Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
File:                     6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft (raw, json)
Hash identifier:          BQAZL6dRfk0x2DwthwyxWgBNoa0bh2NbgTYdCPFeUCc=
Subject key identifier:   31:89:A6:45:F7:F8:8D:7D:7A:56:2A:6F:DD:0C:A9:C9:4C:D8:C2:29
Authority key identifier: E9:6B:91:2B:4A:5A:0C:77:03:B5:CA:58:B1:86:74:1E:0D:53:35:B4
Certificate issuer:       /CN=e96b912b4a5a0c7703b5ca58b186741e0d5335b4
Certificate serial:       0197B88EEBD5DD8B8B7D311C1C99E1CD91B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
Manifest number:          0FAE
Signing time:             Sat 28 Jun 2025 22:01:03 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:03 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:03 +0000
Files and hashes:         1: 6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl (hash: nE8oQzdzqpO0gk9lbQygINk6OVtJak1xKG2Cs/3BIY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8e:eb:d5:dd:8b:8b:7d:31:1c:1c:99:e1:cd:91:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b912b4a5a0c7703b5ca58b186741e0d5335b4
        Validity
            Not Before: Jun 28 22:01:03 2025 GMT
            Not After : Jun 29 22:01:03 2025 GMT
        Subject: CN=3189a645f7f88d7d7a562a6fdd0ca9c94cd8c229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8d:c4:41:ac:a0:aa:d5:91:d0:63:05:94:c9:
                    96:11:c4:99:40:a3:47:b0:8a:04:ee:2b:1b:76:fd:
                    a6:dd:b5:68:18:32:11:f6:6c:39:bc:8e:ee:17:9b:
                    58:db:12:3c:a7:f8:0c:99:dd:12:55:90:17:36:51:
                    9e:4c:64:78:f5:e3:15:ec:de:7e:01:c2:52:98:02:
                    39:1f:1c:df:31:11:15:59:79:2b:d6:bf:df:13:24:
                    9b:5b:71:04:e1:e3:86:eb:2a:0b:de:dc:c1:7c:6a:
                    71:8f:5f:4c:99:2f:28:27:81:34:63:2a:4d:ac:e4:
                    f3:43:37:54:c1:09:24:5a:04:33:e0:55:55:fe:e7:
                    1a:42:8e:3d:e5:e6:a3:26:1f:97:e1:06:2c:a0:2f:
                    70:64:ef:93:d0:08:b6:0d:32:95:86:ed:de:0c:6d:
                    9b:56:27:e3:73:6f:f2:49:a7:4b:f2:bc:2e:d0:44:
                    d2:c4:a5:4c:6c:d2:f9:46:2c:d4:db:25:35:34:f8:
                    e3:ba:c5:96:ed:d9:11:36:db:0a:92:5e:8f:28:fc:
                    11:30:8e:d1:11:0e:f2:4c:6b:fa:19:3d:f5:c7:d7:
                    90:36:4d:44:17:85:c9:12:1a:ae:5d:25:1f:93:30:
                    b9:2d:c6:1a:87:53:bb:a3:c7:4a:36:ff:cf:58:fb:
                    79:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:89:A6:45:F7:F8:8D:7D:7A:56:2A:6F:DD:0C:A9:C9:4C:D8:C2:29
            X509v3 Authority Key Identifier:
                keyid:E9:6B:91:2B:4A:5A:0C:77:03:B5:CA:58:B1:86:74:1E:0D:53:35:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:40:23:e8:65:c7:81:bd:f5:a6:66:15:c7:e4:cd:c2:06:0c:
         67:fc:ee:51:e7:bd:04:70:c7:35:cb:cd:8c:09:b6:ca:3c:a9:
         29:f3:b8:fe:62:e7:83:54:07:00:28:9d:ec:d8:11:ce:52:f5:
         47:90:0d:24:a8:a0:a7:cb:25:76:51:c7:98:be:c4:ef:83:0b:
         8e:75:ec:26:0b:4b:d4:44:83:b5:8d:9b:12:c1:77:2b:70:ed:
         c4:4e:db:3e:5c:c3:53:e2:07:92:f2:35:a3:a8:3c:39:d2:07:
         c0:a5:ab:c5:4c:cd:d9:c1:44:37:b7:3c:f9:66:34:bd:8a:8c:
         92:6e:98:6c:12:46:40:3a:39:cf:9b:ae:6b:31:74:eb:6c:35:
         95:91:89:dd:3c:5a:4e:11:35:8d:57:61:73:79:21:bd:ea:72:
         c0:5f:3a:1c:a7:b6:21:6a:45:7f:bc:14:b6:86:06:f6:ac:9a:
         f8:45:ed:c8:89:a4:19:dc:bb:5e:9a:b6:f1:90:a3:ce:d4:6f:
         5e:d1:de:1f:f6:64:a7:a2:72:ef:8f:9d:96:10:3f:e3:20:e7:
         25:e4:18:dc:44:aa:98:65:e2:1c:b8:0c:a4:9f:50:59:cb:d4:
         fa:9a:1b:af:36:46:56:7d:3e:33:7e:49:9e:8d:f1:6f:f0:84:
         f1:f7:0f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:46:21 2025 by rpki-client