Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
File:                     6QYQQQz4AUrB2-n2q8yBxmGHr74.mft (raw, json)
Hash identifier:          jAbingPu2wVD27QCmH7O8QaxZ2/IArw99cbf4mtrND4=
Subject key identifier:   DF:6F:B5:84:E0:81:E3:FB:8A:46:3F:EF:95:88:ED:57:A2:B1:A7:40
Authority key identifier: E9:06:10:41:0C:F8:01:4A:C1:DB:E9:F6:AB:CC:81:C6:61:87:AF:BE
Certificate issuer:       /CN=e90610410cf8014ac1dbe9f6abcc81c66187afbe
Certificate serial:       019672664E72E035FCC76BC639179F7AD841
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
Manifest number:          05F2
Signing time:             Sat 26 Apr 2025 14:00:29 +0000
Manifest this update:     Sat 26 Apr 2025 14:00:29 +0000
Manifest next update:     Sun 27 Apr 2025 14:00:29 +0000
Files and hashes:         1: 6QYQQQz4AUrB2-n2q8yBxmGHr74.crl (hash: BLwDpM6EvDN8yolNesvsGDEwxLq/0+UL4cGIRyYaM0k=)
                          2: QhkomV9_6ceJGU8VKTfbtyRNcXM.roa (hash: OB6SsMliHPSapAri1eb5Zi/y08KLAC6vdxvVZUeAlWU=)
                          3: gz7px3LCXwdOhvRIWMGfnzsiLoY.roa (hash: F70BUXb5RkAWoSm6MxaywQeDn9WJDpTvkQ2ap1NhBjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:66:4e:72:e0:35:fc:c7:6b:c6:39:17:9f:7a:d8:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e90610410cf8014ac1dbe9f6abcc81c66187afbe
        Validity
            Not Before: Apr 26 14:00:29 2025 GMT
            Not After : Apr 27 14:00:29 2025 GMT
        Subject: CN=df6fb584e081e3fb8a463fef9588ed57a2b1a740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:df:94:f2:40:37:f1:83:f4:d1:03:0a:60:d2:
                    7b:8d:d7:29:74:ff:a6:07:0c:33:f3:62:7e:d9:2a:
                    e3:fd:ba:c1:be:b9:c9:15:9c:f8:e5:ba:09:c8:87:
                    db:c2:9a:c6:da:60:c7:84:80:6d:7b:99:ce:35:03:
                    f7:8a:0f:76:8a:e2:65:79:9d:53:2d:d5:48:3f:63:
                    ff:46:db:b6:87:a9:05:52:aa:41:99:16:c2:0f:e0:
                    11:63:99:69:11:01:7c:88:81:ef:d2:e0:5d:6b:2c:
                    45:8c:6a:71:90:30:eb:09:2e:33:fb:e2:4d:3c:a3:
                    8e:60:07:b5:b4:85:05:e8:89:78:45:55:54:65:29:
                    d2:17:a6:c7:3e:ed:9c:1d:c7:96:fe:2a:6c:e3:5a:
                    71:d7:90:dd:03:e2:8c:f8:2b:3c:ef:1d:48:0b:17:
                    d1:4f:9f:4a:10:69:f5:b9:b3:e0:9e:45:90:e1:17:
                    5c:39:f4:61:97:73:d4:88:18:db:1f:8c:96:d1:ee:
                    f9:0d:1d:7a:85:9b:ad:51:fa:2e:ef:3c:65:1c:45:
                    d4:54:68:34:ad:1b:d8:6a:19:af:be:5d:70:d6:29:
                    74:da:89:ab:a8:12:74:64:a4:60:36:ff:60:89:68:
                    39:22:84:e1:6f:65:4d:9d:c3:5a:b4:5b:84:e3:21:
                    9a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6F:B5:84:E0:81:E3:FB:8A:46:3F:EF:95:88:ED:57:A2:B1:A7:40
            X509v3 Authority Key Identifier:
                keyid:E9:06:10:41:0C:F8:01:4A:C1:DB:E9:F6:AB:CC:81:C6:61:87:AF:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:58:ee:02:84:b8:8b:e6:c2:b0:83:07:9b:39:12:35:18:19:
         c4:45:19:3e:a0:a9:ce:ba:62:08:6e:0e:e9:28:f6:77:3e:4a:
         28:45:73:b1:12:fd:3b:b6:c8:36:3e:70:78:a5:8d:f5:d4:73:
         2c:06:17:91:99:70:53:10:46:df:6d:12:16:93:d4:fb:54:f9:
         ef:09:e6:c7:ea:a1:8a:3a:90:e0:0e:af:78:b3:44:bd:54:dc:
         31:49:d5:1c:4f:51:24:b7:bd:46:de:b8:a4:fd:2d:2a:ef:76:
         82:7e:a9:26:3b:b5:eb:77:56:a8:87:aa:cd:28:62:21:3e:d2:
         a9:9f:82:b2:66:79:5f:13:8b:2a:24:34:0e:cb:5a:4b:2a:83:
         f6:d9:79:00:52:35:4e:62:01:c3:7e:be:d5:e8:d1:a0:1a:0e:
         43:bd:f9:03:4d:51:ba:b3:24:a7:0b:66:d0:bb:d9:79:b6:a6:
         57:a7:5b:b8:28:9e:7c:63:7c:3a:f3:ae:1e:c9:c6:02:0c:e1:
         ec:b3:4b:91:e8:6b:5a:c5:97:88:09:b7:83:3b:68:b0:6b:92:
         2e:ec:e9:a3:1c:50:b5:fc:c5:bf:42:bc:0d:40:4c:aa:a9:27:
         b7:14:4c:b6:35:a2:ef:c2:94:d5:4a:dc:6a:3a:52:1f:a7:6a:
         4f:54:8a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:14:02 2025 by rpki-client