Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.mft
File:                     6E2eW-w81Mrhfl-Hsu6lImpO518.mft (raw, json)
Hash identifier:          ctMyi18p6Kncy0oqFw7VYSf9Y7mFfn09dcP1Lr395D0=
Subject key identifier:   9E:F2:A0:8A:F2:3D:65:4D:C8:76:7F:25:17:E2:FD:9A:E3:89:4F:00
Authority key identifier: E8:4D:9E:5B:EC:3C:D4:CA:E1:7E:5F:87:B2:EE:A5:22:6A:4E:E7:5F
Certificate issuer:       /CN=e84d9e5bec3cd4cae17e5f87b2eea5226a4ee75f
Certificate serial:       0198D5BBB53B923398FCBA294F16876AF137
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E2eW-w81Mrhfl-Hsu6lImpO518.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.mft
Manifest number:          0C35
Signing time:             Sat 23 Aug 2025 07:01:45 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:45 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:45 +0000
Files and hashes:         1: 6E2eW-w81Mrhfl-Hsu6lImpO518.crl (hash: tZSNjTQWZpjL/CEltuVRELYjUeeLAtCegwsEROq5Mes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6E2eW-w81Mrhfl-Hsu6lImpO518.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:b5:3b:92:33:98:fc:ba:29:4f:16:87:6a:f1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84d9e5bec3cd4cae17e5f87b2eea5226a4ee75f
        Validity
            Not Before: Aug 23 07:01:45 2025 GMT
            Not After : Aug 24 07:01:45 2025 GMT
        Subject: CN=9ef2a08af23d654dc8767f2517e2fd9ae3894f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:84:b2:a9:bf:f2:a2:35:34:70:d7:94:d2:73:
                    09:4d:ff:aa:15:72:31:50:a7:99:5d:88:8b:96:7a:
                    ba:63:20:4c:e3:c2:bf:27:14:a3:0b:e9:d1:dc:e7:
                    49:20:bc:78:5f:a4:a6:ed:72:a6:e4:a3:c5:86:04:
                    9a:bf:8c:e3:90:c1:2e:43:a4:fd:eb:01:3a:0e:6c:
                    bc:b5:14:bc:c3:73:fe:1b:0a:17:b7:e7:a8:a4:84:
                    60:f3:53:3f:e6:e8:9d:4d:a7:9d:2b:59:a3:b1:3a:
                    ec:1b:ac:7a:a9:c7:5f:d9:47:78:c1:87:58:dc:1b:
                    a4:e7:af:70:24:ef:10:66:40:ac:73:e2:b6:87:cf:
                    ab:ec:8a:40:f0:85:b0:bf:3a:f3:06:d5:24:2a:fb:
                    17:94:f0:8b:b6:c3:6b:4f:3d:32:6b:ae:d4:e1:60:
                    bd:bc:3e:b8:a1:cc:b7:ab:6f:47:32:ba:d5:65:e7:
                    fb:49:9d:5c:7d:5c:40:ba:46:19:78:15:65:39:77:
                    b5:fc:11:eb:5a:e1:b8:c0:cc:cc:00:93:b6:ee:3a:
                    83:e6:2a:c4:f8:47:50:04:ef:d1:78:be:71:c6:15:
                    2e:1b:ce:69:3f:1d:25:9c:ba:db:51:1d:55:a0:91:
                    71:9f:42:f0:f8:57:85:08:ea:e8:ba:e3:1e:f8:2c:
                    cf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F2:A0:8A:F2:3D:65:4D:C8:76:7F:25:17:E2:FD:9A:E3:89:4F:00
            X509v3 Authority Key Identifier:
                keyid:E8:4D:9E:5B:EC:3C:D4:CA:E1:7E:5F:87:B2:EE:A5:22:6A:4E:E7:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E2eW-w81Mrhfl-Hsu6lImpO518.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:8b:24:b8:5e:5b:83:7d:5a:ff:d1:4c:5d:1b:d1:5a:5e:63:
         72:0f:08:38:e3:56:25:4d:8d:e2:95:22:e4:7b:a9:a6:9d:63:
         30:54:44:d9:1b:25:26:f3:33:af:ff:e5:17:20:27:72:23:73:
         d2:b4:b1:21:9d:35:04:02:0a:af:78:f3:e6:c9:aa:e2:72:f4:
         56:85:ad:91:00:9c:6b:76:68:73:1b:64:aa:d3:85:56:7b:27:
         09:f9:f6:18:35:68:6f:45:bf:3b:26:dd:7d:b9:97:c9:56:f8:
         d7:09:93:9e:b6:4d:f4:9d:5c:f2:e6:a9:60:20:d1:9f:58:18:
         c6:37:7e:d3:8d:43:81:e4:51:70:58:8e:8a:17:c1:ff:09:75:
         6a:8c:cc:24:ee:1c:7b:dd:c9:80:49:02:bd:ca:48:9f:50:20:
         f7:85:81:64:83:4c:82:4b:f0:df:f2:f5:07:58:f5:02:23:4e:
         7a:af:35:d5:06:7c:36:bf:cd:87:26:0d:dc:d6:40:79:a6:13:
         9d:a8:04:7e:a2:ed:05:6d:a4:6f:0b:e5:d1:33:9c:04:67:73:
         c3:8f:16:40:da:e8:25:1a:09:3f:b2:ec:e0:64:de:fd:37:e5:
         83:53:8b:36:40:67:05:43:7e:a8:57:6d:b4:4f:ce:21:42:5d:
         d1:db:c9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:17 2025 by rpki-client