Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
File:                     6sLBr9S97JgFBvoH33yGYtVU-kY.mft (raw, json)
Hash identifier:          HPJ3jxbdEg2+6ZCAsjPUeqBmx69GaG06H9pvXZ4QDXw=
Subject key identifier:   7F:2B:43:24:A0:30:BF:EF:3D:82:5F:AF:1D:1E:87:AB:7F:43:2A:1F
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Certificate issuer:       /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial:       019686C94382E797976BF88FBF3549E0DA81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
Manifest number:          0F4B
Signing time:             Wed 30 Apr 2025 13:00:58 +0000
Manifest this update:     Wed 30 Apr 2025 13:00:58 +0000
Manifest next update:     Thu 01 May 2025 13:00:58 +0000
Files and hashes:         1: 6sLBr9S97JgFBvoH33yGYtVU-kY.crl (hash: 3IWV+9BiAiEnuK6O2O5R1FETjrpu4lWwhx/TyIza0R0=)
                          2: I73UM1nCBWQnJ20aXL_6NYA4pj8.roa (hash: L68T0N8qj7ef7ryDCvyLKmdACJuuoiHt4h0eR0KlZX4=)
                          3: Ia6V3oQfJDjO1qZ0unwCn8VGfRI.roa (hash: YjJMnYScrGxfBSd345nAAnlIHFqBVMEk1HrKUwbMEtQ=)
                          4: McMTko8bQr91a0JpNrnKOvBDV0I.roa (hash: +aOn0BT18FMcBHp4FqjXhcnRXA0IZ5BQanHigZZPPho=)
                          5: Q63VjVLDUPnmuHnw2k7_RU2ecDo.roa (hash: hbZpJJlkwNtwiNGl+GRL8rkQ+0B/zJwYAf2+pY47R10=)
                          6: UgN0cKNW9dNdHdWelhpwDBynnFs.roa (hash: d596rMSRxVyDkNR+qvNV44FN3LGE81IKqHNAerm5Jfc=)
                          7: mTBy0j8EnJsdaUzGVXZ-14s63tY.roa (hash: helve75lh7gtxaq/8CTnY/dxHsO6u+Iv8BV7ge1atis=)
                          8: ohfoQ6PMXyCRqvXL697wq32N2IE.roa (hash: 4Ftq9cImGTnlsG/GFrSW+NEOcfqwWC5dS24FmwyqHJQ=)
                          9: tVnuMHg38Y2y8DClEzJcg-BhRZI.roa (hash: 2bCfD0mgqb/6Lcsm2AyIQ8y1K+w9/t9hgqU4lqbYazg=)
                          10: wrTzzYkG5LOMXtKZWk2jBf3LA_Y.roa (hash: 45WK1sV6GaRDvSfuryou71nLUkmNtAjtTqBWp6wTaJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:86:c9:43:82:e7:97:97:6b:f8:8f:bf:35:49:e0:da:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
        Validity
            Not Before: Apr 30 13:00:58 2025 GMT
            Not After : May  1 13:00:58 2025 GMT
        Subject: CN=7f2b4324a030bfef3d825faf1d1e87ab7f432a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:00:f2:ef:36:96:2b:d5:3a:7a:13:49:cd:c0:
                    2c:1e:e4:0b:50:24:c4:a0:f8:dd:dd:83:1b:94:b3:
                    78:61:8c:60:70:e2:fa:72:43:79:ce:93:87:2a:01:
                    c2:7d:e7:57:2d:b3:9c:7c:1e:7b:27:03:84:08:00:
                    3b:75:09:1e:63:ed:79:9f:55:cc:6f:5d:07:72:29:
                    42:f9:96:7c:a0:f8:cd:8a:27:57:76:df:a1:75:2c:
                    e4:6d:b6:1c:f1:88:31:fc:82:c9:ad:de:2a:8b:5a:
                    67:a6:90:f4:fb:c5:53:de:c9:14:01:74:17:ce:56:
                    28:8f:b3:a0:51:af:7f:11:02:9a:7f:b4:dc:16:ec:
                    0d:da:9d:5f:35:29:5a:4e:f0:72:f0:66:16:1d:7f:
                    fc:82:0b:ad:a5:58:c9:f7:53:8f:8b:8c:35:84:f3:
                    d7:51:75:ce:ce:f0:0e:7a:18:cf:44:05:09:f5:45:
                    a1:9a:41:73:ae:24:c0:b0:1b:29:c3:6b:12:1a:5e:
                    70:9d:b1:ae:b0:23:83:f7:98:ee:01:58:48:97:ba:
                    26:a1:60:66:72:a7:7e:27:d6:de:81:96:f8:81:cf:
                    dc:40:8f:76:be:33:a1:d8:db:36:3e:5d:96:3e:63:
                    b1:1f:6a:a3:fa:ac:1e:03:0d:c2:a5:34:35:c9:ab:
                    f4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2B:43:24:A0:30:BF:EF:3D:82:5F:AF:1D:1E:87:AB:7F:43:2A:1F
            X509v3 Authority Key Identifier:
                keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:9f:b5:54:28:80:25:52:3c:fa:35:86:11:9d:6c:b0:aa:1e:
         35:01:43:3c:57:1b:44:cc:13:9b:e4:24:5d:d5:01:85:10:12:
         3f:97:e7:31:4c:d6:23:22:5a:6b:87:80:23:dc:05:c7:84:94:
         cc:6c:30:b6:c5:6c:b4:d5:42:d8:5a:7d:76:2a:b9:ba:57:31:
         2c:4f:5d:c3:2b:de:be:e2:02:3c:8d:33:fd:ae:2f:26:e4:b5:
         23:79:14:aa:5e:75:b2:9d:a5:18:41:c2:8a:76:93:23:dd:08:
         4b:26:ce:d2:56:18:46:8b:d8:a9:1c:51:06:7b:f4:e0:c5:e5:
         84:ce:70:32:17:66:c4:aa:36:1e:87:2c:82:bb:e1:ab:56:55:
         8c:e0:32:fd:4d:f1:aa:78:ae:5b:bf:2a:fe:8e:96:f5:f4:5a:
         f0:31:63:6a:1e:f9:e1:35:56:f8:c8:8b:e1:9c:45:bc:98:5b:
         70:6e:2b:e6:d2:f1:a0:98:df:97:4b:e6:e5:1c:7b:ec:e9:b9:
         30:ac:09:68:30:9c:ed:03:20:e8:23:f7:6d:01:67:dc:d5:6b:
         88:61:92:fe:c0:00:83:b2:3a:b2:62:93:db:e5:61:0b:99:4b:
         2a:0a:07:ee:a4:91:0e:e2:f0:9f:ba:ae:8c:bd:9d:97:62:18:
         d7:2b:85:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:58:55 2025 by rpki-client