Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
File:                     4e2SJYT2My2woOpx4XX2ql6NN54.mft (raw, json)
Hash identifier:          wm7LHManQpTxw0/fdzs3x5GXsn7HTzjZpf7L1Ghi1tk=
Subject key identifier:   F6:00:2B:A0:EF:75:E8:65:0E:D8:4A:2C:FB:40:A6:E4:2D:9E:58:C5
Authority key identifier: E1:ED:92:25:84:F6:33:2D:B0:A0:EA:71:E1:75:F6:AA:5E:8D:37:9E
Certificate issuer:       /CN=e1ed922584f6332db0a0ea71e175f6aa5e8d379e
Certificate serial:       0197B6A1F419A1DC0662BF7A0F6AC3DB440B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
Manifest number:          06E9
Signing time:             Sat 28 Jun 2025 13:02:36 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:36 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:36 +0000
Files and hashes:         1: 4e2SJYT2My2woOpx4XX2ql6NN54.crl (hash: EK++/kjj73nGvvBwyDfsxZD+Zi9O4dAAfRueMfjDkdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:f4:19:a1:dc:06:62:bf:7a:0f:6a:c3:db:44:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ed922584f6332db0a0ea71e175f6aa5e8d379e
        Validity
            Not Before: Jun 28 13:02:36 2025 GMT
            Not After : Jun 29 13:02:36 2025 GMT
        Subject: CN=f6002ba0ef75e8650ed84a2cfb40a6e42d9e58c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a8:f5:40:9f:36:ed:f0:05:6e:85:58:8a:69:
                    2b:11:14:2c:0a:c4:33:dc:41:cf:ab:ce:a7:65:6a:
                    f8:ab:e7:e5:19:11:93:41:86:9e:7e:9f:bc:f1:a2:
                    d5:95:a3:01:a9:7a:0a:1f:dd:f8:67:33:4a:16:96:
                    91:d2:49:ee:48:c7:f2:d5:b5:bc:52:c6:bf:87:03:
                    60:15:f0:cd:2d:df:8e:29:c9:fb:f5:24:6a:7e:d7:
                    b0:54:57:9c:30:f5:73:13:f0:db:f8:23:b5:31:06:
                    33:7f:cd:0d:31:21:f0:11:53:6b:a4:47:ef:cb:31:
                    a8:1e:c6:a9:39:13:9f:c6:1a:78:9b:eb:6e:73:87:
                    4c:57:73:23:0f:23:61:92:40:c1:f3:1d:1c:df:f8:
                    3d:aa:28:b6:8d:70:ee:c1:53:41:28:2f:79:8f:2a:
                    58:b2:6b:79:e4:0e:72:87:59:2c:70:25:e5:37:db:
                    a2:ed:01:3d:24:66:c3:88:7f:a4:ff:e5:ae:4b:92:
                    89:ba:9a:bc:d9:aa:9a:66:82:83:69:26:a4:c9:c5:
                    5a:78:1e:91:c1:2b:8d:52:5f:84:3a:c8:73:5c:38:
                    7c:d4:f6:36:6d:74:36:b4:2b:3a:2a:43:38:68:c8:
                    b8:d2:32:86:e9:b6:c4:b6:f9:bf:68:de:a1:f1:ea:
                    61:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:00:2B:A0:EF:75:E8:65:0E:D8:4A:2C:FB:40:A6:E4:2D:9E:58:C5
            X509v3 Authority Key Identifier:
                keyid:E1:ED:92:25:84:F6:33:2D:B0:A0:EA:71:E1:75:F6:AA:5E:8D:37:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c1:83:45:e5:57:f1:41:8f:ee:ad:f6:91:26:63:2a:a8:b4:
         27:54:fb:21:87:ff:0c:4d:81:d2:ac:32:1c:90:6e:d4:44:1f:
         77:c0:18:48:55:26:35:a2:87:aa:55:b4:fd:67:b9:10:3f:98:
         54:5e:ee:f7:3e:2f:12:17:c5:20:c0:ba:60:68:af:68:63:d3:
         38:7a:de:dd:d2:11:e6:09:c1:2c:55:8b:99:20:01:54:97:30:
         a3:0a:1e:09:d9:37:f2:e0:ab:94:df:62:59:6a:60:06:e4:23:
         1b:f0:34:3d:6e:67:2f:db:bc:d9:01:2c:3e:2e:35:4a:b7:aa:
         ab:4f:8d:ab:31:3f:05:5e:76:a5:91:b2:a1:04:b5:6d:5f:9c:
         51:a1:f2:dc:65:1c:f5:8e:8a:b2:8f:c9:cd:83:84:17:e3:5c:
         ff:b0:9d:85:fb:d4:dd:d9:1e:36:e1:64:95:cf:e4:58:40:1e:
         40:6c:70:3e:0d:a2:05:1b:2e:44:73:6f:7f:80:5c:98:06:42:
         54:9b:65:4e:7f:68:64:ae:e8:df:37:68:25:d2:4e:72:db:4f:
         38:84:e1:5c:3a:9b:98:c2:a2:bb:61:ed:d2:26:c1:d8:ab:7d:
         d4:1f:33:8b:1e:2e:3e:af:7d:78:5f:5f:07:8f:1f:30:29:44:
         86:6e:bc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:56 2025 by rpki-client