Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
File:                     6T5Zf3uhSto19PbFD4plg6BPzDU.mft (raw, json)
Hash identifier:          3fZ5855nnKtGC4mR+yXY404s5i29cRqsHLdvp0O8JCM=
Subject key identifier:   F2:1E:FC:66:D6:56:5E:53:2D:30:10:B5:E7:1C:22:9C:17:D7:1A:27
Authority key identifier: E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35
Certificate issuer:       /CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35
Certificate serial:       0198D5833FD820995D50C6EF9113D8A0EDD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
Manifest number:          03D6
Signing time:             Sat 23 Aug 2025 06:00:05 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:05 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:05 +0000
Files and hashes:         1: 6T5Zf3uhSto19PbFD4plg6BPzDU.crl (hash: S7UelS4XrrOeZrGoiviVlo54AkgzdKbs/iIr8vC5dbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:3f:d8:20:99:5d:50:c6:ef:91:13:d8:a0:ed:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35
        Validity
            Not Before: Aug 23 06:00:05 2025 GMT
            Not After : Aug 24 06:00:05 2025 GMT
        Subject: CN=f21efc66d6565e532d3010b5e71c229c17d71a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:66:6c:3e:c8:cd:3c:f5:b1:b7:22:cc:17:ea:
                    7e:e6:b3:a4:5d:a4:ad:87:5a:5e:11:5b:5c:c2:3e:
                    60:5d:2b:c5:08:ce:ee:4b:ad:0c:79:af:54:9b:c1:
                    0c:cf:90:71:62:73:b6:bb:5c:10:88:21:a9:1c:68:
                    46:b0:cf:34:94:40:4c:03:3f:82:a4:3b:39:1f:fe:
                    9a:47:b0:72:1f:50:03:92:7b:12:a9:c9:1e:14:57:
                    82:e3:60:46:54:56:5b:6a:c0:9e:6c:70:b9:27:d4:
                    0d:37:75:02:4f:ea:de:a4:9b:e8:bd:08:23:d3:ab:
                    21:c3:b6:01:38:1d:dc:19:33:22:5a:fe:53:76:ee:
                    52:fa:60:8e:22:1b:6f:1c:76:a3:b6:2f:43:60:f1:
                    b4:7d:d6:f4:e0:d1:d5:2c:1d:8a:0f:24:f9:fb:92:
                    64:92:71:d0:08:39:b3:3e:29:61:80:7a:66:0b:68:
                    d0:0f:73:5c:f7:48:5b:5d:f4:85:51:1d:7d:6f:9a:
                    82:50:cc:4c:ee:6a:42:f6:08:3e:26:fe:25:49:dd:
                    5e:c8:5a:5d:e4:6c:76:05:74:9d:b0:24:de:f6:41:
                    aa:37:c6:ce:4c:b2:79:14:32:a7:22:4a:7a:fc:f6:
                    b1:16:3f:a6:30:29:e7:f2:87:d5:4b:68:40:e7:16:
                    ce:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1E:FC:66:D6:56:5E:53:2D:30:10:B5:E7:1C:22:9C:17:D7:1A:27
            X509v3 Authority Key Identifier:
                keyid:E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:a7:35:6d:f8:2f:01:c3:85:f2:4f:df:c4:39:97:5f:1c:a5:
         df:e5:cc:75:8b:4c:28:61:a4:e6:94:a0:1e:3f:6c:3a:9e:08:
         59:f9:0b:cc:50:52:cc:a0:0b:c3:d7:23:69:d7:21:7c:09:70:
         f1:e9:bb:a7:53:62:c7:12:ee:0a:e3:2e:bb:4d:8c:0e:37:d1:
         16:61:e0:6f:0a:b6:09:79:a3:d5:1e:56:03:4b:49:4b:2c:62:
         fd:68:c7:9a:bb:43:50:12:0a:a6:b9:ea:03:dd:da:d7:69:6f:
         92:1c:1a:64:69:1b:09:55:79:1f:f3:83:be:17:aa:70:e3:83:
         90:79:f1:41:a9:d6:c6:ce:1b:95:96:a8:46:2a:06:f7:4d:32:
         29:b6:15:83:ee:e9:c8:3f:03:9f:24:8b:71:87:6e:e8:98:7e:
         1c:aa:09:9c:ef:6a:84:cf:fd:d8:16:97:4f:40:1c:bb:2e:f5:
         a8:e0:7f:56:48:8a:91:3b:c1:81:85:63:e8:eb:dd:41:79:cb:
         b0:3a:df:c3:e0:e4:93:e4:ac:64:fb:27:12:26:1c:c8:82:c7:
         3a:bc:ea:c7:6c:57:50:d4:d7:ce:95:32:96:6e:31:b3:70:5a:
         9e:c5:16:0a:4e:bf:17:13:32:ff:83:24:92:59:6f:8e:16:0d:
         a7:82:77:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:05 2025 by rpki-client