:b8:c5:75:25:79:83:b4:07:
                    d4:47:02:71:1e:f1:14:fc:42:44:85:bf:a7:55:02:
                    b2:c4:98:9e:72:80:af:52:25:bf:5b:e0:31:6c:f8:
                    9a:ac:a0:65:8f:b1:0c:ad:1c:29:35:57:1e:c2:09:
                    3f:75:92:e2:52:37:57:4e:57:33:fb:8a:1c:8d:0b:
                    62:4f:00:21:2e:0c:b9:69:16:29:53:75:8d:df:3c:
                    16:a3:fe:86:ab:92:6d:03:09:bd:f8:87:f7:7f:04:
                    2e:c0:46:c9:72:43:68:7f:81:b3:7b:3d:68:70:94:
                    26:70:1f:b5:71:95:13:6e:1d:18:b2:af:7b:60:81:
                    d2:2f:ce:46:b3:0e:e7:37:18:de:cc:8e:36:50:f0:
                    2a:be:65:fe:4e:fc:e2:9e:7f:ab:d3:e7:cd:e3:c5:
                    55:1b:76:47:3a:9c:c9:39:45:11:73:ec:1c:90:ae:
                    47:43:69:1b:eb:89:bc:87:22:96:5d:13:b4:c1:3c:
                    b7:92:98:e6:c3:f6:43:1b:6a:c1:ad:a5:8c:fa:64:
                    47:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D2:55:CE:E1:02:5E:A7:47:C9:E9:7C:14:3E:C7:87:D6:C9:24:E7
            X509v3 Authority Key Identifier:
                keyid:FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:38:e2:eb:1e:a7:3a:f4:9a:fe:39:f4:34:37:e1:24:16:e1:
         6a:5c:23:53:d4:bd:fe:93:b2:a2:b7:df:77:a2:08:b6:f5:fb:
         3c:eb:f1:65:f9:e0:e9:18:a3:e5:c8:cc:47:7a:c3:69:ee:2a:
         4e:03:a0:a9:75:c8:0e:f4:e4:99:51:69:ee:b4:08:bc:e6:2a:
         59:ab:35:d9:9a:d4:49:f1:34:ab:bc:18:4c:45:56:78:ab:e2:
         13:80:15:8b:4b:0f:ae:10:99:b8:6b:48:9d:8b:ac:27:2c:81:
         0a:fd:b4:47:f8:ec:d8:93:f8:b4:e1:af:84:11:61:ed:b8:31:
         90:b3:95:0f:3f:76:fb:51:95:1a:04:98:52:2e:b2:9d:0f:74:
         1a:dd:42:68:c7:96:25:8f:79:c8:78:7d:3b:9f:b9:6d:62:e3:
         9d:51:a8:c6:48:ea:b2:f9:27:94:08:f3:a5:9b:be:c3:a3:c2:
         0a:5e:73:8a:d7:9c:9f:7a:6e:24:99:6c:06:81:da:05:bd:e8:
         58:95:bc:f5:21:d3:9b:5f:77:66:62:a9:2c:2c:2c:fd:5f:10:
         3c:fb:60:ab:f4:e3:23:f1:48:54:49:b0:16:c6:3c:b6:49:65:
         d2:ef:1e:2a:cc:f2:d5:f6:98:7d:7e:88:3f:5e:f3:c9:75:d5:
         1d:ae:57:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:10:51 2025 by rpki-client