Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
File:                     6RJGEsq9EBwYyTXtIXdaDlxKibc.mft (raw, json)
Hash identifier:          tJ1uY2dSU/WeADJazELJ/5wiS8I8whJ7RtgQrYnSfe4=
Subject key identifier:   B1:C3:7E:A5:5E:0E:89:02:83:5F:74:DE:9C:DD:75:8B:0C:F5:14:57
Authority key identifier: E9:12:46:12:CA:BD:10:1C:18:C9:35:ED:21:77:5A:0E:5C:4A:89:B7
Certificate issuer:       /CN=e9124612cabd101c18c935ed21775a0e5c4a89b7
Certificate serial:       0196B7B56FD8B1D5DA7EF65F96F1625AE840
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
Manifest number:          08D6
Signing time:             Sat 10 May 2025 01:00:43 +0000
Manifest this update:     Sat 10 May 2025 01:00:43 +0000
Manifest next update:     Sun 11 May 2025 01:00:43 +0000
Files and hashes:         1: 6RJGEsq9EBwYyTXtIXdaDlxKibc.crl (hash: vWuIUO6+2386gvoaIOjTrf9g7DXMpd91uFYb4nYHmvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 01:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:b5:6f:d8:b1:d5:da:7e:f6:5f:96:f1:62:5a:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9124612cabd101c18c935ed21775a0e5c4a89b7
        Validity
            Not Before: May 10 01:00:43 2025 GMT
            Not After : May 11 01:00:43 2025 GMT
        Subject: CN=b1c37ea55e0e8902835f74de9cdd758b0cf51457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bf:47:53:e0:51:e1:48:6d:02:d6:8f:56:d3:
                    be:d2:ab:93:41:80:e4:3f:49:31:ec:b3:54:a1:38:
                    fa:4b:da:01:0a:47:a6:74:cd:38:31:e7:60:f9:0d:
                    01:61:f4:3f:8e:3d:72:24:d8:b9:9e:f6:2f:45:9c:
                    78:f4:b4:2e:53:40:63:d0:ca:4c:a8:30:e6:a5:7d:
                    d6:3b:48:8d:91:53:0e:d5:eb:a4:2b:0c:35:25:81:
                    0a:9d:31:e1:d8:a0:0e:7e:21:1f:2c:31:21:1d:9f:
                    32:cc:b3:b8:29:dd:e4:80:2c:36:24:54:8c:8b:1c:
                    95:86:e8:13:71:be:3a:cb:7a:b8:c0:33:45:cd:1d:
                    2e:15:7c:a9:45:ab:ee:71:bc:26:3a:7a:d0:1c:fe:
                    30:58:db:a3:16:b5:b4:16:25:9b:61:2e:af:4e:94:
                    61:50:db:5f:31:cf:6b:c9:a0:9e:1a:17:b1:b0:82:
                    12:42:1d:25:cb:98:98:86:37:52:81:d1:9c:59:64:
                    10:93:d8:c3:8f:b7:16:98:e7:eb:42:5d:b7:cb:ee:
                    20:fa:d7:30:44:e7:58:94:b6:e7:ec:3d:a5:ee:0c:
                    db:4a:fe:95:8e:ca:6a:01:87:09:d3:97:88:82:4b:
                    96:ac:2a:20:d4:fd:71:26:ad:15:f5:68:d6:88:46:
                    33:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C3:7E:A5:5E:0E:89:02:83:5F:74:DE:9C:DD:75:8B:0C:F5:14:57
            X509v3 Authority Key Identifier:
                keyid:E9:12:46:12:CA:BD:10:1C:18:C9:35:ED:21:77:5A:0E:5C:4A:89:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:d8:a5:b9:46:2d:ab:66:83:9d:b9:20:83:a1:26:12:bd:2e:
         99:cb:2b:6d:e6:ee:da:74:bc:0a:b7:7f:60:70:4f:ac:37:fc:
         ed:af:47:ce:f4:23:d0:8b:8c:44:42:d5:5b:7b:1d:c0:5f:3e:
         e7:51:94:38:93:6d:2d:cf:e3:dc:3e:ab:2a:30:45:f3:b8:ff:
         97:9e:12:6a:07:56:84:76:0b:0f:e0:4d:ee:05:2b:b4:07:a3:
         9f:88:2a:b3:fb:90:82:60:1a:6d:ac:a4:7a:da:48:52:a0:8a:
         1d:48:51:8d:2e:c7:30:29:2a:bc:ed:b2:b5:98:1a:20:98:69:
         51:1e:94:89:02:92:91:c4:24:e2:ac:be:36:65:e1:66:9d:5f:
         c4:32:25:16:69:6a:a1:d2:b8:c1:dd:32:f7:6c:bf:f6:02:fe:
         3a:65:35:43:d4:50:95:dd:dc:8e:b9:d1:f8:6f:9c:08:be:d8:
         44:e8:bd:c5:d3:4b:12:29:31:b5:97:da:a2:99:f1:12:18:32:
         3d:37:c6:f0:7f:38:d4:1b:61:de:ef:86:35:4f:63:df:0f:e5:
         25:da:40:d5:17:e6:09:c4:61:03:6a:c4:f4:a3:51:6d:ac:77:
         c3:ad:af:21:e9:a6:9f:a7:f4:36:83:3e:ba:57:e7:86:48:e0:
         05:f2:33:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:13:09 2025 by rpki-client