Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
File:                     6EA7XkXNWL5fbF0z-lZatJIj49s.mft (raw, json)
Hash identifier:          Q43NbGLWn8oPLll6vOTsH0/kUCDh7XFi7WSV1YF3pTY=
Subject key identifier:   D9:B9:03:E8:E1:E0:E2:11:34:DD:18:0F:15:DB:49:EC:B0:2D:5E:25
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Certificate issuer:       /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial:       0196857F10168E41C39B63424609941ADFB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
Manifest number:          152C
Signing time:             Wed 30 Apr 2025 07:00:18 +0000
Manifest this update:     Wed 30 Apr 2025 07:00:18 +0000
Manifest next update:     Thu 01 May 2025 07:00:18 +0000
Files and hashes:         1: 6EA7XkXNWL5fbF0z-lZatJIj49s.crl (hash: 9rc5izqu3jq0aOw3W9FCk+x6SK5aTqEzXCXIP/gizBo=)
                          2: 8ifx7KKJ18pryNHwF1j4-Fc64gM.roa (hash: VaIkHBJSp4yitHY1eixtkQXqBMvBgkd5WICUJNcd2K8=)
                          3: BO1ltB2867u60oaiDsy_-XsvL88.roa (hash: N3BRFXxAhwO4FPIhN2IGyHjmICRkpQTCZFJQ4I0pqRI=)
                          4: FoWNQ1gpwJC_vJTYQPjNq4EOPsk.roa (hash: y3YmRhUlwwI5SoZwTRIclzEsG8VBx6W5icxmsvJXHic=)
                          5: Q_XBBiAk4qHgl5xyRFCeUl8e3VE.roa (hash: sADh7knGI+0KPR0TD0XBdBdTNm9tN3/eGMw1gHZe2VI=)
                          6: cPczL7BSG5C-UOorLa44AbTPVd4.roa (hash: iC/fXBJJkXo1CbjOzv3JUUnSB7oUYt0rT8G7YWmNXm4=)
                          7: jIQE6oG-USVQsaVIsuMgVZrbPS8.roa (hash: tj3eChM7EThfXzNYj4xO6MKRf71fqyAWWs5gIA5ClkU=)
                          8: nCj-HurrM8I6ZuYeTftMdm0Nisw.roa (hash: f4dhcwMgx6vMMDpRWe3qOH6ZusltLaqZhMj8z/Gm8hQ=)
                          9: wPWSAuQLoLC84i_wxl8zAMN7M_I.roa (hash: AX93UGQS0hHBTCeSbLVGxtGmi8vpmUf8TykhODf8ipI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:85:7f:10:16:8e:41:c3:9b:63:42:46:09:94:1a:df:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
        Validity
            Not Before: Apr 30 07:00:18 2025 GMT
            Not After : May  1 07:00:18 2025 GMT
        Subject: CN=d9b903e8e1e0e21134dd180f15db49ecb02d5e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3d:c5:dd:a2:e4:bf:8e:d6:b4:55:a3:a2:74:
                    4a:10:a4:86:7b:eb:35:b1:d8:1f:cb:d1:8f:17:9e:
                    f0:c4:ea:6e:bf:8e:5d:1f:ce:59:ba:1b:e9:8c:d4:
                    e8:05:08:a9:ca:67:41:ca:86:57:19:8f:78:82:9c:
                    4c:09:1c:0f:47:1a:6e:83:e8:6e:96:54:81:c9:01:
                    f9:0e:f7:b0:71:54:4d:ec:86:0b:10:4d:49:9a:db:
                    77:62:09:a4:0c:84:44:0f:bb:68:a4:97:2c:a0:86:
                    84:db:a4:71:17:03:11:d2:1e:64:76:87:be:32:e2:
                    af:55:06:a8:29:41:68:05:86:c7:d5:eb:3a:ba:ca:
                    e6:d6:77:78:84:6d:40:8a:b7:81:db:82:f8:94:77:
                    d9:02:c4:4b:9e:bd:72:af:2b:43:52:05:e7:48:b0:
                    fe:44:21:56:51:03:7d:dd:41:ba:5a:6b:ac:6e:67:
                    04:5a:dd:0e:66:62:ee:ce:31:b2:a2:9c:c4:39:a1:
                    e8:15:d9:41:08:96:4d:66:c0:87:94:9a:81:97:83:
                    f7:57:da:07:0b:aa:5d:d8:73:ff:af:24:2c:80:53:
                    bb:41:d5:7f:c8:4b:89:72:79:a8:69:9f:3b:be:78:
                    c0:1d:1a:d4:cf:99:99:04:18:fd:7a:bb:5e:3e:eb:
                    5e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B9:03:E8:E1:E0:E2:11:34:DD:18:0F:15:DB:49:EC:B0:2D:5E:25
            X509v3 Authority Key Identifier:
                keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:59:5b:4c:e0:40:07:23:c4:30:29:ee:03:0d:d1:d1:bc:b9:
         2a:7c:70:70:65:0d:fa:45:21:6c:15:e3:ee:c0:cc:de:f6:6c:
         e0:01:67:75:4f:d8:cb:8c:52:b3:77:02:7b:02:d4:28:0e:9f:
         87:9c:94:20:a5:b7:86:4b:e7:f2:0d:2e:c6:a2:5f:08:00:88:
         49:65:cc:ff:82:ec:1e:f9:26:f2:c5:1c:7f:6f:1d:b8:db:b0:
         02:0e:97:c2:5d:ce:47:b0:21:81:dc:dd:4b:38:57:d8:15:7d:
         c7:58:a8:7e:73:a3:2f:37:51:92:6e:95:db:98:3b:a1:7e:7b:
         e0:13:46:69:2a:9e:6c:3b:5c:4e:f8:40:c0:aa:4d:ae:21:9e:
         1e:a8:3c:0c:e6:4c:dc:2e:c2:93:b1:83:94:e8:96:90:94:44:
         c5:7a:a8:01:09:3f:e3:22:83:ce:05:61:21:b8:c0:f3:10:19:
         65:41:7f:f5:e8:1b:35:55:3e:9d:fa:01:55:3e:ff:f9:82:83:
         94:05:75:41:97:c2:63:3f:64:1c:b4:94:44:dd:5c:43:4c:cf:
         4c:ce:1e:a0:26:ac:1e:ae:f5:6d:cf:07:36:94:cd:3b:bd:3c:
         83:21:2e:26:5b:56:bb:b9:1c:b2:34:16:3d:93:7b:96:ea:b6:
         55:71:e8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:01:53 2025 by rpki-client