Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
File:                     bLm_6TNtoFV5BgineljMq8SWhpQ.mft (raw, json)
Hash identifier:          HYLaTKuIyORdcNcio84n8mnLATK4ZAiwK8ig0ZNQhnk=
Subject key identifier:   A4:47:5F:2D:B0:37:80:81:FC:F6:DD:91:DC:F4:4A:54:66:49:47:DE
Authority key identifier: 6C:B9:BF:E9:33:6D:A0:55:79:06:08:A7:7A:58:CC:AB:C4:96:86:94
Certificate issuer:       /CN=6cb9bfe9336da055790608a77a58ccabc4968694
Certificate serial:       01974EC5583DAE4203878ED4A0A055344E54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
Manifest number:          0C24
Signing time:             Sun 08 Jun 2025 09:00:45 +0000
Manifest this update:     Sun 08 Jun 2025 09:00:45 +0000
Manifest next update:     Mon 09 Jun 2025 09:00:45 +0000
Files and hashes:         1: bLm_6TNtoFV5BgineljMq8SWhpQ.crl (hash: /DaYJwxtpyD1KN8MApo205jY46JTt+T6FH6GB4wUVlk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 09:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:c5:58:3d:ae:42:03:87:8e:d4:a0:a0:55:34:4e:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cb9bfe9336da055790608a77a58ccabc4968694
        Validity
            Not Before: Jun  8 09:00:45 2025 GMT
            Not After : Jun  9 09:00:45 2025 GMT
        Subject: CN=a4475f2db0378081fcf6dd91dcf44a54664947de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:70:3f:5f:6c:e1:61:33:b0:a1:ab:f5:22:e1:
                    63:5a:90:48:b2:2f:6c:92:48:16:c2:52:36:f9:84:
                    c2:44:3b:55:fb:99:a6:2c:63:38:6d:ad:24:d4:d2:
                    da:78:88:06:88:90:43:50:bc:1a:df:8e:30:01:bf:
                    7c:ed:81:94:4b:dd:49:fc:1c:3a:8c:35:20:9b:bd:
                    0a:0f:0d:1d:04:ef:6c:ec:dc:9f:ac:5c:fa:14:0b:
                    eb:5f:ae:74:60:f2:60:be:97:78:64:45:29:8b:a8:
                    62:cd:6c:48:f6:45:a6:13:69:cc:f8:90:b2:b9:32:
                    43:8d:d0:3b:79:6d:a9:71:f5:b9:d8:72:f4:c3:08:
                    38:85:b6:33:02:b1:06:ae:71:47:8b:50:63:42:28:
                    54:3d:43:f0:9d:c6:52:42:76:58:2e:1d:f7:3b:4d:
                    2b:07:98:74:65:e3:50:08:e9:4f:de:37:3e:d6:90:
                    df:43:8c:f6:b2:b3:78:aa:ec:0b:fd:7a:0c:2e:84:
                    b9:0a:6b:fd:5a:47:7e:fa:f3:d6:6a:08:ef:7d:93:
                    eb:02:b7:43:b6:15:28:e6:80:e4:bf:9b:9b:9c:bf:
                    2d:40:4d:7a:25:74:dc:b6:d2:73:84:09:8f:27:5c:
                    42:a4:20:08:fd:0d:96:c3:ab:07:d8:47:97:5f:09:
                    e8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:47:5F:2D:B0:37:80:81:FC:F6:DD:91:DC:F4:4A:54:66:49:47:DE
            X509v3 Authority Key Identifier:
                keyid:6C:B9:BF:E9:33:6D:A0:55:79:06:08:A7:7A:58:CC:AB:C4:96:86:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:cf:e6:cc:e5:ed:97:cc:93:a8:87:87:c2:34:f2:af:79:80:
         0c:f3:1b:a3:0d:5a:0c:60:e2:d6:d4:e7:a3:87:77:6b:c9:97:
         81:55:ad:8a:3e:51:1f:fb:a2:12:13:b1:a8:c1:9a:36:68:c9:
         f1:bf:18:72:22:5a:67:3c:a1:74:be:26:4f:c9:1b:3d:49:81:
         9e:5b:3f:b0:ac:82:1a:f1:2f:bc:f8:aa:f9:14:18:08:59:5d:
         7d:e4:59:8a:15:82:db:ce:cf:19:54:89:94:5d:3f:9f:35:fb:
         41:6d:37:03:fb:03:8f:05:76:02:70:d6:a5:36:bb:32:62:2f:
         4e:c1:2f:e6:92:bd:0f:ee:2d:8d:08:5f:71:d4:63:7e:26:e5:
         4c:fa:07:62:fb:8b:37:6f:74:99:47:74:79:e0:13:1d:02:46:
         59:32:83:a7:bc:b2:36:16:e9:51:75:28:42:98:04:aa:92:fe:
         be:13:1a:fb:21:a9:42:d8:8a:ad:ba:70:6c:b3:76:bd:f5:55:
         2e:09:ae:f2:30:a0:0d:66:79:a4:2e:90:2a:3b:f9:71:cb:ef:
         ee:27:df:cb:84:a4:90:5d:a3:aa:32:aa:7a:e8:79:fd:bb:78:
         3a:ea:82:8b:6b:2f:f4:cb:2c:d8:d9:e4:77:a2:bc:21:d1:e4:
         05:21:f3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:42:46 2025 by rpki-client