Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
File:                     6EKPwtpbZWN0nMuZd1d16CC3czw.mft (raw, json)
Hash identifier:          WzABaEubTSdY6aqzOkvfp6dIyhwfsB7h/FSpxWUWmIA=
Subject key identifier:   75:A0:5C:76:F3:41:67:9A:D4:06:15:C7:D6:5E:29:EA:2B:51:89:D2
Authority key identifier: E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C
Certificate issuer:       /CN=e8428fc2da5b6563749ccb99775775e820b7733c
Certificate serial:       019771887B10522DBEBFA3F5BEE89D680D3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
Manifest number:          0FC2
Signing time:             Sun 15 Jun 2025 03:00:59 +0000
Manifest this update:     Sun 15 Jun 2025 03:00:59 +0000
Manifest next update:     Mon 16 Jun 2025 03:00:59 +0000
Files and hashes:         1: 6EKPwtpbZWN0nMuZd1d16CC3czw.crl (hash: DbQQO/ji++di2E0XvAFN+fQ7gZIaehyjx5/DXzmy6SA=)
                          2: LFFuuAaPymw7mrLkEc1dJw_pneU.roa (hash: roCdm0ObDLqCzKMIH+P6b5BVl1CPDBPmD6VmUXfwJys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:88:7b:10:52:2d:be:bf:a3:f5:be:e8:9d:68:0d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8428fc2da5b6563749ccb99775775e820b7733c
        Validity
            Not Before: Jun 15 03:00:59 2025 GMT
            Not After : Jun 16 03:00:59 2025 GMT
        Subject: CN=75a05c76f341679ad40615c7d65e29ea2b5189d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4c:61:1c:72:82:af:24:de:0a:ec:04:05:4b:
                    51:75:fb:4c:1a:c5:1a:eb:31:bf:2b:0c:cd:44:c8:
                    1e:5b:cd:7b:54:a9:77:c0:74:97:ab:d6:10:aa:a7:
                    0a:25:15:17:23:01:b8:a7:7c:91:19:ba:7d:bf:71:
                    aa:8b:27:a6:37:49:bb:ca:84:4e:5a:57:7c:9d:1a:
                    b0:fe:d2:b5:d0:d8:bd:a0:1f:d6:47:9a:1e:da:14:
                    99:b4:4b:cb:f9:88:c6:fa:99:00:ee:16:87:58:4d:
                    d7:26:5d:05:2e:fe:06:d8:e5:25:7f:a1:44:4e:c3:
                    35:49:06:e4:db:e0:e1:36:5b:e0:bf:58:19:18:52:
                    94:ac:0a:89:3a:5d:f0:dd:5f:cc:20:d9:5f:e9:e5:
                    93:80:3a:fa:4e:63:3e:15:29:96:99:4a:d6:09:a6:
                    59:c2:01:a8:ae:96:6c:4c:7f:0c:9b:c1:86:bd:94:
                    c9:15:ef:5b:17:ce:3d:6a:e4:2f:6e:b9:ef:24:7d:
                    16:e4:18:30:a2:00:f7:77:71:94:c3:ac:32:24:2c:
                    b8:4c:eb:ac:43:fa:0e:20:d3:6a:81:b8:dd:fd:e2:
                    68:2d:a1:b1:b4:95:cf:08:fc:5e:29:66:8b:ca:39:
                    de:7e:51:f1:00:a6:4d:88:3d:50:36:94:27:d7:fb:
                    95:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A0:5C:76:F3:41:67:9A:D4:06:15:C7:D6:5E:29:EA:2B:51:89:D2
            X509v3 Authority Key Identifier:
                keyid:E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:8d:cf:c6:e7:4d:16:46:a5:2a:41:5a:78:c3:e1:3b:cd:e3:
         a5:08:2e:ee:11:2d:1b:3e:40:47:ec:31:c3:65:25:f3:0f:95:
         17:cb:f6:46:e4:d7:6a:99:64:1d:3f:71:36:d9:35:81:4c:91:
         33:ed:5e:82:fd:96:2e:ac:48:02:64:50:ec:56:24:a6:f4:c2:
         94:1b:14:fd:25:02:6d:ce:c5:1a:de:13:27:0a:d5:78:75:9a:
         38:0a:a6:9d:d7:86:b9:dc:f4:e7:b4:63:6f:b2:f9:e0:bd:67:
         54:2f:be:23:16:72:fd:9c:e7:b6:ec:e9:91:8e:7f:41:57:60:
         7c:06:fa:8c:51:75:db:c6:e3:de:ca:f7:f5:de:d7:c3:41:c7:
         68:61:d5:1d:fb:f9:ea:7b:f7:1d:dc:f6:c9:42:7b:10:e6:2b:
         69:b3:37:b5:e5:13:6a:75:c6:e2:8d:3d:28:58:d5:be:66:0c:
         bd:e2:94:44:ad:01:13:7f:c9:cb:77:f3:91:13:fb:69:74:94:
         22:25:57:1c:67:05:e7:cd:eb:e9:78:26:40:ca:f0:55:27:2f:
         5c:03:b9:e2:a1:cc:20:3e:b3:15:4e:af:2e:84:9b:96:cb:90:
         b3:6c:00:e5:99:f3:d5:c5:e7:a2:2e:7c:d1:c1:c0:aa:07:00:
         d9:36:e1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:41:35 2025 by rpki-client