Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
File:                     6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft (raw, json)
Hash identifier:          JyyALByMolc+/gkDUL7KaZ5WTfVM7+sKI8I+A/tUXsc=
Subject key identifier:   52:AC:D9:08:8A:3E:CF:E8:74:D4:C2:5D:AB:27:A5:DD:A0:65:97:86
Authority key identifier: E8:4B:EF:96:61:6B:65:2D:C3:64:18:47:05:55:FE:8D:59:22:18:88
Certificate issuer:       /CN=e84bef96616b652dc36418470555fe8d59221888
Certificate serial:       0196A6F85C2DC33FC1C3EBC39965FFF849D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
Manifest number:          07
Signing time:             Tue 06 May 2025 19:00:16 +0000
Manifest this update:     Tue 06 May 2025 19:00:16 +0000
Manifest next update:     Wed 07 May 2025 19:00:16 +0000
Files and hashes:         1: 6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl (hash: S3jb86nD3LFysRQQg+C1/sMIvLO7XNGFXetaA6A5Dnc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:f8:5c:2d:c3:3f:c1:c3:eb:c3:99:65:ff:f8:49:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84bef96616b652dc36418470555fe8d59221888
        Validity
            Not Before: May  6 19:00:16 2025 GMT
            Not After : May  7 19:00:16 2025 GMT
        Subject: CN=52acd9088a3ecfe874d4c25dab27a5dda0659786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:35:72:9e:07:d3:68:e1:cf:01:f6:54:ed:2f:
                    83:78:90:61:11:f9:45:81:98:14:05:d7:c8:46:68:
                    84:bb:e3:19:92:58:83:f6:e4:28:4b:8f:0a:dc:38:
                    55:45:b8:7b:b3:e7:e0:af:42:9a:16:fd:76:0b:b6:
                    c3:3b:6d:17:1e:64:d3:e8:23:b9:e0:c1:c3:25:f2:
                    1e:22:b3:06:a8:4b:44:8b:b2:b7:f4:93:84:cb:94:
                    07:a0:0a:42:36:f5:bd:6a:dd:96:c6:fb:4d:08:8f:
                    62:8e:6f:79:b7:f0:a1:1e:ba:65:81:fc:df:bd:a4:
                    f1:c0:6c:bb:16:0f:c3:9a:52:59:d6:1a:05:b9:d7:
                    3c:52:52:be:e0:19:10:d7:2c:3a:79:65:1c:86:dc:
                    81:11:ba:bc:49:b3:09:10:1b:31:a1:dd:db:2b:f7:
                    03:40:ad:6c:90:63:95:37:5a:59:78:7b:d0:42:0e:
                    17:2a:f6:c4:77:9c:81:04:4d:1c:1c:28:b0:6c:50:
                    dc:17:79:23:2c:1c:ee:37:86:1b:5d:94:68:de:e7:
                    c4:18:11:94:82:d0:21:4b:e9:4f:db:a2:5f:7e:10:
                    b9:91:b6:50:fe:f2:16:f2:13:c1:b3:31:24:5f:83:
                    c2:e2:ba:c5:eb:ac:b2:ff:d0:05:89:4d:25:59:a7:
                    a7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AC:D9:08:8A:3E:CF:E8:74:D4:C2:5D:AB:27:A5:DD:A0:65:97:86
            X509v3 Authority Key Identifier:
                keyid:E8:4B:EF:96:61:6B:65:2D:C3:64:18:47:05:55:FE:8D:59:22:18:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:2a:a4:89:58:a4:32:69:37:30:cd:2d:e7:a6:96:0e:2c:ba:
         7a:1f:6a:18:6f:ea:fd:0f:da:c6:25:d6:f7:69:82:48:99:76:
         58:7f:f8:3c:17:84:8e:1a:e2:d4:88:45:26:39:90:31:bb:a5:
         90:05:cf:53:fc:20:02:3a:2a:ef:f8:fc:e8:ea:a4:37:f4:be:
         b2:bb:ce:ef:a3:38:fc:47:0a:d1:57:60:23:35:cc:50:3d:37:
         a6:22:82:26:8b:73:12:2b:83:13:c6:bd:be:5a:48:dd:71:b0:
         81:5e:f8:44:4a:c2:88:41:ce:33:53:6c:8d:ec:5a:05:25:f1:
         41:0d:7c:05:74:b9:91:53:67:1a:ef:0b:92:53:41:a9:38:cb:
         ee:0a:83:11:b7:e8:f9:3e:ce:b5:12:d2:ff:51:a8:e9:a0:ce:
         e4:83:dc:d2:96:4e:d4:bf:0c:db:7b:20:60:02:ef:0f:5a:43:
         a0:7e:ca:ac:6a:4e:60:34:2a:38:cb:eb:60:75:81:e8:29:85:
         7c:16:ab:13:7e:b4:88:79:7b:4f:10:01:e4:49:21:b1:1e:d5:
         32:12:f6:89:3d:24:42:67:9e:77:bf:36:64:20:09:72:71:68:
         f4:96:8a:8e:4a:e3:5d:29:5b:68:a7:1e:17:e5:d7:b3:18:72:
         ac:49:06:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:44:42 2025 by rpki-client