Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
File:                     6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft (raw, json)
Hash identifier:          cguTR07yWSlWNqZJgCLoJG4zCzlLfri3HjAz9NXFFwE=
Subject key identifier:   70:38:18:35:96:DD:8A:DB:5C:95:55:F4:C9:3A:CD:28:67:53:DB:D6
Authority key identifier: E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1
Certificate issuer:       /CN=e994e74064158e97904990947510eb9941986ca1
Certificate serial:       01977865D7333C1E109C214B4C4A3A95225D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
Manifest number:          0530
Signing time:             Mon 16 Jun 2025 11:00:29 +0000
Manifest this update:     Mon 16 Jun 2025 11:00:29 +0000
Manifest next update:     Tue 17 Jun 2025 11:00:29 +0000
Files and hashes:         1: 6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl (hash: KyU1bFpKbYVqF/NnovBTQerA7zJ+ca8sNzOlEWeujTQ=)
                          2: ADjr28xDnqYwCSe2YSx596u1Q58.roa (hash: ny7Wak3ibQOHmIHDaed11LtkQKFtuzxAsC/NXeIXupI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 11:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:65:d7:33:3c:1e:10:9c:21:4b:4c:4a:3a:95:22:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e994e74064158e97904990947510eb9941986ca1
        Validity
            Not Before: Jun 16 11:00:29 2025 GMT
            Not After : Jun 17 11:00:29 2025 GMT
        Subject: CN=7038183596dd8adb5c9555f4c93acd286753dbd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:01:fd:d1:96:91:0f:81:8d:8b:88:3c:64:
                    66:ed:82:c6:24:48:4c:1e:9c:58:96:84:16:98:8b:
                    fe:8b:77:8a:8d:c1:76:7a:19:ec:82:f0:4d:6a:b0:
                    5b:2d:35:92:f3:c6:3d:ed:ac:24:8d:4d:42:d6:76:
                    83:8c:90:e1:07:1f:55:87:77:17:53:bc:40:2f:04:
                    67:f9:3f:17:d6:5a:f3:8b:d1:10:17:9b:32:b6:d6:
                    7b:4f:cf:86:fc:1a:db:69:8f:4d:ad:24:c6:93:af:
                    dc:f1:f5:cb:13:1c:c1:e7:97:75:94:5b:38:ea:ad:
                    4d:4d:9b:94:14:b6:f5:ca:ee:42:3d:c4:67:b3:6b:
                    0a:4d:d5:f8:49:e7:21:64:61:3e:c5:bb:02:a1:33:
                    a4:14:6c:6d:90:38:1b:11:3f:03:3e:80:31:cb:44:
                    dc:d2:32:3e:a2:5e:af:dd:a0:55:dd:7a:ba:7c:ee:
                    9a:b3:0b:4f:05:9b:7b:ed:0e:9b:0d:44:6e:50:42:
                    ab:2c:68:5e:b6:a4:71:e6:c7:d4:00:9a:cd:d4:34:
                    70:0f:a1:a1:8b:c8:6f:2a:b2:1c:d6:11:56:bc:bd:
                    f2:60:9c:9d:d4:f6:b5:6f:5d:d3:4a:4e:f3:93:e6:
                    57:3d:2a:8f:94:ff:5c:59:7d:52:9d:2c:6b:46:82:
                    3a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:38:18:35:96:DD:8A:DB:5C:95:55:F4:C9:3A:CD:28:67:53:DB:D6
            X509v3 Authority Key Identifier:
                keyid:E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:42:cd:f0:54:c3:40:79:71:df:ea:85:ef:36:08:b5:4f:cc:
         4d:aa:fd:ac:8e:a7:22:7d:92:d1:ec:73:e1:94:ad:cf:df:4a:
         98:a7:36:ef:24:00:d4:ea:fc:8a:a6:3d:af:4f:91:c3:90:48:
         59:30:41:65:27:5a:87:de:03:89:3d:a6:22:13:f2:9c:20:c2:
         72:7f:89:5d:e7:c2:06:2c:b7:39:46:3a:ed:71:cf:44:4f:8a:
         9a:ae:9e:30:be:33:12:d3:c8:dd:31:e9:af:02:99:5d:61:38:
         53:8d:2b:d0:24:38:91:d3:b7:c2:d7:29:fe:00:00:8d:be:ba:
         c3:54:58:7d:00:b7:3d:ac:b3:63:cb:2a:9a:d4:5e:8c:42:2e:
         2e:86:7d:f2:8f:81:be:2b:8e:03:95:7d:41:6c:5b:51:49:61:
         de:eb:74:01:47:9b:7c:99:c6:81:3d:9d:d7:4a:05:f7:3e:7f:
         35:d7:2a:01:4c:0f:99:ad:9d:ce:06:49:e6:5d:96:b7:b9:52:
         6f:78:4c:28:08:79:93:3b:06:4c:b4:65:25:65:e7:16:be:90:
         53:5e:01:13:a9:b7:dd:c4:7e:ed:60:35:f3:52:18:40:02:1b:
         44:8c:84:f0:c8:09:f7:ea:3c:52:f5:4b:f2:c9:f7:a8:f2:6c:
         b1:7f:7c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:53:10 2025 by rpki-client