Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
File:                     6KLSPD104jfeTjH3EuQUtdTvXIY.mft (raw, json)
Hash identifier:          qIObTEzZL9wR3u1JLakc9WFvRRSelhsILL6E+qnLAMw=
Subject key identifier:   37:BF:68:7C:F6:72:60:31:A2:A6:07:32:08:32:85:4D:71:60:22:86
Authority key identifier: E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86
Certificate issuer:       /CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
Certificate serial:       0196C683817211ACCF5D4A06935E762AFD8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
Manifest number:          1242
Signing time:             Mon 12 May 2025 22:00:29 +0000
Manifest this update:     Mon 12 May 2025 22:00:29 +0000
Manifest next update:     Tue 13 May 2025 22:00:29 +0000
Files and hashes:         1: 6KLSPD104jfeTjH3EuQUtdTvXIY.crl (hash: EyR08xunOTUIFk/IV6ttT9N/BYFsNmNRtlQRsVFhiUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:83:81:72:11:ac:cf:5d:4a:06:93:5e:76:2a:fd:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
        Validity
            Not Before: May 12 22:00:29 2025 GMT
            Not After : May 13 22:00:29 2025 GMT
        Subject: CN=37bf687cf6726031a2a607320832854d71602286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ed:e7:ad:1a:e2:de:b4:ba:85:ad:4c:cd:79:
                    e1:81:3a:78:79:9b:64:d6:58:0d:22:71:4c:3d:27:
                    6d:12:ac:4e:cd:42:98:bd:bf:0d:09:83:0e:d6:38:
                    92:c8:90:57:d6:fd:3a:a7:7d:72:75:c2:c9:9c:39:
                    d5:52:ad:41:09:bd:42:aa:6b:76:78:83:64:6a:22:
                    83:7e:e4:1a:d3:a5:f5:c6:5f:26:b7:8a:bb:bc:f4:
                    26:4b:e5:1f:ac:6f:fb:22:aa:dd:fd:ae:d5:6f:ce:
                    db:94:69:12:0c:61:f3:b9:06:42:42:38:94:3f:88:
                    2b:cf:f5:9c:94:89:da:a3:88:10:e6:8a:65:c3:cc:
                    d3:7c:33:83:db:be:47:fe:09:f0:e9:d2:ad:6a:c8:
                    40:78:ed:b3:7c:69:26:26:64:98:c1:eb:a6:2a:bb:
                    51:0a:49:90:7b:30:f2:d3:51:3e:8a:ce:6b:81:63:
                    9a:71:f4:37:c2:eb:72:bf:bf:fe:28:9c:92:13:f4:
                    8e:bb:ca:f6:d3:10:ee:93:22:ef:c7:09:93:43:c7:
                    a1:62:be:c5:62:11:9c:dc:8f:75:89:46:44:90:26:
                    69:c3:c1:bf:67:16:6a:b2:03:6d:f1:16:b3:bd:04:
                    73:e2:e1:a6:c2:73:17:0c:34:d7:6f:5d:e1:f5:7b:
                    bd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BF:68:7C:F6:72:60:31:A2:A6:07:32:08:32:85:4D:71:60:22:86
            X509v3 Authority Key Identifier:
                keyid:E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:15:ef:31:f8:4c:d1:85:48:38:75:69:4a:5c:af:71:86:98:
         8c:f8:7f:f0:79:f5:3d:b0:3d:44:7e:9d:f5:20:9c:b6:5a:c2:
         84:a6:5d:88:25:5e:dd:5e:59:23:79:1c:58:a2:cb:d5:01:8a:
         01:58:fd:6e:6c:36:fc:d9:47:41:f8:34:7d:2a:38:7d:f4:6a:
         aa:34:ba:59:92:30:b9:99:39:72:2d:cd:fc:ce:29:ee:9e:f4:
         00:61:d4:14:58:16:9b:be:1a:7a:f5:43:99:ba:90:34:dc:5f:
         9f:fc:04:83:db:63:b0:37:c4:80:ca:55:a4:bc:c1:70:04:ca:
         2e:7f:83:44:21:2c:ed:75:dc:00:c1:02:35:23:ef:68:2f:f8:
         30:35:1b:3a:10:c3:1c:3d:86:30:a2:b2:a8:75:02:71:f7:2c:
         7c:c1:86:9a:43:5e:74:da:2a:0a:62:ef:f6:fd:48:83:3e:48:
         73:26:66:e8:9f:18:2a:c5:52:98:1c:3a:05:dc:f5:4b:3b:f0:
         ab:96:3d:69:c8:85:23:19:72:41:fe:00:fc:db:36:e5:d0:f3:
         21:b8:c5:ad:87:3b:82:d9:fe:93:3e:47:ac:d0:c6:7b:3c:02:
         1b:8a:af:95:13:1c:d9:e3:19:21:e6:13:c7:73:50:b3:6f:be:
         98:62:0f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:03:47 2025 by rpki-client