Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
File:                     6IwEdx4r-sj2DxtMnL0JOq_ql04.mft (raw, json)
Hash identifier:          yTURwgh8nppHtoPjVxxpnOCEsJpvwI7xyZpkiw+eNjs=
Subject key identifier:   79:E4:9A:61:00:E7:C9:B8:DB:82:89:9D:F3:E1:3D:51:97:4E:CF:93
Authority key identifier: E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
Certificate issuer:       /CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Certificate serial:       019675D518A95C81DB8590845101D32C35C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
Manifest number:          1464
Signing time:             Sun 27 Apr 2025 06:00:21 +0000
Manifest this update:     Sun 27 Apr 2025 06:00:21 +0000
Manifest next update:     Mon 28 Apr 2025 06:00:21 +0000
Files and hashes:         1: 31Lnqd98aILf2Q9ICfWlWSchBQQ.roa (hash: DcqcrHdJNZRvLJWfvAXOgG6RHZHxR0/3JTue0isYM5w=)
                          2: 4AyXvezl-yqEPm9B7grorGuuaCU.roa (hash: nr0Tbymm5gT2Px5I4yZcmfEB00Mwgpc5V9ZF1AUNTUw=)
                          3: 6IwEdx4r-sj2DxtMnL0JOq_ql04.crl (hash: IyVpohRZDATRdeWiGZiv37gBo1KUYQcHemSJq3ykQR8=)
                          4: MVj_UryY6usDMGQf7jrICRKU9Xc.roa (hash: TvJrrNTxB79t+M5iqPy3C87lEZr00PLUFyfmpQY3E3Q=)
                          5: ptaM1onrhJcKal0fw9HXf-WMHZY.roa (hash: O+DKgB5l1bVNFuSJ+/nDkTvI9UVJFEJCp07K7RKqMQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:d5:18:a9:5c:81:db:85:90:84:51:01:d3:2c:35:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
        Validity
            Not Before: Apr 27 06:00:21 2025 GMT
            Not After : Apr 28 06:00:21 2025 GMT
        Subject: CN=79e49a6100e7c9b8db82899df3e13d51974ecf93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d7:30:f9:16:69:c6:fb:40:ee:0e:65:5c:0d:
                    2b:03:cd:ab:c6:e5:6a:48:86:7d:67:86:35:05:3c:
                    3d:91:ed:f0:f6:fe:28:98:98:39:1d:09:6e:00:04:
                    0d:93:73:0d:23:3e:49:31:00:05:8b:0b:fd:c8:20:
                    77:9b:73:2a:32:c8:83:74:c7:dd:fc:d5:36:d1:4e:
                    d4:2e:a7:90:d4:65:15:1f:fc:39:7f:e9:19:49:85:
                    9c:a4:f5:75:de:dc:1a:4e:10:e7:1f:c6:21:60:10:
                    1c:0c:31:ca:bb:26:e6:1b:b8:61:6f:80:37:7d:c7:
                    3f:a5:25:7d:1d:76:1b:ae:ae:e5:be:cc:80:2f:bd:
                    f6:74:15:95:68:5c:b5:96:ce:a4:e1:ea:59:d0:b9:
                    f1:24:bb:70:18:6d:e3:75:ef:0d:e0:67:75:52:d1:
                    9b:61:68:25:c3:78:de:d7:59:df:2f:19:21:d5:d7:
                    fd:f8:e6:b0:98:58:fc:ce:cd:ef:ec:e0:28:49:4a:
                    0c:6b:34:c3:87:5b:39:71:bd:0f:d6:bc:ba:5e:70:
                    a3:51:96:7d:20:24:84:d7:48:f5:23:32:0e:91:28:
                    57:f5:32:c9:71:21:23:98:dc:db:4c:da:78:c7:cb:
                    51:ef:68:09:b3:a3:a5:d7:77:4c:92:4c:10:36:4a:
                    67:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E4:9A:61:00:E7:C9:B8:DB:82:89:9D:F3:E1:3D:51:97:4E:CF:93
            X509v3 Authority Key Identifier:
                keyid:E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:62:f4:d9:00:07:99:2a:40:c7:bb:28:fe:9f:18:b2:4e:07:
         8a:9b:fe:52:10:ee:ea:23:5e:be:17:b0:09:45:68:96:ee:c0:
         e1:1b:85:58:ca:80:32:6c:56:f5:cb:2d:53:25:43:d0:73:e9:
         f0:9c:7c:e1:83:05:50:74:8a:91:07:88:65:23:3f:2a:71:1b:
         86:38:c7:c6:70:50:f9:18:ee:b4:c7:10:58:c4:0e:a3:3b:ae:
         c1:37:f7:45:ad:ed:00:27:0e:74:9e:34:8b:ca:21:ca:8a:bd:
         39:e4:93:6a:ba:c1:cd:02:1e:8a:89:cc:a2:c9:66:62:84:2e:
         19:89:14:a8:2f:e6:0a:fe:c1:db:9a:aa:9e:a8:02:76:9f:ac:
         7c:1e:0b:db:71:ed:79:96:7c:30:cf:52:dc:f0:48:31:ed:4f:
         dc:61:c9:d3:bd:16:9c:c0:bd:24:aa:11:68:03:e1:46:b0:20:
         f7:01:6d:ad:3d:81:4f:78:75:d0:85:f0:32:3e:2d:6c:9a:1b:
         15:b1:93:52:49:1a:ee:6d:09:de:a3:6f:24:4f:fc:f4:c6:95:
         62:47:ef:9e:ae:fc:3b:03:fb:4c:d5:2a:eb:1d:ff:bf:66:d5:
         de:5d:9d:6c:aa:33:93:63:e6:65:cb:f0:aa:6f:75:08:df:ea:
         ff:a6:51:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:28:57 2025 by rpki-client