Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
File:                     6IgY9AA6SCbnpomKFDYfjaWQVk8.mft (raw, json)
Hash identifier:          f96ZwjbMtGTHkYpV6mqf8i+PTh1sqnYQuwRqvXwxmT0=
Subject key identifier:   4E:F1:39:DC:5F:E0:C6:7E:54:FE:30:05:EB:1F:24:C6:C4:A9:86:16
Authority key identifier: E8:88:18:F4:00:3A:48:26:E7:A6:89:8A:14:36:1F:8D:A5:90:56:4F
Certificate issuer:       /CN=e88818f4003a4826e7a6898a14361f8da590564f
Certificate serial:       0197B6328297435F13474AC68A8ECCA089A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
Manifest number:          69
Signing time:             Sat 28 Jun 2025 11:00:52 +0000
Manifest this update:     Sat 28 Jun 2025 11:00:52 +0000
Manifest next update:     Sun 29 Jun 2025 11:00:52 +0000
Files and hashes:         1: 6IgY9AA6SCbnpomKFDYfjaWQVk8.crl (hash: O9PWm70Fe08DliVAPtk+VVIv+vmqgmuGmN7cSS7INBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 11:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:82:97:43:5f:13:47:4a:c6:8a:8e:cc:a0:89:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88818f4003a4826e7a6898a14361f8da590564f
        Validity
            Not Before: Jun 28 11:00:52 2025 GMT
            Not After : Jun 29 11:00:52 2025 GMT
        Subject: CN=4ef139dc5fe0c67e54fe3005eb1f24c6c4a98616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1c:2a:63:a7:12:9c:e2:99:fc:45:9e:c6:f8:
                    30:ee:dc:56:79:05:43:8c:4b:35:a8:23:c1:00:a1:
                    bc:e8:4f:d9:41:bd:f8:c8:24:87:09:e5:16:aa:05:
                    e9:3e:5d:ee:41:53:65:21:e9:1e:73:c9:4c:cd:5b:
                    f6:c8:6c:57:80:e1:b0:e4:d6:22:dc:9c:5c:6e:c2:
                    d9:37:5d:0d:40:de:4a:be:e2:93:2c:4d:fc:3c:0a:
                    ff:1f:3e:76:52:c7:ca:14:0c:b4:37:77:12:3a:ba:
                    48:fa:90:ff:a3:89:eb:85:d7:6b:e8:7d:f8:d0:cb:
                    fe:5d:e0:fe:b0:76:f7:19:16:fd:e2:2c:34:e2:b1:
                    6c:3c:bc:c0:43:9a:53:b8:ec:69:47:f0:11:48:bf:
                    6b:9a:8a:60:12:4f:b6:c6:d4:5a:a3:28:01:6c:eb:
                    ae:f4:aa:15:82:32:08:ff:e5:6c:53:7c:35:55:f5:
                    5e:0e:8b:77:36:e6:21:71:47:5f:92:9f:9b:27:6d:
                    47:bb:b2:98:dc:56:0f:92:87:4f:5b:c6:c8:47:6b:
                    b6:f0:51:6a:d8:d5:f1:55:58:e6:78:fd:d2:c1:27:
                    e7:68:99:db:e3:dd:8a:d1:50:ba:fc:25:15:d2:8b:
                    83:c4:55:12:e4:47:8b:57:7d:f4:75:a6:6f:c6:88:
                    6d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F1:39:DC:5F:E0:C6:7E:54:FE:30:05:EB:1F:24:C6:C4:A9:86:16
            X509v3 Authority Key Identifier:
                keyid:E8:88:18:F4:00:3A:48:26:E7:A6:89:8A:14:36:1F:8D:A5:90:56:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:59:12:bb:a0:31:00:57:69:7f:4b:2e:4a:ee:7a:13:7c:4a:
         74:cf:ff:03:85:57:44:00:68:27:e9:c5:bf:8a:96:9e:89:22:
         18:9e:8d:cd:1b:9a:66:f0:6a:52:9f:2d:94:66:6c:24:cd:1a:
         37:d0:d8:2d:85:30:f8:37:fc:38:93:40:1e:0b:32:c9:a7:a2:
         ac:36:1f:ea:3d:51:37:e1:f0:e8:38:f4:6e:b8:c0:5c:09:aa:
         f3:fc:17:e5:87:26:fb:df:ac:77:59:48:14:c5:ad:05:c4:0c:
         c9:3e:a0:6b:18:c0:f6:f4:95:9a:23:09:28:8d:da:3d:f9:f0:
         e7:3d:71:b9:70:e6:63:87:71:19:19:b1:f0:52:bf:68:a1:5b:
         4d:f2:95:60:3f:22:4a:ba:7c:43:69:93:81:bd:15:ca:fd:51:
         3c:6f:2c:7b:4c:e5:d7:18:f3:5c:58:41:c1:fd:25:e0:af:6f:
         55:b6:56:f6:ba:7b:58:dc:32:cb:49:3d:fe:26:de:72:d9:fb:
         c5:1f:6a:f1:6b:e6:25:8d:8f:06:8f:ed:6b:83:13:e2:d6:8f:
         81:5e:d0:d7:63:42:67:34:98:89:14:9f:ec:71:8a:e3:47:3f:
         f6:33:8e:0b:e3:ae:69:5d:af:07:09:09:f3:0a:45:f0:47:d8:
         5e:84:76:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:17 2025 by rpki-client