Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
File:                     qS6nWOQVWUqAN__beY9ruRjBXmQ.mft (raw, json)
Hash identifier:          7LBbnmsxLJHyVOKL9UOa03spbjOPyVOU/6EiXQlxXHY=
Subject key identifier:   6D:26:F0:37:7F:4E:5E:D0:B3:EE:F8:9E:2E:4C:41:20:95:27:C4:97
Authority key identifier: A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64
Certificate issuer:       /CN=a92ea758e415594a8037ffdb798f6bb918c15e64
Certificate serial:       019761028785D5538BF1A0B88B6555B12815
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
Manifest number:          13C5
Signing time:             Wed 11 Jun 2025 22:00:44 +0000
Manifest this update:     Wed 11 Jun 2025 22:00:44 +0000
Manifest next update:     Thu 12 Jun 2025 22:00:44 +0000
Files and hashes:         1: qS6nWOQVWUqAN__beY9ruRjBXmQ.crl (hash: 9A4pbI+Q9HsIZ341mAB0bjVuf9OTh5sCN1hN3dZhl+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:02:87:85:d5:53:8b:f1:a0:b8:8b:65:55:b1:28:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92ea758e415594a8037ffdb798f6bb918c15e64
        Validity
            Not Before: Jun 11 22:00:44 2025 GMT
            Not After : Jun 12 22:00:44 2025 GMT
        Subject: CN=6d26f0377f4e5ed0b3eef89e2e4c41209527c497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6b:aa:21:bf:de:b2:02:a3:8a:34:b1:a5:3c:
                    fd:ad:d6:2f:79:9d:9c:47:d6:08:dd:29:23:4a:5e:
                    01:1e:ae:63:ba:28:1c:31:70:f9:9e:38:c1:b8:9f:
                    99:b8:88:a9:e7:6d:f8:bf:cf:0d:3c:96:d6:43:cb:
                    2c:d4:78:5a:b0:47:9b:db:76:bb:50:66:f8:d0:f9:
                    7a:d6:c4:ba:ad:d2:8b:9c:db:b6:03:0c:a4:98:77:
                    98:2a:2b:e8:6b:b8:5a:b6:31:8f:ff:58:6a:7a:cd:
                    f9:d0:aa:bf:7b:5b:b3:1a:84:2e:e5:c3:a9:bc:7a:
                    0f:85:8c:16:55:a7:c8:f3:01:a2:cf:07:58:41:bd:
                    ec:02:a9:34:d9:02:ad:1d:57:53:77:90:83:83:e9:
                    e2:99:f6:fb:38:ae:69:a5:66:ff:87:f0:c8:d4:79:
                    b1:5a:40:03:68:a8:2e:f2:01:3d:43:dd:63:46:13:
                    ee:b7:03:5d:bb:62:0a:27:48:8a:75:a1:12:bb:c3:
                    e2:c1:44:4b:16:1b:b2:56:75:49:e4:d7:98:09:f4:
                    be:00:0d:9c:f9:34:50:55:09:77:61:f3:27:e5:f9:
                    80:6d:fd:8c:a1:61:42:38:57:ba:08:db:2a:06:92:
                    26:92:f3:80:e3:46:71:92:e4:70:1b:30:c4:51:84:
                    0d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:26:F0:37:7F:4E:5E:D0:B3:EE:F8:9E:2E:4C:41:20:95:27:C4:97
            X509v3 Authority Key Identifier:
                keyid:A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:f4:73:fe:fe:ff:99:6d:1c:6f:ba:92:80:d7:11:1e:51:b9:
         11:f7:da:62:1d:d6:1c:87:8c:30:57:f9:df:a9:35:71:e8:e8:
         5f:9d:94:f1:b7:44:4f:fd:c5:84:00:98:e7:ca:5d:57:60:69:
         b0:61:c3:51:58:d6:ea:c2:be:ba:8b:ae:f7:2f:d3:cd:a7:64:
         44:5e:7f:70:80:2b:db:d1:48:c7:8c:b9:be:20:06:3d:77:81:
         3a:f6:e9:e2:c0:3b:8c:e5:10:87:a1:39:bb:28:cf:f4:ba:8f:
         3b:b6:62:f6:10:73:0e:ac:81:2b:90:d1:60:6a:aa:df:b1:57:
         87:55:00:a3:44:db:74:34:c4:f6:9e:95:1f:1f:b9:1c:54:4a:
         62:93:bc:9e:95:a1:b2:ba:9b:81:a8:ce:ff:00:09:7c:96:82:
         79:fb:79:6d:c4:5c:b4:94:0c:cf:2d:51:96:46:14:f8:28:95:
         9a:2d:86:49:4c:51:ee:f0:e0:ac:e6:15:69:72:ca:09:42:38:
         22:de:de:3a:9c:eb:ab:14:0e:c9:91:f7:6d:c8:79:80:63:dd:
         bc:f9:86:ea:d4:cd:e3:b0:6d:21:fa:46:4d:8d:b3:d0:41:67:
         5a:d4:e4:5a:45:70:ce:1d:bd:0c:97:db:3d:43:ac:55:1d:a2:
         93:58:d9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:49:53 2025 by rpki-client