Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
File:                     6Is19ZnvHCbySYP5Fafq7GeXx_o.mft (raw, json)
Hash identifier:          EtHbYuLQg7ATWDH3JhQ6w1RfeXemSql/6javMX8AlIg=
Subject key identifier:   EA:1A:A1:2B:C6:D4:FD:1E:AC:FB:11:7E:D4:B0:29:15:A6:2C:9D:52
Authority key identifier: E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA
Certificate issuer:       /CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
Certificate serial:       0196AC1F8BC7F9E07F0DC40F8509627B0303
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
Manifest number:          1140
Signing time:             Wed 07 May 2025 19:01:10 +0000
Manifest this update:     Wed 07 May 2025 19:01:10 +0000
Manifest next update:     Thu 08 May 2025 19:01:10 +0000
Files and hashes:         1: 6Is19ZnvHCbySYP5Fafq7GeXx_o.crl (hash: p/iUrSJWV5Gjcq0FtFWu5hfGaackTQpDIJwbJMkFE4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 19:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:1f:8b:c7:f9:e0:7f:0d:c4:0f:85:09:62:7b:03:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
        Validity
            Not Before: May  7 19:01:10 2025 GMT
            Not After : May  8 19:01:10 2025 GMT
        Subject: CN=ea1aa12bc6d4fd1eacfb117ed4b02915a62c9d52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b5:61:93:00:87:48:15:ca:a0:ad:d5:12:b3:
                    14:2a:a9:78:b4:51:03:cf:d5:bf:04:b7:08:32:e0:
                    55:04:e5:5c:4d:16:5e:d7:44:3d:08:ea:93:ca:06:
                    66:a5:c9:f0:0c:7f:aa:e2:21:a8:e0:8d:ad:56:10:
                    58:dc:e4:a1:e4:86:00:4f:09:15:e9:be:c2:9d:88:
                    a1:ea:c6:6a:64:5b:17:84:6b:ab:b2:e7:d2:ee:9a:
                    ee:dd:5b:32:49:3b:3c:73:e3:1e:c0:cd:13:92:6e:
                    58:1e:ac:81:ab:5e:a2:c8:42:f7:f6:1d:2a:0b:fa:
                    7e:a0:da:d6:0e:32:6a:fc:db:0d:7f:dd:48:65:7d:
                    f6:e8:c2:0a:2c:79:eb:f6:39:92:e8:34:25:18:a0:
                    e9:b3:5b:e8:fe:ce:12:4c:e7:90:8f:18:f7:93:ff:
                    85:41:ef:c0:64:db:8f:d8:e1:e4:b3:b9:b3:3e:32:
                    12:e1:1a:8a:62:7c:bf:13:e0:76:5c:5e:6f:c3:cc:
                    47:40:c3:28:a0:45:44:30:6c:ef:df:31:36:3f:fb:
                    6d:a5:ae:36:1f:5d:f1:6c:ed:96:ee:14:1b:9b:eb:
                    2e:b7:a7:86:50:f1:39:08:01:cd:51:bf:08:ae:4e:
                    39:c8:91:f4:78:40:dc:1f:c8:b9:7c:be:dd:51:e0:
                    e4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1A:A1:2B:C6:D4:FD:1E:AC:FB:11:7E:D4:B0:29:15:A6:2C:9D:52
            X509v3 Authority Key Identifier:
                keyid:E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:62:c2:2d:47:74:01:3a:82:5c:d8:3d:8c:f4:49:4d:17:76:
         7a:99:e4:7e:a2:3d:12:22:8f:90:9c:45:07:26:62:37:b6:1d:
         fd:04:44:33:ae:fc:88:fe:e7:70:d4:88:6b:e7:ff:0f:4f:47:
         48:ed:20:d1:1d:35:a1:3f:9b:7e:6f:ab:1b:ae:ab:c7:3d:f2:
         7a:41:73:fb:d1:5c:2e:8b:6e:62:2f:a3:55:d5:bb:6b:68:c3:
         bc:06:99:77:f5:4b:75:97:9b:17:63:f1:19:35:aa:9c:25:df:
         f7:7d:ff:39:68:81:45:81:1c:06:6a:e3:42:0c:6d:cf:23:bc:
         cf:9c:d5:b9:32:59:95:5d:2f:09:90:95:1c:30:34:02:3a:82:
         98:b2:76:ef:8a:94:24:2c:ca:98:5b:53:28:27:fc:7f:7c:bd:
         2f:cb:b6:fa:73:18:30:0a:e5:73:b4:68:ff:13:fe:38:c6:8c:
         a9:21:3b:3e:f9:0a:a4:2b:4e:86:af:b4:fa:11:0e:eb:07:84:
         06:41:a0:a3:7c:47:77:44:08:bf:38:c7:76:72:e1:07:9c:b8:
         cd:74:84:eb:6c:a4:ca:92:01:a0:0a:77:fb:d6:a3:3a:c3:9a:
         5c:a3:f0:02:09:ea:12:16:81:c7:65:65:8b:97:d3:d4:06:a9:
         35:fc:91:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:12:11 2025 by rpki-client