Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
File:                     B6WU0muI6GkdHYGGAjtp6_GNH-k.mft (raw, json)
Hash identifier:          nAjve1z6ez8i9LvXWEBUWeaQikQrb+q8CG8se04h5lg=
Subject key identifier:   0D:0C:C7:72:75:4B:12:4C:7E:0A:07:2D:44:45:4B:98:C3:72:CF:B6
Authority key identifier: 07:A5:94:D2:6B:88:E8:69:1D:1D:81:86:02:3B:69:EB:F1:8D:1F:E9
Certificate issuer:       /CN=07a594d26b88e8691d1d8186023b69ebf18d1fe9
Certificate serial:       0197B745A42F94BE8B5D2DAD5505ADC16F15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
Manifest number:          15B2
Signing time:             Sat 28 Jun 2025 16:01:23 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:23 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:23 +0000
Files and hashes:         1: B6WU0muI6GkdHYGGAjtp6_GNH-k.crl (hash: Y8cD4y5dPFFYYIWio79Jy7O0g9vEbjtNznGJG6sYzno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:a4:2f:94:be:8b:5d:2d:ad:55:05:ad:c1:6f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a594d26b88e8691d1d8186023b69ebf18d1fe9
        Validity
            Not Before: Jun 28 16:01:23 2025 GMT
            Not After : Jun 29 16:01:23 2025 GMT
        Subject: CN=0d0cc772754b124c7e0a072d44454b98c372cfb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:4a:bf:26:86:13:f4:ed:fc:03:3a:20:93:aa:
                    39:7b:dd:b4:6c:7f:73:ce:9b:7a:b4:b3:e3:6b:78:
                    63:5f:05:f1:f4:0e:f1:34:54:9d:f8:cd:46:ef:1c:
                    71:a5:47:76:31:f7:f0:8d:fe:78:7b:a6:50:83:05:
                    64:6c:ed:c4:3e:72:6c:21:1e:14:16:21:99:52:e7:
                    fc:2b:0e:43:73:2b:55:3f:64:01:31:b3:1d:b4:51:
                    25:33:47:d8:b2:7b:cd:23:14:9c:8b:4b:c3:d7:29:
                    20:2e:86:a7:ad:20:a5:56:21:f5:bf:b2:b6:4e:32:
                    af:91:19:4f:0d:18:6e:04:cb:21:66:aa:b3:be:82:
                    89:db:05:c3:a1:4b:9c:36:23:f7:ec:c8:5d:a1:b8:
                    16:fd:f5:9a:12:84:81:49:de:d0:31:21:cc:48:82:
                    76:3b:05:14:2c:65:99:55:66:60:41:7f:66:f1:13:
                    c2:0d:9f:8a:f6:2d:ae:5b:b0:00:95:5c:2d:fe:14:
                    0b:cb:0b:55:e0:8c:e4:4e:d2:19:8e:c8:72:0d:a7:
                    16:5a:55:2d:b5:68:14:1f:28:1b:3e:b8:9e:d9:8c:
                    4e:8c:37:12:63:d2:e0:c1:88:40:9a:e1:d0:21:dd:
                    e4:8e:da:82:41:87:1b:fe:4b:c9:d0:e2:e0:6f:e9:
                    9f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0C:C7:72:75:4B:12:4C:7E:0A:07:2D:44:45:4B:98:C3:72:CF:B6
            X509v3 Authority Key Identifier:
                keyid:07:A5:94:D2:6B:88:E8:69:1D:1D:81:86:02:3B:69:EB:F1:8D:1F:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:05:f4:52:6a:ed:e2:64:99:9d:37:ac:d6:7b:02:63:04:e0:
         c9:78:1d:db:6f:11:c4:67:96:41:18:2d:10:15:b4:c3:82:fd:
         8e:54:c9:da:3e:d8:6f:bb:55:f1:0d:6e:6a:ae:b0:2e:24:aa:
         fc:66:33:a5:7c:37:51:de:b7:d8:b4:18:66:f2:19:a2:98:2b:
         ce:5d:18:be:42:8a:4c:71:61:6c:c4:1c:3c:37:15:27:5d:fa:
         2e:84:dc:b8:af:a3:72:19:98:5c:76:be:c1:9f:e3:7d:39:85:
         6e:04:6c:a3:e1:2a:f8:21:3a:f3:61:64:6e:fc:56:c5:09:f0:
         75:64:fd:d4:f5:ab:7e:08:3f:80:c6:cf:01:b0:4b:c0:8e:13:
         e7:1b:4c:d2:25:32:72:af:79:f4:3a:e8:ab:b6:e4:80:7c:b5:
         25:a5:8a:c6:20:8c:db:f5:c9:d2:15:91:b8:07:49:58:ae:95:
         2b:8d:6c:78:f7:f7:30:3f:82:03:25:2a:73:ab:b4:0c:76:d4:
         d4:b8:6d:5c:04:af:6a:01:9f:b3:b3:5d:5f:b2:5d:18:f6:82:
         0d:1d:1c:06:ea:9e:5d:9a:ff:2f:89:ea:7e:aa:03:73:4e:06:
         ba:0d:5d:e6:01:3b:2b:5a:e7:bd:c4:9b:42:69:5f:ea:13:19:
         c6:2f:de:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:57:53 2025 by rpki-client