Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
File:                     6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft (raw, json)
Hash identifier:          qL3LjJnqKFoyZNuHJtQZHz1bV4xwHfPfM2pN4sAEFFU=
Subject key identifier:   F7:AA:4D:9B:2E:DB:8D:AF:40:8E:10:DB:A9:3C:78:6B:B3:33:BB:D5
Authority key identifier: E9:27:F4:EA:ED:92:1C:A3:7D:63:EE:24:BA:F7:1E:4C:7F:FA:07:7A
Certificate issuer:       /CN=e927f4eaed921ca37d63ee24baf71e4c7ffa077a
Certificate serial:       0196CBAA1C75B17B1FD61D63FBF81E0D5312
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
Manifest number:          087D
Signing time:             Tue 13 May 2025 22:00:45 +0000
Manifest this update:     Tue 13 May 2025 22:00:45 +0000
Manifest next update:     Wed 14 May 2025 22:00:45 +0000
Files and hashes:         1: 6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl (hash: D6Jvc9B4xlmuIQ8/t+YEZ48wXlRSLMXpNXizsUKXcPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:aa:1c:75:b1:7b:1f:d6:1d:63:fb:f8:1e:0d:53:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e927f4eaed921ca37d63ee24baf71e4c7ffa077a
        Validity
            Not Before: May 13 22:00:45 2025 GMT
            Not After : May 14 22:00:45 2025 GMT
        Subject: CN=f7aa4d9b2edb8daf408e10dba93c786bb333bbd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:81:93:35:64:f5:bd:be:95:7d:c9:17:1f:60:
                    d3:d6:62:91:46:fc:b9:36:b4:46:b5:c1:bf:50:51:
                    c9:f0:f1:28:23:66:20:e6:67:81:3b:d7:28:db:5d:
                    71:53:b9:90:7c:0f:3d:70:13:89:c5:8b:3c:d2:20:
                    4e:a3:9e:fd:89:1e:62:de:ee:5f:aa:b6:c5:86:63:
                    58:fc:14:a5:8c:4c:d1:91:f5:8c:bd:33:3b:1d:f9:
                    db:c2:4f:b1:39:32:be:7c:d3:14:b0:6e:b7:57:6a:
                    a9:71:42:b1:15:7f:30:77:1b:b3:4e:a1:15:b2:58:
                    06:5f:58:ea:35:c7:c8:7c:7e:06:bf:43:8d:5d:20:
                    96:26:02:08:25:1e:3d:24:0c:30:2e:6d:20:01:8d:
                    a7:59:36:3c:7f:89:90:bd:b6:a6:16:e0:53:d7:dc:
                    77:00:57:a3:4c:ac:ac:c7:00:d1:28:5b:3c:eb:be:
                    69:6b:96:77:0d:99:5c:bb:7f:68:f8:a8:f3:ef:7f:
                    bb:64:fe:ee:24:cd:8c:01:3d:bd:38:93:1d:d9:34:
                    52:51:74:b4:fd:57:e5:ea:e7:01:57:d0:8c:d2:5e:
                    28:ba:36:91:e5:8d:19:4f:ec:08:c1:77:14:4e:77:
                    c8:e9:c6:94:f4:b7:d0:13:70:50:e6:9f:81:cf:cc:
                    88:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AA:4D:9B:2E:DB:8D:AF:40:8E:10:DB:A9:3C:78:6B:B3:33:BB:D5
            X509v3 Authority Key Identifier:
                keyid:E9:27:F4:EA:ED:92:1C:A3:7D:63:EE:24:BA:F7:1E:4C:7F:FA:07:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:41:13:f9:38:cf:bf:1d:d8:16:c4:3e:6a:f9:61:e4:27:5d:
         b8:0c:12:1f:ff:ed:5a:1b:85:80:ff:af:cb:d1:37:41:42:6b:
         24:9e:c5:c8:32:5c:1a:9d:85:9a:f3:93:d9:56:4b:60:0f:5b:
         55:bb:dd:18:fc:76:7a:b5:9e:a4:be:f9:03:c7:99:2b:ec:a2:
         04:7f:a5:0f:51:73:e9:98:69:60:28:a4:a0:0d:32:ab:19:6c:
         1b:61:fa:dc:e0:b7:d2:99:ca:98:54:16:79:93:b3:14:cd:96:
         e3:b3:eb:56:c7:30:1f:b7:b0:81:12:11:d2:6a:9a:3e:c0:db:
         f2:53:c8:92:ff:53:da:4c:5b:e7:fc:79:4e:20:30:c6:47:8d:
         7c:f4:43:73:b6:87:6f:3b:2a:f2:2e:d0:f9:5b:f5:9f:05:e9:
         b9:cf:66:1d:d8:83:0d:db:34:30:dc:62:1f:78:4b:51:18:fe:
         19:ee:cc:d3:1a:a3:dd:06:c4:80:24:47:3c:2f:2e:97:fc:7f:
         d5:7c:7d:20:f7:fc:1d:e4:b3:55:95:12:e7:be:1f:23:ce:73:
         4e:e5:81:b3:a1:2f:b8:3d:83:46:90:c0:69:eb:59:7a:ee:e7:
         f7:9e:16:55:7e:e6:3d:46:97:3a:6c:57:30:eb:96:87:00:5b:
         4c:71:0b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:10:33 2025 by rpki-client