Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
File:                     6GvqALV9C5qMrxn23-TdMKT-bEc.mft (raw, json)
Hash identifier:          ZeZ9TXhusG2XNsA00eag9DQrLaKVfWtUpe1jO2SLo3Q=
Subject key identifier:   DE:BA:49:19:C0:90:08:1A:B0:8E:B1:61:28:87:C6:3F:F9:59:52:E8
Authority key identifier: E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47
Certificate issuer:       /CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
Certificate serial:       0197B6A249AD141955361FC19DC5CD5729C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
Manifest number:          0DDC
Signing time:             Sat 28 Jun 2025 13:02:58 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:58 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:58 +0000
Files and hashes:         1: 6GvqALV9C5qMrxn23-TdMKT-bEc.crl (hash: 4lPYnPJ4eJomIt2boqvk3aKfRL9toLNtIyoF32ppA4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:49:ad:14:19:55:36:1f:c1:9d:c5:cd:57:29:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
        Validity
            Not Before: Jun 28 13:02:58 2025 GMT
            Not After : Jun 29 13:02:58 2025 GMT
        Subject: CN=deba4919c090081ab08eb1612887c63ff95952e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c1:1f:6c:30:04:fa:33:a1:7e:2c:6a:fe:4b:
                    c9:0e:d1:d9:06:ba:78:c5:57:f2:8b:cd:49:c0:65:
                    e1:9b:f4:2b:d4:4c:bb:3e:8d:ed:cf:fa:de:97:ba:
                    4c:d8:c2:38:de:c0:59:0b:30:30:36:f5:04:17:4b:
                    9d:37:c8:ab:ea:d5:06:df:48:aa:ca:d7:9c:a7:cb:
                    b9:df:96:d4:8f:91:08:74:04:40:f7:99:86:49:8c:
                    b1:10:98:cf:25:17:8f:58:d2:d3:ca:22:39:14:19:
                    1b:c0:30:c7:e7:a4:aa:90:bb:a3:de:4a:de:59:85:
                    3f:d2:bf:07:1e:f2:3f:f3:5a:41:ac:ac:4f:30:1c:
                    19:c9:6e:33:b3:25:85:f8:53:b9:44:bd:77:e7:2d:
                    cd:9e:25:06:e1:fa:20:8f:37:c5:41:c3:11:5c:4b:
                    2f:15:d3:c2:fa:8a:ff:03:ab:3f:22:17:49:9d:5d:
                    53:8b:7f:96:6d:05:83:e7:2f:46:ac:1b:13:a4:19:
                    59:81:f3:a0:d7:8a:2b:4d:5c:86:7c:3b:93:59:10:
                    f8:40:20:ad:f5:27:c5:3b:5b:61:7e:0a:78:60:3d:
                    32:e9:e6:73:10:d2:eb:56:bf:ef:68:cb:59:26:c4:
                    0c:14:0c:f0:2b:6a:13:c1:3a:b7:21:96:66:0c:e2:
                    22:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BA:49:19:C0:90:08:1A:B0:8E:B1:61:28:87:C6:3F:F9:59:52:E8
            X509v3 Authority Key Identifier:
                keyid:E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:c1:11:33:9c:ca:46:1d:d6:a6:e5:b9:d5:2a:81:cb:68:bb:
         6a:2d:e4:61:8c:fe:8b:37:43:5e:38:f0:32:79:37:a4:0a:47:
         50:14:49:a9:a2:62:e5:64:b2:13:68:17:bc:ff:16:cc:2b:ad:
         37:57:7d:2c:79:31:04:db:d7:fc:c0:8a:a7:f5:e9:5f:98:39:
         4c:a7:a9:9f:3e:3a:51:90:38:12:90:bc:d7:2f:08:a5:d4:f9:
         72:0f:e5:d0:2b:d1:26:32:d2:3a:a6:8b:d3:5c:86:c0:49:62:
         11:d1:be:47:ab:57:98:2c:1b:cc:c5:a0:98:49:31:11:3e:85:
         84:45:93:28:d0:5a:b7:bd:3c:1b:25:19:81:e0:49:01:a0:8c:
         36:b7:4f:b5:44:67:a2:5f:4c:d7:40:66:59:7d:11:af:a2:55:
         d6:8f:78:af:9a:54:3f:a9:cb:51:03:47:59:1e:02:74:3c:f0:
         c8:09:02:80:d0:78:df:b0:b1:cd:50:92:ed:62:d8:0a:d6:84:
         51:c4:e5:b7:55:ad:62:d1:ea:0f:60:0f:12:ef:c6:8e:9e:91:
         4a:b8:35:5e:d4:80:6c:b9:ad:7f:f9:40:a4:9f:17:39:ae:4b:
         ae:2e:8b:f9:c1:da:17:0d:11:99:b4:f9:0c:54:50:80:12:80:
         c2:b8:8a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:30 2025 by rpki-client