Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/64fa39-3e6b-49c3-bbb7-b148d8a8687c/1/6m7iTqV6m_7QYMRlZ673EhDg-2I.mft
File:                     6m7iTqV6m_7QYMRlZ673EhDg-2I.mft (raw, json)
Hash identifier:          xnaEzcBbdqhRCKC4z4umT5wiSc2ZdQ1SQeEhdNypepo=
Subject key identifier:   E6:E3:16:C8:D2:11:26:51:C2:8F:89:41:ED:93:9A:B0:2D:3B:E2:68
Authority key identifier: EA:6E:E2:4E:A5:7A:9B:FE:D0:60:C4:65:67:AE:F7:12:10:E0:FB:62
Certificate issuer:       /CN=ea6ee24ea57a9bfed060c46567aef71210e0fb62
Certificate serial:       0196BFDCD8B7101C73E63980618461A7AE62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6m7iTqV6m_7QYMRlZ673EhDg-2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/64fa39-3e6b-49c3-bbb7-b148d8a8687c/1/6m7iTqV6m_7QYMRlZ673EhDg-2I.mft
Manifest number:          06B1
Signing time:             Sun 11 May 2025 15:00:43 +0000
Manifest this update:     Sun 11 May 2025 15:00:43 +0000
Manifest next update:     Mon 12 May 2025 15:00:43 +0000
Files and hashes:         1: 6m7iTqV6m_7QYMRlZ673EhDg-2I.crl (hash: rQOTsd4QfmdbHGg/m7RoCC/BRZHDr4W0nv/Rbs632mw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/64fa39-3e6b-49c3-bbb7-b148d8a8687c/1/6m7iTqV6m_7QYMRlZ673EhDg-2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/64fa39-3e6b-49c3-bbb7-b148d8a8687c/1/6m7iTqV6m_7QYMRlZ673EhDg-2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6m7iTqV6m_7QYMRlZ673EhDg-2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 15:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:dc:d8:b7:10:1c:73:e6:39:80:61:84:61:a7:ae:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea6ee24ea57a9bfed060c46567aef71210e0fb62
        Validity
            Not Before: May 11 15:00:43 2025 GMT
            Not After : May 12 15:00:43 2025 GMT
        Subject: CN=e6e316c8d2112651c28f8941ed939ab02d3be268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:77:89:03:d4:24:ff:0c:08:b7:c6:10:18:0a:
                    21:d0:5b:2f:e3:43:0a:7c:12:5c:78:97:79:21:de:
                    95:1b:5e:56:92:e6:90:87:e3:54:7f:1e:dd:97:f2:
                    9c:62:8a:82:81:1f:54:1f:55:dd:98:fe:92:3e:2b:
                    0f:87:51:42:32:74:35:a4:c4:67:93:aa:c8:11:9b:
                    c2:a1:5b:94:7d:95:f4:c2:d4:c4:ec:1f:33:29:1d:
                    34:81:55:cf:e9:41:dd:68:c8:ea:e3:d4:8f:5e:1e:
                    1e:ae:99:27:cb:40:c7:18:58:2d:e3:72:33:5e:f4:
                    25:05:64:ac:8c:14:ab:91:b8:45:2b:f8:cb:24:90:
                    bc:30:55:84:c5:b8:b8:3b:59:a5:db:1f:9b:58:97:
                    a1:36:00:d5:42:fc:ce:6a:a0:85:49:f9:5e:3f:42:
                    27:c0:ec:24:8d:48:0f:fd:0d:29:43:33:0a:49:73:
                    e5:31:eb:68:34:e1:e9:af:ac:e6:39:9b:70:aa:ea:
                    50:f0:14:08:4f:75:08:e5:70:29:26:54:74:e8:43:
                    43:15:b2:1b:5a:c2:92:68:22:b2:1e:13:5f:05:bc:
                    7e:6c:ee:c1:d3:38:78:8f:39:43:66:35:c8:bd:a6:
                    9b:c2:5e:19:99:1f:7b:8a:89:95:e6:7a:b3:56:01:
                    92:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E3:16:C8:D2:11:26:51:C2:8F:89:41:ED:93:9A:B0:2D:3B:E2:68
            X509v3 Authority Key Identifier:
                keyid:EA:6E:E2:4E:A5:7A:9B:FE:D0:60:C4:65:67:AE:F7:12:10:E0:FB:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6m7iTqV6m_7QYMRlZ673EhDg-2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/64fa39-3e6b-49c3-bbb7-b148d8a8687c/1/6m7iTqV6m_7QYMRlZ673EhDg-2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/64fa39-3e6b-49c3-bbb7-b148d8a8687c/1/6m7iTqV6m_7QYMRlZ673EhDg-2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:05:0c:be:9b:c9:56:52:9f:d7:13:9a:d8:67:95:b8:e6:59:
         b1:63:1f:47:69:46:79:c2:49:60:b5:e6:50:73:94:1c:ae:e9:
         e0:36:2e:8f:0a:d2:af:2d:b4:f4:8e:da:66:63:9c:3e:07:1a:
         b9:2f:e1:a0:b0:89:ec:7e:9f:29:ed:02:9f:45:78:dc:08:8b:
         ed:95:3a:f8:ee:ca:29:e1:a7:07:bf:f5:e7:b9:f0:bb:4f:3b:
         b8:b1:94:ce:bd:b9:4f:0b:3c:14:91:04:ff:d6:a6:86:94:32:
         39:c4:e5:a1:bb:b7:6a:51:c5:11:58:a5:0d:a0:f7:34:bc:c9:
         d8:92:7c:2f:b4:3e:6c:65:e1:0e:4c:23:7b:82:a7:24:95:37:
         f9:72:3b:ba:04:99:55:a3:86:f1:68:5a:e8:7f:55:bb:d6:b8:
         4e:76:ec:37:35:b2:67:36:46:46:e8:a7:d3:32:bc:81:f3:33:
         3d:2f:f3:48:4d:55:b9:f7:9a:39:29:d2:38:1a:3a:ea:67:d7:
         af:82:27:be:a0:7a:ad:4b:e7:70:45:7f:23:e6:7f:82:83:3d:
         23:16:8d:ce:e8:ce:f7:77:a4:ab:3a:43:13:a9:31:21:72:e8:
         b7:75:3d:7e:b6:64:5c:f9:1c:c2:04:98:41:1d:c8:44:69:42:
         22:ff:c4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:15:02 2025 by rpki-client