Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.mft
File:                     g8t2BW38QWNCZu0C0GkCA6dUoXs.mft (raw, json)
Hash identifier:          jA+bENciycXEPCoykW5hvX89Y+biAORlR2pQTLbsWUk=
Subject key identifier:   54:18:12:19:53:D3:F6:9D:E1:FA:C9:70:0E:4C:B1:00:6B:DB:2A:0F
Authority key identifier: 83:CB:76:05:6D:FC:41:63:42:66:ED:02:D0:69:02:03:A7:54:A1:7B
Certificate issuer:       /CN=83cb76056dfc41634266ed02d0690203a754a17b
Certificate serial:       0197C2368AF1873DD13A10DC7EB353362076
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8t2BW38QWNCZu0C0GkCA6dUoXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.mft
Manifest number:          6F
Signing time:             Mon 30 Jun 2025 19:00:43 +0000
Manifest this update:     Mon 30 Jun 2025 19:00:43 +0000
Manifest next update:     Tue 01 Jul 2025 19:00:43 +0000
Files and hashes:         1: g8t2BW38QWNCZu0C0GkCA6dUoXs.crl (hash: DmgIGMV6VI2R0ZvIOF3MxZFd30e56TAYLhtP3LfBh5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8t2BW38QWNCZu0C0GkCA6dUoXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c2:36:8a:f1:87:3d:d1:3a:10:dc:7e:b3:53:36:20:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83cb76056dfc41634266ed02d0690203a754a17b
        Validity
            Not Before: Jun 30 19:00:43 2025 GMT
            Not After : Jul  1 19:00:43 2025 GMT
        Subject: CN=5418121953d3f69de1fac9700e4cb1006bdb2a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:62:cb:47:bc:98:58:a2:52:b5:68:99:36:1e:
                    02:7a:41:46:5f:69:88:38:dd:70:91:1e:59:63:f5:
                    45:f5:97:dd:a2:c6:16:ea:f4:7b:29:d6:a5:69:12:
                    fb:72:5c:b5:c0:23:04:fa:59:7a:16:98:db:ff:97:
                    f8:70:29:68:a3:52:8b:69:55:cb:2b:a2:e3:c1:42:
                    73:32:37:8c:ed:37:5f:90:01:4c:aa:d9:35:44:79:
                    d7:86:b7:d4:16:d2:58:42:65:c9:3c:b5:5a:5a:63:
                    3a:00:ee:0f:1f:54:1d:c1:5f:75:f8:0d:da:4b:fe:
                    14:db:59:4e:c1:ab:d6:d7:c2:91:53:34:c7:77:84:
                    d3:80:ea:ca:5d:dd:77:d0:28:0b:e9:6b:4f:89:b9:
                    21:1c:4f:50:f4:36:99:9b:10:4e:c3:18:35:62:a2:
                    c1:e0:07:b3:0c:ed:8d:b3:19:8d:ba:d7:02:19:65:
                    26:32:4f:1e:ee:bd:72:b2:16:b3:c4:ca:7d:a7:f8:
                    9d:a3:59:f0:12:81:bb:e1:38:67:39:29:27:e6:ca:
                    13:fa:2d:d5:42:2a:93:c8:c1:46:fd:63:ff:3e:ba:
                    49:27:d2:98:ba:b0:49:6e:64:52:e9:0b:46:9f:e1:
                    62:b7:2b:a8:7b:4b:2e:08:37:a6:24:e8:ca:66:64:
                    29:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:18:12:19:53:D3:F6:9D:E1:FA:C9:70:0E:4C:B1:00:6B:DB:2A:0F
            X509v3 Authority Key Identifier:
                keyid:83:CB:76:05:6D:FC:41:63:42:66:ED:02:D0:69:02:03:A7:54:A1:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8t2BW38QWNCZu0C0GkCA6dUoXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:74:e9:ba:d5:9c:fc:6e:6d:f3:aa:a6:b3:bd:d0:ee:f1:66:
         52:bb:ca:34:79:81:ef:15:ec:d4:27:69:15:8c:9e:4b:78:7d:
         77:6f:fa:97:d1:b1:3e:2b:36:97:50:a6:b8:2d:3f:fe:12:3b:
         d3:4e:9c:7b:b3:c0:ab:aa:6f:0e:e1:b2:a1:18:0c:8f:90:1f:
         bc:52:e2:27:97:8d:e6:15:ac:f6:62:8f:c6:58:07:0b:36:8d:
         30:8f:eb:c2:72:87:a8:9a:8d:2d:14:bc:a8:3f:55:82:cd:93:
         7a:c3:6d:66:bf:c7:a0:de:b1:1d:04:09:2b:ed:e3:91:96:8d:
         c7:39:68:4f:84:8c:45:3b:f5:66:40:39:85:f2:c9:b1:89:19:
         6e:37:dc:06:97:24:f5:5e:6e:21:48:d9:3d:5c:15:b1:d4:b0:
         b1:9e:8a:e4:34:37:d9:90:84:4a:05:dd:5b:5c:f7:d1:64:b8:
         07:1e:59:b2:cb:c8:85:f2:31:53:64:7d:ff:de:11:b0:78:08:
         25:f4:a6:b2:7f:84:47:1d:d6:b3:9f:d4:40:cf:53:18:8c:c7:
         c5:a8:cd:2c:cb:c5:38:b0:8c:6c:f0:14:22:75:7b:74:fc:4c:
         3b:6c:83:45:c3:36:b2:2e:4e:67:be:f0:72:60:9a:37:70:46:
         aa:e7:db:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:20:16 2025 by rpki-client