Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.mft
File:                     6eybY31F3ICc9SE_ZXpjWpDjFx4.mft (raw, json)
Hash identifier:          CT/zKYEMKV+pZiLxQ+mz37l8yot/H+hcvXlrOVZfHVw=
Subject key identifier:   26:BB:5E:34:A3:C3:AA:85:CE:96:0A:72:77:FC:8A:3B:49:7C:67:67
Authority key identifier: E9:EC:9B:63:7D:45:DC:80:9C:F5:21:3F:65:7A:63:5A:90:E3:17:1E
Certificate issuer:       /CN=e9ec9b637d45dc809cf5213f657a635a90e3171e
Certificate serial:       0197C94BEC17913E2298B74172E5126D6941
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6eybY31F3ICc9SE_ZXpjWpDjFx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.mft
Manifest number:          09D2
Signing time:             Wed 02 Jul 2025 04:01:25 +0000
Manifest this update:     Wed 02 Jul 2025 04:01:25 +0000
Manifest next update:     Thu 03 Jul 2025 04:01:25 +0000
Files and hashes:         1: 6eybY31F3ICc9SE_ZXpjWpDjFx4.crl (hash: UaYd1feT3+wn8iFGHcbr56pYm9iZVuvn24rjkRUW4G4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6eybY31F3ICc9SE_ZXpjWpDjFx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c9:4b:ec:17:91:3e:22:98:b7:41:72:e5:12:6d:69:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9ec9b637d45dc809cf5213f657a635a90e3171e
        Validity
            Not Before: Jul  2 04:01:25 2025 GMT
            Not After : Jul  3 04:01:25 2025 GMT
        Subject: CN=26bb5e34a3c3aa85ce960a7277fc8a3b497c6767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:07:ec:4b:fd:94:54:28:d3:33:92:34:de:d8:
                    63:b1:26:a9:80:ce:2b:44:b2:45:27:6d:4c:38:fd:
                    48:46:52:30:ea:5a:7c:cb:27:28:f4:83:20:d4:8b:
                    e2:38:8d:af:ac:88:b0:46:00:e4:a6:22:81:d1:b0:
                    e2:bf:45:ee:fe:af:e1:17:c5:2f:4d:aa:0f:f5:4f:
                    cc:db:a5:b9:84:4b:03:d5:3d:55:10:48:15:f4:2c:
                    e4:cf:45:64:11:d1:ca:70:0d:4c:43:28:8f:93:a9:
                    06:87:77:d0:6e:2c:6b:f5:20:3c:b1:bd:33:d3:93:
                    10:7f:76:4e:04:14:74:32:d5:94:2a:59:ec:d9:13:
                    e8:d3:7b:6b:60:7a:71:60:36:89:15:92:b8:7c:f3:
                    69:df:bb:dd:5a:f1:2e:a8:75:64:4c:de:a7:fd:ed:
                    a2:2d:3c:10:9f:dd:80:a6:ec:4b:2e:bc:34:a2:8e:
                    21:f3:f6:89:5c:c3:a5:34:35:5d:ce:33:1f:bd:cb:
                    76:39:76:b6:13:ef:78:05:1f:2a:96:c3:fc:8d:c3:
                    1a:28:d9:78:c9:14:9a:58:5a:cd:ca:17:54:f5:62:
                    5f:84:ba:a4:02:c8:40:bf:ff:c5:f0:f7:a0:19:26:
                    62:d4:e3:8f:03:c1:39:bc:4d:9e:0f:af:a5:b2:60:
                    91:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BB:5E:34:A3:C3:AA:85:CE:96:0A:72:77:FC:8A:3B:49:7C:67:67
            X509v3 Authority Key Identifier:
                keyid:E9:EC:9B:63:7D:45:DC:80:9C:F5:21:3F:65:7A:63:5A:90:E3:17:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eybY31F3ICc9SE_ZXpjWpDjFx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d3:84:86:9f:8f:55:14:ab:1e:b7:94:6d:66:e2:99:4c:d1:
         cc:da:21:d1:2e:d7:ae:7d:83:2a:61:42:ba:33:bd:7c:3c:e3:
         07:b0:dc:23:c9:36:6a:59:56:87:62:20:d4:d9:f4:7a:98:09:
         54:d7:18:1e:ce:9b:ed:ac:ce:a5:2a:85:9e:fb:7d:08:7a:b2:
         89:6c:a7:24:02:c1:d2:bc:30:16:11:97:06:98:58:ac:63:58:
         5e:c8:92:ba:93:64:5b:29:a2:fd:1c:93:ef:0c:d2:c5:27:3a:
         a9:04:1a:b6:51:95:16:74:16:40:96:ec:ac:20:ea:dc:70:b6:
         42:95:b4:d7:93:00:8a:65:a2:b6:29:de:16:5d:89:b8:9c:97:
         e8:77:93:13:6a:ea:34:a3:91:47:8b:48:7d:d0:f3:07:84:f3:
         a8:78:5c:36:66:03:22:a2:ee:76:00:33:11:3b:b6:35:22:68:
         ea:6f:32:3b:87:32:4a:9f:4b:8d:d3:c6:7e:db:e9:64:f5:c2:
         e6:5f:94:3c:da:b1:85:da:1c:7d:5a:aa:66:84:ec:6e:6b:53:
         b2:16:bc:ff:1d:26:b9:a2:46:51:df:23:8a:0b:32:f5:b1:08:
         b8:e7:31:7c:af:4b:36:ad:87:81:fb:e5:55:91:3e:db:98:27:
         e9:4c:75:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:50:26 2025 by rpki-client