Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
File:                     6s3B4kf6qVMYCCpKxe29gFEfjfc.mft (raw, json)
Hash identifier:          S60dmdSgYswnlFpkSp240dXhJbrwgNyLqhyl/ErEwp0=
Subject key identifier:   71:5E:C0:D4:9D:0D:1C:13:70:7C:68:54:92:07:73:7F:FF:BC:CA:45
Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
Certificate issuer:       /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Certificate serial:       0197B8212F45144DDEAE62D11577DD775162
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
Manifest number:          0F
Signing time:             Sat 28 Jun 2025 20:01:11 +0000
Manifest this update:     Sat 28 Jun 2025 20:01:11 +0000
Manifest next update:     Sun 29 Jun 2025 20:01:11 +0000
Files and hashes:         1: 6s3B4kf6qVMYCCpKxe29gFEfjfc.crl (hash: 8BBES7UFbvqMKGUiBd+rjkOrF7sWOfAtlH1X4cVsa/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:21:2f:45:14:4d:de:ae:62:d1:15:77:dd:77:51:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
        Validity
            Not Before: Jun 28 20:01:11 2025 GMT
            Not After : Jun 29 20:01:11 2025 GMT
        Subject: CN=715ec0d49d0d1c13707c68549207737fffbcca45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f4:fd:cf:7e:f8:14:b2:16:c0:fe:e5:52:6d:
                    8e:0b:1b:6a:ea:ad:f3:82:a6:6b:20:00:94:53:31:
                    1a:4f:0d:57:85:21:7d:8f:d8:31:61:04:d7:b0:44:
                    4b:a6:ff:86:8c:09:2d:92:a5:c0:28:71:ad:9b:fa:
                    dc:65:81:76:7f:bc:92:99:9f:7c:5c:b6:85:9e:5c:
                    42:26:65:ae:75:c2:fe:c0:6d:b3:46:2c:a1:f7:cd:
                    5a:28:64:cd:6b:b4:b3:ed:ea:b6:56:78:ee:aa:31:
                    c9:22:1b:21:57:d1:1d:02:84:1d:48:46:4d:31:d9:
                    ce:9a:80:7d:ab:50:bb:cf:f0:25:a1:16:4d:92:a3:
                    8f:91:38:93:07:99:33:1c:9f:3a:e2:53:ec:f5:a6:
                    54:66:b7:4c:ab:76:b7:99:18:3d:d0:17:60:78:6c:
                    67:06:71:21:2d:be:42:38:cb:06:fb:56:b7:39:93:
                    50:2d:c3:28:30:13:71:1a:6f:f5:00:4b:3a:89:a4:
                    81:fb:a2:2d:2d:8b:28:5f:39:de:d2:42:03:83:67:
                    e3:79:ad:aa:d9:7a:51:cb:99:ed:21:34:b1:29:35:
                    44:a5:9e:26:e8:5b:23:ec:d4:81:87:c3:96:9f:5c:
                    aa:6a:4a:48:76:d8:2a:54:5c:bc:1e:b8:65:9c:7c:
                    59:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5E:C0:D4:9D:0D:1C:13:70:7C:68:54:92:07:73:7F:FF:BC:CA:45
            X509v3 Authority Key Identifier:
                keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:62:83:76:77:80:74:f3:fe:3f:45:aa:1e:35:0c:1d:1a:c0:
         00:63:d9:96:f0:3c:a6:5a:a0:5b:3d:15:c0:cd:7a:74:43:8e:
         0b:f2:72:64:8f:3a:77:49:a7:63:c8:6c:2f:bc:83:d3:a0:b8:
         f5:ba:74:7c:e0:e6:b5:71:3b:4f:be:f6:10:3e:ef:e2:a8:7c:
         8b:44:49:03:98:56:50:11:ba:78:63:fa:12:41:19:bf:60:6c:
         63:1a:10:24:c2:84:4b:a0:2c:fd:8f:9d:ba:a3:35:33:24:98:
         ef:98:19:2e:da:14:47:f5:cc:90:db:87:69:7e:19:3c:a6:7f:
         45:a5:05:fd:c3:b3:b2:6e:99:2b:b1:37:e6:34:78:b6:1b:c2:
         17:ef:d4:81:23:1f:45:70:78:73:11:d3:ad:ac:ea:67:7f:fb:
         54:af:52:1f:89:6c:28:90:7a:17:4a:ee:3a:e5:70:a8:0b:35:
         a7:c9:14:fc:80:98:cd:c6:8c:74:98:ae:de:01:55:b3:74:38:
         f7:19:23:a7:57:07:d3:ef:b7:fc:36:04:68:eb:37:53:d9:d8:
         48:01:2f:37:7c:61:c0:02:de:75:21:9f:3c:c5:d0:0d:42:35:
         f8:fe:e4:14:39:d1:16:09:87:2b:f6:1f:d5:b1:9f:68:02:76:
         70:30:4e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:24:39 2025 by rpki-client