Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
File:                     6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft (raw, json)
Hash identifier:          v8+J1vMLqtbESTUhAqeWtZeJq/qbqCrFWZvq33uPAzE=
Subject key identifier:   D0:A2:67:34:EA:36:64:5F:F3:42:F6:B0:80:7E:AD:69:34:7C:82:90
Authority key identifier: EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C
Certificate issuer:       /CN=ea501a68d91093e7def2f4e031031d114d43ba3c
Certificate serial:       0197B88F0C7F3B5FB707970DCFC87360A03E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
Manifest number:          1096
Signing time:             Sat 28 Jun 2025 22:01:11 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:11 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:11 +0000
Files and hashes:         1: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl (hash: uCYmlPZ+b7D2GRxZGSkR6qlxcghKLusLRq57hn+8jlk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:0c:7f:3b:5f:b7:07:97:0d:cf:c8:73:60:a0:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea501a68d91093e7def2f4e031031d114d43ba3c
        Validity
            Not Before: Jun 28 22:01:11 2025 GMT
            Not After : Jun 29 22:01:11 2025 GMT
        Subject: CN=d0a26734ea36645ff342f6b0807ead69347c8290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:76:09:41:31:d9:ba:76:7c:d7:be:81:41:7b:
                    18:0e:5b:13:67:15:48:43:b9:9a:b5:bb:a6:7e:79:
                    8f:90:a8:19:e5:55:31:7b:3c:a0:34:a3:39:e9:cf:
                    a3:00:3f:60:f1:79:f7:06:a7:7e:f5:1c:fb:47:a0:
                    85:63:55:f2:de:84:60:cd:14:a4:d2:ac:a6:f4:fb:
                    09:34:52:29:d2:42:73:be:d6:d9:11:ff:86:2f:bc:
                    54:3a:29:07:fb:4f:a6:c0:42:42:be:fb:4e:c4:73:
                    f2:4f:f2:ca:8f:ff:8a:77:9b:be:46:56:7a:78:4e:
                    b7:d7:5b:4e:8a:f7:30:ec:c5:20:72:88:07:a1:2b:
                    3f:76:6d:aa:3b:88:bb:55:24:b9:da:5e:eb:5e:73:
                    2f:ab:c9:e8:08:8b:d2:9d:9b:92:3b:94:d0:c4:8c:
                    7c:24:78:64:e2:91:b6:b0:c3:d9:c4:78:ed:d7:ab:
                    19:9c:de:b6:a7:78:a5:78:dc:1a:3b:4a:09:a2:48:
                    47:cd:be:04:22:69:83:46:89:a4:a7:82:2e:81:96:
                    e9:de:f8:34:35:59:8f:b4:85:be:74:f2:17:ff:48:
                    80:81:cd:09:f5:fc:3a:81:82:0b:ae:e4:ce:7f:b6:
                    46:1d:ad:72:b4:bc:13:a3:f8:cb:f4:69:e0:2d:43:
                    db:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A2:67:34:EA:36:64:5F:F3:42:F6:B0:80:7E:AD:69:34:7C:82:90
            X509v3 Authority Key Identifier:
                keyid:EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:8d:72:0a:f4:d3:0f:e0:cc:f2:9a:c9:45:70:13:c6:2a:aa:
         ad:a8:7a:69:02:18:64:5a:cb:79:fb:ff:30:2b:da:02:75:d2:
         93:df:8c:e2:c2:1f:94:49:88:01:1b:83:c3:4e:6d:6e:fe:e8:
         eb:1e:2b:54:cb:c2:8c:5f:a6:e9:4d:fa:97:4e:b4:20:8c:9d:
         87:5e:db:68:2f:50:39:6a:04:ef:db:2e:02:b3:cb:c9:81:c4:
         e1:59:d5:2d:22:56:8f:74:ed:61:b8:75:a8:5e:2c:c2:da:53:
         9c:e5:75:2a:3b:d6:21:83:54:ff:32:11:df:0b:fc:db:6d:8f:
         d7:9f:7b:41:35:8b:14:59:c8:6e:46:87:49:ee:68:4a:76:bd:
         19:c4:2f:d8:d6:8a:b9:52:1b:e4:00:a3:91:e5:4f:0e:a9:61:
         c1:44:0b:eb:70:0e:c6:80:af:bf:b0:41:be:54:d7:a5:c7:39:
         f5:01:f5:79:53:6c:22:64:63:29:e7:f9:57:2a:b1:33:2f:e0:
         6e:21:33:83:d9:c3:0d:b7:41:ce:28:54:2b:c8:8f:6c:99:50:
         b1:46:e6:ed:77:f2:c2:5f:db:58:f6:49:2d:e0:82:68:e4:52:
         a9:d8:2b:78:31:6f:d2:2e:82:9f:a2:1e:c8:88:61:38:0c:2f:
         e6:5f:5c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:43:13 2025 by rpki-client