Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
File:                     6po2KjoeqNaaLSY__8GA2rWjgck.mft (raw, json)
Hash identifier:          yleK17ouGEHG9MkgVYqd2+ZADHZvsYnbWkBDFuUUjKE=
Subject key identifier:   8F:C4:4A:D9:A0:BE:74:18:F6:78:34:71:16:1D:57:D1:67:DF:9C:D8
Authority key identifier: EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9
Certificate issuer:       /CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
Certificate serial:       01967C45D1CFC57647C9C61AB528C2FA1A99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
Manifest number:          0905
Signing time:             Mon 28 Apr 2025 12:01:12 +0000
Manifest this update:     Mon 28 Apr 2025 12:01:12 +0000
Manifest next update:     Tue 29 Apr 2025 12:01:12 +0000
Files and hashes:         1: 6po2KjoeqNaaLSY__8GA2rWjgck.crl (hash: ICVByQgFyy4MA2QLF7bkwnIe1SZOcr5ofSdhNoKobIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 12:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7c:45:d1:cf:c5:76:47:c9:c6:1a:b5:28:c2:fa:1a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
        Validity
            Not Before: Apr 28 12:01:12 2025 GMT
            Not After : Apr 29 12:01:12 2025 GMT
        Subject: CN=8fc44ad9a0be7418f6783471161d57d167df9cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4f:66:1f:cd:53:da:c5:5d:58:4a:11:60:bd:
                    c8:ae:90:e6:f2:3e:04:ca:d8:33:c3:b7:dd:b0:c1:
                    be:22:67:46:5b:e4:3e:78:25:90:8d:30:fa:ac:e7:
                    00:36:fc:58:31:af:d6:9e:78:7b:46:37:b2:cb:13:
                    f2:61:36:b0:6e:92:00:60:d5:11:77:0f:da:12:99:
                    d9:64:f2:70:89:2b:26:67:5a:38:fb:0b:ad:a6:ff:
                    69:7a:85:d4:99:a0:c8:19:18:4f:e5:89:b4:49:8d:
                    e3:87:f4:69:12:78:7a:53:8d:36:15:97:43:67:bb:
                    e4:e9:aa:8a:d7:46:75:2a:b8:8b:54:f1:45:86:35:
                    c3:11:c8:14:b4:ea:31:37:ad:e1:90:8d:a1:a1:bc:
                    e5:00:bd:12:8c:5a:fd:06:2a:01:39:61:fb:f1:ea:
                    49:e0:9b:65:99:06:f4:d4:3f:e1:88:21:37:47:69:
                    b4:92:94:fb:84:92:05:7a:ae:c0:2d:37:02:ee:d3:
                    02:23:fc:d7:a9:7f:a7:7e:8b:96:24:2a:82:53:de:
                    a5:60:26:44:d0:06:08:5e:b4:3a:f1:ff:f2:f3:67:
                    fd:18:a9:5a:f1:38:83:4a:99:02:f1:f4:03:8f:a5:
                    3e:77:10:5a:8d:14:f8:9d:60:7b:71:13:8c:c3:87:
                    f1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C4:4A:D9:A0:BE:74:18:F6:78:34:71:16:1D:57:D1:67:DF:9C:D8
            X509v3 Authority Key Identifier:
                keyid:EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:fb:b4:b2:f3:b1:d5:c4:74:b0:63:b7:ab:77:ac:da:78:91:
         5d:5a:42:5c:4a:28:6c:c9:30:d5:b2:73:54:22:1a:a1:8a:93:
         7b:27:9d:cd:ab:e6:e9:4f:60:8f:f0:ed:9d:e2:ae:80:f2:fe:
         0a:0e:b6:1c:ec:00:83:38:ce:c5:43:4a:79:ac:6b:94:11:ad:
         e8:c4:fc:a1:4b:25:30:f9:c2:78:cc:7f:f6:61:6c:f0:8b:31:
         bc:e8:50:8c:69:8e:30:91:35:22:ea:c0:a2:fb:49:bf:8a:50:
         44:63:62:00:bc:b3:10:ac:f0:5f:41:6d:ca:84:ff:f1:68:37:
         14:c0:d3:1e:39:2d:c8:7a:be:f9:cc:ca:c8:51:e8:d9:76:23:
         51:5f:23:eb:48:b2:ce:7d:70:2c:a3:7e:0e:22:33:54:ee:89:
         a4:88:b8:a1:a3:31:04:8d:79:7c:55:6c:f5:0e:56:16:51:0e:
         79:d8:4a:29:03:0b:78:f9:0b:c6:1e:f6:d3:ee:0e:68:f2:63:
         58:e8:1b:a1:f6:8c:0b:1f:03:cb:41:f8:ec:ec:1d:4c:ed:48:
         9b:2d:89:89:b7:c7:d1:75:b3:7e:f7:bc:d1:03:eb:57:9d:d4:
         5b:e4:be:df:22:07:e0:97:7b:70:05:96:f1:c3:ab:0a:6b:7d:
         08:80:75:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:01:17 2025 by rpki-client