Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
File:                     r06GL461X0-CVOLIWLcvQzl_4_o.mft (raw, json)
Hash identifier:          RIg5l6bJzue2GrWtODgcCldMKntmSoPvM63QYG+V++Y=
Subject key identifier:   2E:EA:E4:02:5B:02:F1:9E:1C:94:48:A8:C5:3C:69:CB:2E:B6:6A:0E
Authority key identifier: AF:4E:86:2F:8E:B5:5F:4F:82:54:E2:C8:58:B7:2F:43:39:7F:E3:FA
Certificate issuer:       /CN=af4e862f8eb55f4f8254e2c858b72f43397fe3fa
Certificate serial:       0197B6A10074B10FB877110565C0A651759D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
Manifest number:          15B3
Signing time:             Sat 28 Jun 2025 13:01:34 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:34 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:34 +0000
Files and hashes:         1: r06GL461X0-CVOLIWLcvQzl_4_o.crl (hash: uSFszuKe+mPoSSewBm3BiQl0LU9tFq4IiukyTCYOtdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:00:74:b1:0f:b8:77:11:05:65:c0:a6:51:75:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af4e862f8eb55f4f8254e2c858b72f43397fe3fa
        Validity
            Not Before: Jun 28 13:01:34 2025 GMT
            Not After : Jun 29 13:01:34 2025 GMT
        Subject: CN=2eeae4025b02f19e1c9448a8c53c69cb2eb66a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:72:73:f2:be:bd:d3:53:8f:d6:ac:0d:f6:ae:
                    a0:ab:0d:83:27:92:5e:50:5a:cf:98:e2:99:24:b9:
                    8b:1d:63:f2:dc:cf:51:32:48:d7:52:15:7c:f8:a9:
                    af:3a:5b:19:6e:e9:0f:38:ff:62:0d:ec:d2:9f:39:
                    b3:ee:10:c8:73:81:0b:fd:36:2e:64:f2:82:ad:78:
                    2c:42:2d:03:51:e3:05:52:6d:aa:75:51:4e:55:72:
                    19:da:d6:f5:22:2d:52:8a:5b:46:50:40:53:c0:fc:
                    6e:85:b8:84:bd:ec:d8:ab:b2:8e:35:e7:20:00:ec:
                    5f:6b:3c:25:f1:c3:5c:8a:5d:cd:37:e3:1d:c0:90:
                    4a:b1:92:69:50:b9:36:1c:28:1e:f1:6e:7f:98:36:
                    e0:bd:c8:97:53:6b:4c:34:4a:fa:e3:56:c8:05:c1:
                    3f:38:a6:b9:31:a9:e5:52:0b:f2:de:93:d5:ae:3f:
                    af:d8:5e:a1:e7:87:62:46:67:72:de:c4:82:40:5b:
                    12:53:83:25:c3:29:5c:3a:3a:ad:79:bb:be:fa:ce:
                    02:23:db:c7:8a:6d:21:2b:50:c6:38:10:c1:cd:eb:
                    7e:8e:5e:02:08:90:b9:60:aa:f9:d0:98:38:cf:35:
                    0a:58:e3:d5:75:dc:13:6c:09:8b:01:be:b7:f3:a9:
                    d3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:EA:E4:02:5B:02:F1:9E:1C:94:48:A8:C5:3C:69:CB:2E:B6:6A:0E
            X509v3 Authority Key Identifier:
                keyid:AF:4E:86:2F:8E:B5:5F:4F:82:54:E2:C8:58:B7:2F:43:39:7F:E3:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:7e:7c:bd:0a:d1:ca:02:b6:39:1c:da:d2:b7:5d:c9:2b:aa:
         6f:e1:a4:60:10:f8:0f:f6:51:13:9a:c1:1f:ee:81:c9:ab:e0:
         38:b8:1b:b7:8f:69:f9:1a:e2:4d:1a:25:6d:56:d9:0f:4c:11:
         65:77:46:df:6e:af:dc:85:d5:3a:2f:40:38:df:79:10:e9:4c:
         be:cd:c0:b3:51:ec:71:4d:f2:34:2c:dc:4a:be:93:2a:06:67:
         49:44:8d:84:07:85:ab:34:51:eb:fd:44:54:ba:f4:94:94:6a:
         7d:f0:6e:a0:b6:a9:5a:5c:e5:f3:1f:de:02:7e:17:44:63:51:
         fa:b9:8c:45:79:00:69:43:1e:f0:1f:1d:bb:40:4d:4c:0c:dc:
         1f:98:ee:61:c4:d6:3a:49:1a:c5:40:f4:ea:dc:6f:e0:ee:a1:
         12:65:cd:82:60:83:86:06:a0:f4:56:79:fc:5f:4d:e2:2c:5c:
         b5:76:d3:d4:07:ca:4f:e1:52:a1:7d:73:37:04:3a:30:36:3c:
         c3:2a:7b:49:d1:b1:9d:83:04:7f:4d:01:1c:4d:c7:5f:40:e7:
         f7:43:40:b3:42:cb:ea:7e:b2:08:ca:a2:22:c3:f4:7f:3c:6b:
         4b:f8:d8:fc:9c:8f:ff:fb:b6:6f:98:63:94:7c:85:a2:f1:9c:
         de:e0:5f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:18 2025 by rpki-client