Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
File:                     6KCkA2ab6r8q124AHLl9FdB-Kdk.mft (raw, json)
Hash identifier:          NJmh6AmuJLLt8TPCDJtWiQmTsnMT2cQAV+eZyw4XT+s=
Subject key identifier:   13:91:BA:CE:F1:F3:65:76:DD:05:F6:08:A9:74:7A:CC:FA:C4:82:74
Authority key identifier: E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
Certificate issuer:       /CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Certificate serial:       0197496815E165D40B0936A39570EBC78205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 08:00:47 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:47 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:47 +0000
Files and hashes:         1: 6KCkA2ab6r8q124AHLl9FdB-Kdk.crl (hash: bD0za6bmsVq0qoWXiuGPpubaVxHxhNt+XqjG8OSqN0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:68:15:e1:65:d4:0b:09:36:a3:95:70:eb:c7:82:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
        Validity
            Not Before: Jun  7 08:00:47 2025 GMT
            Not After : Jun  8 08:00:47 2025 GMT
        Subject: CN=1391bacef1f36576dd05f608a9747accfac48274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e9:7e:0a:f2:92:c6:c4:9a:66:e6:90:d7:81:
                    09:71:5b:56:3e:a5:13:e4:5b:25:37:69:bb:13:b5:
                    c7:51:fb:ef:9e:0a:8b:8c:9a:11:3c:5d:24:4a:d6:
                    de:81:10:bb:f5:27:00:eb:0d:4b:d4:37:56:5b:aa:
                    a9:b8:b1:c3:76:e6:6a:31:4e:b9:e9:1a:f3:ec:28:
                    98:f6:88:04:f7:24:73:7b:c3:63:59:f7:73:97:b6:
                    6e:b9:99:71:35:4a:46:08:75:aa:bd:2d:fd:60:a5:
                    34:33:4d:a8:e8:c1:7f:0e:f9:85:35:21:dc:15:e8:
                    ac:a0:1a:34:1a:14:d9:d7:68:c1:c7:67:ca:a0:b8:
                    c7:ed:29:35:76:51:37:19:d0:2b:89:d1:25:a8:8c:
                    3b:6a:60:5b:d1:6a:86:1f:c5:02:6f:61:df:70:74:
                    8e:f2:70:51:52:4d:78:cb:61:35:3b:de:a9:64:5f:
                    a3:4c:c9:ab:4c:9d:a2:66:6c:97:b2:15:d5:8d:fd:
                    33:2a:fd:40:1d:d5:77:40:88:0a:e6:dd:90:b3:28:
                    31:b4:7e:38:9d:bf:b7:05:a9:e2:00:7d:99:ca:c7:
                    b6:85:66:43:9b:4b:94:85:ae:45:27:e4:20:53:bf:
                    90:d1:0c:35:43:e0:ee:29:8f:c6:8f:e1:e6:81:1b:
                    f9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:91:BA:CE:F1:F3:65:76:DD:05:F6:08:A9:74:7A:CC:FA:C4:82:74
            X509v3 Authority Key Identifier:
                keyid:E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ba:39:d3:8a:64:91:ac:df:fe:05:13:9a:ab:92:f1:ad:f4:
         c4:73:7f:e0:c2:ce:63:e2:58:11:c8:54:e3:2b:06:5a:ad:7b:
         e8:31:4b:bc:1f:87:cc:df:eb:8c:d7:57:94:16:ce:aa:1d:23:
         6f:e9:11:d4:81:a7:f2:65:2c:3f:ce:ef:65:83:be:b9:6c:b5:
         a4:2f:a8:aa:46:eb:4d:20:2a:53:ee:58:03:17:99:ae:25:f6:
         71:8b:77:94:dc:13:d7:a8:34:04:42:6a:9b:db:f5:74:db:d2:
         7b:97:e6:51:b1:fe:cb:20:76:ce:c7:31:85:5e:d6:85:f3:52:
         47:05:4e:95:1d:de:f9:8d:db:bb:a7:e2:20:48:c2:ef:66:64:
         6a:58:51:b3:b8:5e:63:28:fb:d6:53:10:b1:79:c6:44:5c:d8:
         b4:ec:4f:e8:ec:23:92:0b:c2:0d:1a:a4:5f:4c:f9:99:21:73:
         32:a1:da:d7:fa:b8:8e:d3:68:eb:72:59:40:05:5a:df:b6:21:
         f8:f2:81:ac:14:b6:a4:9a:9a:ca:f2:b7:15:12:e0:17:fa:7c:
         bd:55:49:64:93:bd:af:05:e8:4e:d2:7f:d0:7d:61:5a:53:2b:
         4e:2c:90:4e:2e:f7:d1:ea:aa:01:af:d0:49:9c:9a:89:86:e4:
         01:07:fa:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:22:47 2025 by rpki-client