Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
File:                     6RJGEsq9EBwYyTXtIXdaDlxKibc.mft (raw, json)
Hash identifier:          veNSEl6Jo8F8cO9rPbY4CU1SdI8EC2RLzBaPbJBN70E=
Subject key identifier:   A3:EF:95:41:82:4A:AA:DB:F4:E2:2C:EC:27:2F:72:5F:E2:12:F4:12
Authority key identifier: E9:12:46:12:CA:BD:10:1C:18:C9:35:ED:21:77:5A:0E:5C:4A:89:B7
Certificate issuer:       /CN=e9124612cabd101c18c935ed21775a0e5c4a89b7
Certificate serial:       01983DCFBF89237CB241C0A1BB7B59DC82AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
Manifest number:          09A0
Signing time:             Thu 24 Jul 2025 19:01:21 +0000
Manifest this update:     Thu 24 Jul 2025 19:01:21 +0000
Manifest next update:     Fri 25 Jul 2025 19:01:21 +0000
Files and hashes:         1: 6RJGEsq9EBwYyTXtIXdaDlxKibc.crl (hash: uxGQirvb8maB1HCCAKl6l58jfAN0asi/BJdKUhXYb3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3d:cf:bf:89:23:7c:b2:41:c0:a1:bb:7b:59:dc:82:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9124612cabd101c18c935ed21775a0e5c4a89b7
        Validity
            Not Before: Jul 24 19:01:21 2025 GMT
            Not After : Jul 25 19:01:21 2025 GMT
        Subject: CN=a3ef9541824aaadbf4e22cec272f725fe212f412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5c:f6:97:2d:c0:ee:73:7f:b3:74:59:a8:2a:
                    12:41:83:dd:84:33:93:f4:67:88:8a:64:b4:74:42:
                    e7:5a:b9:5b:9e:32:0d:5a:22:1e:17:1a:d4:3f:9f:
                    a2:d7:06:72:04:3c:a6:15:1a:ab:6d:b1:dd:39:36:
                    8c:ec:4c:84:ae:ca:cb:2a:0f:d1:e4:be:64:de:15:
                    7e:de:44:60:55:cc:52:13:65:64:76:f1:7d:c9:ee:
                    d7:b9:55:f8:ea:39:3a:28:e7:8a:42:1a:18:46:14:
                    be:fc:90:18:b0:b1:c8:dd:af:c0:db:6a:c9:ef:93:
                    a8:53:70:76:0e:51:f0:98:d9:db:d8:13:24:99:01:
                    e9:70:af:76:aa:80:19:48:fd:84:1d:1b:a7:be:fc:
                    e4:89:c1:ba:37:3e:15:3c:2c:d3:6b:14:4b:07:1e:
                    a9:f0:1c:28:45:e9:ed:30:48:f2:73:9c:0f:17:0c:
                    5e:4d:f8:6a:10:73:7b:26:3a:1f:52:1d:d2:39:49:
                    2c:91:ba:98:1e:6c:99:42:a9:48:0f:cb:c2:9d:8c:
                    f2:c3:b2:17:79:eb:1b:bc:0c:59:ab:4f:14:b8:69:
                    6b:80:4d:e8:1a:59:cb:8e:63:ff:40:e5:72:14:a5:
                    02:26:72:93:65:ee:02:99:30:ad:30:5a:3e:db:78:
                    a5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EF:95:41:82:4A:AA:DB:F4:E2:2C:EC:27:2F:72:5F:E2:12:F4:12
            X509v3 Authority Key Identifier:
                keyid:E9:12:46:12:CA:BD:10:1C:18:C9:35:ED:21:77:5A:0E:5C:4A:89:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:f7:6d:5b:0e:2f:92:bf:0c:6f:66:be:52:79:32:85:91:7b:
         32:20:f9:24:df:4c:b0:12:fb:72:87:4a:12:66:ce:9b:94:99:
         3a:98:bc:2d:49:42:f9:5f:78:55:d1:fe:43:aa:5c:cf:5e:06:
         a4:23:2e:e1:0d:57:c9:1b:15:b8:f4:d5:04:df:e6:e4:0b:15:
         96:bb:71:29:ad:76:95:e6:58:65:3f:de:2a:b4:a3:58:76:33:
         f2:58:30:2e:6f:29:21:64:ca:8e:f3:3c:77:03:30:62:8c:30:
         9e:d9:d6:dc:ed:54:06:a6:52:ea:2d:1a:9f:af:c8:1e:ca:67:
         48:1c:c6:bd:52:9e:ff:0f:1b:71:a6:69:fe:cf:0c:0b:ee:8c:
         28:94:6c:e9:ac:c8:e8:9a:de:46:ab:e9:c6:45:e2:04:6b:8b:
         5e:cc:5c:be:77:62:30:a2:7c:c6:12:52:da:76:88:06:81:4e:
         d8:6d:97:c0:92:4a:b5:d6:02:a3:86:4c:5b:5f:f8:ac:6d:1b:
         79:1a:a9:f5:93:b7:21:a2:33:c7:92:f9:ef:74:f9:2a:b3:24:
         29:f3:2c:21:1d:34:bd:79:44:00:18:2e:1a:5a:96:71:b2:29:
         5f:3d:6c:0f:20:83:7e:83:ee:15:39:75:3f:f3:82:32:6a:b3:
         bf:69:7a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 22:56:23 2025 by rpki-client