Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
File:                     6lz30dxfvb1jS9YbgLfv_uxGKHM.mft (raw, json)
Hash identifier:          TqsmDToZDmZ5soJWZY2VRqRbzlyqy4irujKq+aSYUzI=
Subject key identifier:   80:24:DE:DD:A8:F6:A4:4C:CB:A5:66:6D:04:72:51:E5:64:70:8F:F8
Authority key identifier: EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73
Certificate issuer:       /CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873
Certificate serial:       0197B74519BFA27F891F1BA8F828DB75752E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
Manifest number:          1468
Signing time:             Sat 28 Jun 2025 16:00:48 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:48 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:48 +0000
Files and hashes:         1: 6lz30dxfvb1jS9YbgLfv_uxGKHM.crl (hash: q0pLPP18VReSmAjQQ8nDf39HKz1pj6M/Ze5ns2S1Dik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:19:bf:a2:7f:89:1f:1b:a8:f8:28:db:75:75:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873
        Validity
            Not Before: Jun 28 16:00:48 2025 GMT
            Not After : Jun 29 16:00:48 2025 GMT
        Subject: CN=8024dedda8f6a44ccba5666d047251e564708ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a2:32:2e:6a:c6:21:3f:f3:04:6e:ed:d3:c3:
                    3a:9f:8f:c1:a9:c9:cf:99:1e:17:d1:25:13:1c:cf:
                    7e:48:0b:76:fd:59:db:b4:96:57:db:89:9c:7e:9b:
                    b9:4e:bb:d7:9b:1e:cf:a6:05:65:06:ba:b6:9b:aa:
                    45:f5:95:c7:f2:bb:e7:62:60:b1:f2:77:a8:e5:25:
                    a0:d5:76:b8:6a:6b:2a:e1:8b:03:99:4c:d6:79:8f:
                    7d:e7:43:12:65:8c:36:2a:7b:55:53:84:f5:a3:d6:
                    23:02:1d:57:af:d9:c0:54:c4:99:d6:f1:f2:f8:eb:
                    a0:a4:f0:aa:3f:2f:09:e9:6e:6c:cc:63:ad:8b:71:
                    88:5a:be:4b:e5:01:9a:b9:9b:2d:fa:07:eb:dd:98:
                    ee:61:f4:3e:b0:7f:b7:5d:0e:ae:c8:be:81:3b:80:
                    88:5a:84:81:92:46:07:34:29:86:27:7e:51:34:d3:
                    bc:44:fb:50:34:33:e5:4e:5d:fd:b0:c0:ba:0d:8a:
                    26:a3:8b:e6:08:21:75:a2:be:a7:62:99:11:58:6e:
                    2c:7e:1b:19:c2:6d:c9:ce:75:84:e6:a4:17:b6:ab:
                    d4:4b:a1:df:b4:1c:12:2a:ef:ce:ab:75:db:c4:ca:
                    6e:88:d9:0c:2d:ea:19:14:7b:58:74:20:05:32:53:
                    8b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:24:DE:DD:A8:F6:A4:4C:CB:A5:66:6D:04:72:51:E5:64:70:8F:F8
            X509v3 Authority Key Identifier:
                keyid:EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a0:63:50:ee:f4:02:27:96:94:66:6c:d3:26:72:85:8a:92:
         dc:fe:cc:11:97:2f:d7:a2:48:51:84:87:38:aa:b9:ea:2f:17:
         60:20:55:0f:68:5b:dd:49:b9:13:12:70:60:9f:f0:5f:b9:86:
         de:d3:36:81:6d:ff:13:56:91:0e:a7:9b:31:c5:03:ea:c9:ab:
         c6:84:cb:fd:d6:ed:5f:8b:33:62:a1:ba:35:31:9f:58:44:d6:
         4b:e0:72:d2:36:2a:0a:c9:dc:03:89:07:36:c8:da:fd:0e:9e:
         14:21:35:24:d7:ec:6f:8b:83:39:f6:c4:9f:5b:67:66:28:eb:
         99:0e:eb:55:a8:51:4c:e6:70:19:db:ab:eb:27:23:43:9e:89:
         51:fd:bc:93:6e:fc:cb:89:42:c6:9c:b2:0a:61:35:57:19:0e:
         f2:45:87:13:d0:26:9a:b9:81:4f:50:a5:dc:ad:77:eb:5f:ff:
         5c:44:60:95:23:60:92:40:af:5f:38:4f:1d:07:c2:68:e2:05:
         fc:62:e8:94:8c:be:74:dc:f0:79:c1:e9:33:94:d7:3d:2b:5a:
         66:4e:c4:e2:41:82:6c:79:bb:78:b3:f9:e2:4e:03:aa:f9:bb:
         14:7c:51:c6:2f:45:79:ce:4e:05:c8:7b:d6:73:2a:e1:46:55:
         3d:36:45:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:13 2025 by rpki-client