Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft
File:                     6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft (raw, json)
Hash identifier:          cpueHkMIEcoE/7Z4TyghdrbzJ8/eYbp9pwqDran4Fs8=
Subject key identifier:   0E:14:23:D7:1A:6F:5C:65:E3:16:89:E8:92:F9:C0:12:B7:CA:47:EA
Authority key identifier: E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0
Certificate issuer:       /CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
Certificate serial:       019684DA29C3C281F530713D2799E76679A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft
Manifest number:          0983
Signing time:             Wed 30 Apr 2025 04:00:11 +0000
Manifest this update:     Wed 30 Apr 2025 04:00:11 +0000
Manifest next update:     Thu 01 May 2025 04:00:11 +0000
Files and hashes:         1: 6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl (hash: Jcs9RKdSyAUzveN9+Ng7VIdAY8g2t3ITC1LV3YTzkjM=)
                          2: 9bzay8DjASkJgeZB2kwc03IZl1E.roa (hash: YnIRrZnkb+ZaEUQ60KogsTVA40VhsogIgFHewsnR6g8=)
                          3: KmjbiHimHyCSJqDdxyTHZkugEG8.roa (hash: Zrhax2xy9NJstkGQJu2b3a8/0keBQS8DGEbXxifWfvU=)
                          4: sRfOMDtXEOJHKDPkg1fl6drHb14.roa (hash: OPssx4HcgdB0D4pn+Z4AVIamXsKn+0ENmWUN4IAnizk=)
                          5: ubczNdByBOFEzjOfXGNUERLx6Wo.roa (hash: tqIV/Xp5is3Az+5RTmCD8At4/sPjG7925jxe55yccsg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:84:da:29:c3:c2:81:f5:30:71:3d:27:99:e7:66:79:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
        Validity
            Not Before: Apr 30 04:00:11 2025 GMT
            Not After : May  1 04:00:11 2025 GMT
        Subject: CN=0e1423d71a6f5c65e31689e892f9c012b7ca47ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c1:2b:44:ff:ef:33:f4:be:f9:f5:7d:36:83:
                    4f:3b:16:c2:09:a1:6f:33:fe:47:bf:36:d7:35:0a:
                    5a:36:b3:58:ef:74:0f:0f:47:1c:99:14:67:ab:e8:
                    6d:47:4e:a7:f8:38:43:3c:91:9c:9e:32:49:a8:20:
                    a6:e3:44:a5:63:f9:2f:a4:22:c3:23:67:c8:5d:5b:
                    2a:7f:b6:59:88:bb:43:d0:cb:1f:d8:49:57:e8:11:
                    15:5d:09:d3:70:88:65:14:c1:e1:8f:da:7d:a5:8f:
                    65:2e:4f:52:1e:10:8a:94:f1:33:ef:15:c1:30:57:
                    58:43:13:2c:7e:e0:c7:45:2a:9a:63:55:60:65:30:
                    03:62:66:59:0b:8a:79:59:d6:a5:7c:cf:55:42:2b:
                    d4:48:dd:fc:d7:1a:40:f8:27:87:a1:19:7a:c9:4e:
                    05:aa:f2:d1:83:91:c7:dd:6f:96:88:24:b8:3c:3c:
                    b6:8f:7e:50:0b:81:0e:24:d8:16:ad:bd:e4:ee:50:
                    ac:53:37:ea:e2:15:7a:8c:c9:9e:d1:45:e9:2d:ee:
                    f5:9b:9a:2a:78:fc:65:c2:90:ea:73:48:ee:12:55:
                    53:8a:07:4f:da:8e:87:d4:a6:c8:00:24:53:92:67:
                    36:53:76:47:08:fc:58:95:c2:ec:97:0f:da:35:3a:
                    00:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:14:23:D7:1A:6F:5C:65:E3:16:89:E8:92:F9:C0:12:B7:CA:47:EA
            X509v3 Authority Key Identifier:
                keyid:E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:b0:b8:ed:8f:d1:5b:91:c4:d0:33:be:64:e4:37:6d:2d:0b:
         ed:3a:59:ad:3a:87:9b:d8:1a:51:d5:7d:c2:fe:70:61:7c:ee:
         10:1f:9c:9f:25:b4:fd:d0:9c:73:bb:a7:e4:38:b5:2f:70:06:
         45:b7:21:4f:ce:4f:63:de:ca:cc:12:1b:cc:bd:37:a3:3a:16:
         d0:e0:be:ee:93:b1:12:2d:cc:eb:67:bb:ba:d5:56:6f:55:8b:
         b5:5a:b3:2b:a0:8e:fd:79:aa:ea:a9:3d:db:2e:b4:4f:4d:88:
         6a:29:0d:18:1a:71:ea:90:4b:52:40:77:55:10:9d:5e:6f:fa:
         d0:bc:be:bb:1f:b6:ec:7f:29:5b:75:60:01:3f:2a:6c:20:4b:
         8a:fa:9b:ea:16:3a:52:b2:5e:a6:b0:7e:23:80:55:88:68:22:
         aa:81:d1:f4:cc:dc:ce:21:ca:03:94:3c:90:33:dd:04:66:d8:
         41:01:f2:30:c7:5f:7c:64:a1:bc:e2:ab:1b:1b:19:7a:cc:e4:
         8b:02:53:57:2f:ef:4b:81:23:b0:11:be:82:88:67:70:e8:6c:
         a0:1a:39:52:6d:49:06:94:b7:4b:5a:27:bf:bb:3c:8a:d3:53:
         a9:a4:be:e0:1c:dc:be:e1:65:0e:a3:47:94:19:31:ad:74:82:
         3b:03:19:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:27:12 2025 by rpki-client