Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft
File:                     6TGKUZjc0_ysJJgFU4XZryEQprQ.mft (raw, json)
Hash identifier:          g+udX/vEAshdzbhdh7O4G68FyDVdgtIzXMT/lvAytrs=
Subject key identifier:   72:37:28:C9:7E:4D:4A:83:58:C7:57:8E:86:E3:48:43:85:0D:0D:C1
Authority key identifier: E9:31:8A:51:98:DC:D3:FC:AC:24:98:05:53:85:D9:AF:21:10:A6:B4
Certificate issuer:       /CN=e9318a5198dcd3fcac2498055385d9af2110a6b4
Certificate serial:       01967831623F17298E8D937428E241F801F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TGKUZjc0_ysJJgFU4XZryEQprQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft
Manifest number:          0459
Signing time:             Sun 27 Apr 2025 17:00:24 +0000
Manifest this update:     Sun 27 Apr 2025 17:00:24 +0000
Manifest next update:     Mon 28 Apr 2025 17:00:24 +0000
Files and hashes:         1: 1-BVKVQFCRlMAcE96pNTNBcbIG7s.roa (hash: JOxbdIeMTOyk9ZAjY/swAEcMqcgzzQjrBDhzF90m3Vs=)
                          2: 3ZU7hgqFBvs-JOWJ6E4MEbiA2bk.roa (hash: /NMweqecvh0z4jYnenJq1VRlGwr+MOCXPTrSyQD9fMA=)
                          3: 6TGKUZjc0_ysJJgFU4XZryEQprQ.crl (hash: m8nMlPVCbpWC1Vp74LG+SKgmTaSaLkHfAef9FUu3stY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TGKUZjc0_ysJJgFU4XZryEQprQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:31:62:3f:17:29:8e:8d:93:74:28:e2:41:f8:01:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9318a5198dcd3fcac2498055385d9af2110a6b4
        Validity
            Not Before: Apr 27 17:00:24 2025 GMT
            Not After : Apr 28 17:00:24 2025 GMT
        Subject: CN=723728c97e4d4a8358c7578e86e34843850d0dc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:fc:cc:71:fc:c2:2e:14:d4:6c:c6:c3:be:7d:
                    b7:67:a6:de:55:ad:bf:3e:1c:2c:28:48:ca:e7:18:
                    e4:67:2a:84:a1:a6:80:2b:3d:8c:d0:22:b0:dd:de:
                    dd:50:0c:4b:6d:e0:2c:a4:06:33:b6:db:f0:b3:26:
                    37:aa:b3:b7:04:3b:09:86:d3:a4:0e:04:c2:74:0f:
                    c7:0c:87:3b:b6:8f:7f:46:0a:0c:65:bf:6e:fa:ac:
                    bc:06:91:15:ef:44:49:c8:ad:b0:df:2c:c7:98:23:
                    61:e8:8c:87:b9:e7:ce:23:59:7a:40:d8:56:3a:ff:
                    5b:c3:ec:f8:89:5d:eb:db:ed:f7:53:c0:70:77:60:
                    9f:03:85:24:10:0d:13:45:ea:b8:ff:c0:5a:14:bb:
                    3d:54:7e:5d:44:1a:f5:31:27:10:c7:43:ed:a5:70:
                    df:d5:6a:3e:2d:3c:8b:8f:b8:2b:91:2a:77:c7:68:
                    fc:7f:1a:d8:db:8d:7b:b9:88:d9:46:dd:f4:f4:b8:
                    90:46:3c:19:6f:38:7c:e1:89:28:b0:ef:e0:0d:11:
                    80:bb:7d:3d:15:ea:f1:7f:e3:ff:4d:a5:15:fd:99:
                    fa:57:87:d8:41:e8:29:8e:56:45:1b:b2:31:a9:96:
                    ba:6e:d9:7b:2f:a8:6a:27:10:17:9f:ea:63:c6:03:
                    a7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:37:28:C9:7E:4D:4A:83:58:C7:57:8E:86:E3:48:43:85:0D:0D:C1
            X509v3 Authority Key Identifier:
                keyid:E9:31:8A:51:98:DC:D3:FC:AC:24:98:05:53:85:D9:AF:21:10:A6:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TGKUZjc0_ysJJgFU4XZryEQprQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ed:a7:30:c9:57:a4:9e:77:a6:55:76:ac:be:76:98:a2:92:
         b2:a3:0f:af:fd:ae:7f:59:a7:42:c4:30:8d:0a:2f:75:8e:59:
         dc:54:6d:b8:f8:28:d7:6b:35:7f:43:e5:f5:13:a7:75:a3:cf:
         96:50:86:88:84:95:b6:6b:5f:b1:81:15:55:9c:36:95:66:9d:
         6f:02:3f:a9:1e:ea:92:bb:a6:b7:0c:6d:df:b1:df:1c:83:0a:
         5f:82:c5:13:34:c8:3b:ef:82:28:7b:ec:22:5b:c6:0e:da:0f:
         00:18:e6:fe:14:0d:16:f8:45:49:1f:41:42:0a:c1:16:ac:e4:
         75:09:56:14:6f:1b:0f:33:bb:4b:ac:26:ce:58:84:65:a8:ed:
         a2:41:ab:07:1a:49:63:f1:66:b1:c0:11:bc:c9:7f:d9:e8:44:
         d0:9b:75:ab:a1:50:02:df:04:92:bd:97:ff:81:17:1a:11:80:
         65:77:1f:d6:4f:23:8d:86:56:f6:aa:11:f4:e8:e4:af:79:ac:
         ea:61:60:7a:8b:f3:46:e6:c8:5d:41:0b:28:39:22:2d:f6:4b:
         3d:4b:ed:dd:59:9f:6e:12:03:6f:14:03:88:eb:83:90:02:c1:
         b4:15:0b:92:fc:ad:bc:08:82:71:16:0a:d3:75:15:cb:e1:15:
         86:1b:66:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:03:05 2025 by rpki-client