Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft
File:                     6XEkdSyEAGfdN-JC6Undo03LS04.mft (raw, json)
Hash identifier:          tmQOMwQl49sXL/MNJbx2gy92fVNQm7Vw/oVAHux8bM0=
Subject key identifier:   46:6B:3B:59:3C:F2:77:36:C7:29:D8:1E:CC:2D:38:64:6B:71:7B:1F
Authority key identifier: E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E
Certificate issuer:       /CN=e97124752c840067dd37e242e949dda34dcb4b4e
Certificate serial:       0197B5FBB0685E6D66DB42335AE62D7D8DEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 10:01:00 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:00 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:00 +0000
Files and hashes:         1: 6XEkdSyEAGfdN-JC6Undo03LS04.crl (hash: wGZYC1iqERjATT9zJs6t1mOVS3dUD8S0+GsaqMWZUbE=)
                          2: ln8cbDhSIfp4E2XB9SOMHr6Pnko.roa (hash: HgLGglk0S4IATrqUxgAV1S7c2Cds50Oig+WiSSLRjns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fb:b0:68:5e:6d:66:db:42:33:5a:e6:2d:7d:8d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97124752c840067dd37e242e949dda34dcb4b4e
        Validity
            Not Before: Jun 28 10:01:00 2025 GMT
            Not After : Jun 29 10:01:00 2025 GMT
        Subject: CN=466b3b593cf27736c729d81ecc2d38646b717b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0f:fd:38:8b:f8:4b:a4:6a:79:ca:be:eb:b7:
                    24:72:09:65:69:a3:6d:dc:d2:bd:d4:fa:56:e6:e2:
                    b6:44:ef:7d:3b:ab:70:a7:63:9b:8a:49:96:09:17:
                    74:a2:15:ca:f1:c8:4e:fa:05:22:4a:bd:f0:9e:ed:
                    2b:e0:b6:55:1d:17:67:da:d2:bc:08:f2:2e:79:b6:
                    a8:3b:8c:22:39:28:8f:94:77:5c:11:e8:e3:0f:80:
                    29:2b:3c:4a:7f:68:18:be:51:f0:50:3b:6e:af:bf:
                    02:7c:06:9f:e0:ae:14:73:67:de:fd:19:31:0a:a8:
                    3a:d7:d8:7c:9f:74:29:e9:5d:5c:dd:57:56:87:06:
                    53:36:c7:a2:b3:b4:46:ce:f6:a9:52:b7:d1:3f:47:
                    b1:32:7e:fa:ee:0f:d3:14:4d:41:39:56:03:1e:8c:
                    2f:b9:18:4a:d3:13:89:80:7d:27:82:2d:3e:de:07:
                    6c:79:12:35:d5:aa:23:3b:03:6c:10:49:21:d2:35:
                    65:57:e3:db:25:58:dd:81:6a:25:b9:16:78:87:f1:
                    ce:ee:87:80:a3:38:14:cb:30:a1:40:83:22:3c:e5:
                    16:1d:2a:85:e5:0a:3c:41:63:39:ef:16:7d:32:ad:
                    33:e3:6e:86:ad:b1:cb:5c:60:33:da:bb:a9:57:89:
                    0e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6B:3B:59:3C:F2:77:36:C7:29:D8:1E:CC:2D:38:64:6B:71:7B:1F
            X509v3 Authority Key Identifier:
                keyid:E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e0:8c:53:d5:e7:d9:3b:e4:fb:c1:d5:2a:14:4f:91:ca:ca:
         18:46:4e:55:2e:54:e3:83:2f:af:c9:26:f4:1e:1d:ff:c4:c5:
         80:70:19:49:6a:3d:ae:d0:79:37:6b:c4:2e:07:8f:03:b5:59:
         10:12:01:f8:fa:ca:a3:9a:df:42:a3:16:2c:db:30:0f:0a:97:
         3f:4b:cc:52:a1:09:51:6f:96:72:7d:9b:fe:e1:84:45:27:42:
         8f:54:10:39:2c:94:70:ec:19:27:77:d0:95:52:4a:68:73:98:
         05:89:89:06:b5:f9:4d:4a:35:e2:51:94:ef:c9:33:17:c2:1b:
         ec:47:fb:ec:56:33:08:4e:75:3e:01:e0:71:01:d3:78:14:83:
         38:3f:8c:f0:c3:31:3a:74:12:fa:e4:6d:0e:66:15:86:38:98:
         2e:f2:31:f0:48:3b:43:54:75:68:fe:fe:9e:e7:11:59:d4:54:
         ba:9b:de:de:92:7d:97:40:af:e8:a7:8b:ad:07:56:57:1c:d6:
         83:8e:f7:17:64:0e:3c:08:5b:dc:e2:b7:c8:8a:b2:a0:97:60:
         c0:7a:c4:b3:dd:a3:be:b7:2f:f5:b8:17:25:a5:23:b8:30:0e:
         58:a1:ad:a8:ae:2d:27:b0:24:56:ca:31:08:84:7f:c4:44:63:
         0e:37:e9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:39 2025 by rpki-client