Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/6b4YGqvbGVUTomxntiHimGgY0D0.mft
File:                     6b4YGqvbGVUTomxntiHimGgY0D0.mft (raw, json)
Hash identifier:          UU7ehB8i3cqzphv4xuTQX6JGDqOEbZGMhnDMFpVnmqw=
Subject key identifier:   AC:C7:5E:53:E2:1F:FA:B3:0E:C8:97:D5:A3:47:9F:64:10:C5:76:97
Authority key identifier: E9:BE:18:1A:AB:DB:19:55:13:A2:6C:67:B6:21:E2:98:68:18:D0:3D
Certificate issuer:       /CN=e9be181aabdb195513a26c67b621e2986818d03d
Certificate serial:       0197B9D8D960F6E6C0254280086DFA499E19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/6b4YGqvbGVUTomxntiHimGgY0D0.mft
Manifest number:          0B22
Signing time:             Sun 29 Jun 2025 04:01:25 +0000
Manifest this update:     Sun 29 Jun 2025 04:01:25 +0000
Manifest next update:     Mon 30 Jun 2025 04:01:25 +0000
Files and hashes:         1: 6b4YGqvbGVUTomxntiHimGgY0D0.crl (hash: iZoVjvr/uijIFro/mUG4fQtcFC+57BcTLSK0QgRXO2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/6b4YGqvbGVUTomxntiHimGgY0D0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/6b4YGqvbGVUTomxntiHimGgY0D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:d8:d9:60:f6:e6:c0:25:42:80:08:6d:fa:49:9e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9be181aabdb195513a26c67b621e2986818d03d
        Validity
            Not Before: Jun 29 04:01:25 2025 GMT
            Not After : Jun 30 04:01:25 2025 GMT
        Subject: CN=acc75e53e21ffab30ec897d5a3479f6410c57697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8e:0a:92:e6:21:c1:5b:e4:24:5d:c0:0b:3c:
                    f3:8c:36:13:3d:3f:2f:c2:3d:62:64:ab:15:87:ac:
                    81:f2:fa:fc:19:3e:f0:74:4e:0c:29:df:33:46:4e:
                    c3:92:23:9e:0a:e3:6d:db:5c:eb:0b:91:fb:2d:2e:
                    0b:e6:83:0c:a3:88:24:13:9c:6a:75:3e:60:55:a3:
                    af:8f:2f:8d:79:64:55:9d:3c:4b:58:71:65:11:6c:
                    d9:c9:f3:21:ee:81:bb:ba:a0:83:68:14:18:fa:68:
                    70:7f:1a:8a:94:e8:4e:1e:3e:ac:9f:e2:1b:ee:4a:
                    c4:3e:5c:65:6b:7c:3a:0b:ae:6c:38:59:be:fd:4b:
                    0d:bf:4d:ef:af:d3:8c:f8:9d:65:2b:58:61:7a:44:
                    ca:09:39:c1:9b:e6:d0:8a:54:c3:be:a0:88:4b:98:
                    65:94:2a:44:2c:55:e9:4a:67:3f:ca:12:20:a5:bb:
                    ae:84:f8:7e:69:f9:88:7d:b0:e5:07:35:c0:20:76:
                    83:02:b0:27:b6:da:54:94:04:e3:a0:22:c5:d5:6e:
                    b7:62:80:e4:7a:c5:8c:f8:31:ee:de:de:b8:af:22:
                    85:82:c3:c1:41:dd:09:2f:eb:2a:8f:20:55:b4:17:
                    3f:4d:29:5a:2f:7d:f8:38:91:3e:f3:9e:5b:f1:bf:
                    df:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C7:5E:53:E2:1F:FA:B3:0E:C8:97:D5:A3:47:9F:64:10:C5:76:97
            X509v3 Authority Key Identifier:
                keyid:E9:BE:18:1A:AB:DB:19:55:13:A2:6C:67:B6:21:E2:98:68:18:D0:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/6b4YGqvbGVUTomxntiHimGgY0D0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/6b4YGqvbGVUTomxntiHimGgY0D0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f0:63:eb:fa:e5:a5:72:a2:77:b1:64:df:82:35:48:46:4c:
         89:97:ba:5f:d1:fb:08:4e:0d:13:2a:c0:07:ea:e7:d2:1c:f7:
         2d:bd:3d:c9:42:2b:02:6c:08:94:d2:56:f9:fb:c4:f8:98:61:
         14:b8:10:e8:43:81:92:b3:fa:f7:c0:a0:ef:2b:45:17:cd:32:
         3f:bd:8d:12:5e:2f:bf:b9:47:4a:9c:43:d8:8d:a0:75:87:de:
         48:a4:79:35:b5:38:cc:89:20:af:82:3f:c2:c2:9b:4e:e6:15:
         9a:c1:a6:a6:a0:ff:16:40:68:ba:22:b3:f2:56:e9:da:5b:81:
         3f:06:41:5a:c8:06:68:26:f3:e4:00:7c:e4:fc:05:7d:f5:97:
         e1:be:33:d6:db:3c:7f:bb:a1:86:27:01:6c:31:f1:6f:34:47:
         74:04:04:0f:21:3a:6a:51:3d:f3:fa:db:fd:8d:4a:c1:59:51:
         ee:b9:06:41:fd:dc:35:37:02:0a:53:60:ab:f4:18:73:ac:a1:
         c8:c7:7c:bd:20:9e:c3:b6:82:47:b9:03:49:90:95:e8:c6:2b:
         19:a4:cd:99:ca:47:3b:26:d9:88:63:fd:c5:f0:8e:2c:c0:1b:
         a1:87:6e:8a:d1:08:de:fd:12:28:c2:aa:7a:5c:60:d0:33:1b:
         cd:b4:71:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:21:07 2025 by rpki-client