Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
File:                     6DoszpCD6MFaHTJc9IdnVZ-StiM.mft (raw, json)
Hash identifier:          JQk+iLBK/B51k17wWZPf8lhN8a159Jo8p9ZVyLa2WnQ=
Subject key identifier:   2C:D0:5A:2E:8E:B9:5E:8D:0B:F9:16:D9:54:4C:59:0D:76:5B:72:5B
Authority key identifier: E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23
Certificate issuer:       /CN=e83a2cce9083e8c15a1d325cf48767559f92b623
Certificate serial:       019754229FEE5428F635D1D63628276585B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
Manifest number:          1580
Signing time:             Mon 09 Jun 2025 10:00:44 +0000
Manifest this update:     Mon 09 Jun 2025 10:00:44 +0000
Manifest next update:     Tue 10 Jun 2025 10:00:44 +0000
Files and hashes:         1: 6DoszpCD6MFaHTJc9IdnVZ-StiM.crl (hash: PCcawV/0Ba9B6jBkXSFniCLYp97/iUNdgzw72BhwX5Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:22:9f:ee:54:28:f6:35:d1:d6:36:28:27:65:85:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e83a2cce9083e8c15a1d325cf48767559f92b623
        Validity
            Not Before: Jun  9 10:00:44 2025 GMT
            Not After : Jun 10 10:00:44 2025 GMT
        Subject: CN=2cd05a2e8eb95e8d0bf916d9544c590d765b725b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c7:65:74:7a:d0:1c:bc:42:b9:61:e8:f4:be:
                    bc:36:a1:87:07:55:79:de:cd:f6:ad:ad:56:ce:94:
                    30:37:d7:e1:82:ac:13:9b:df:f2:cf:b4:2b:88:3f:
                    df:4d:d1:a0:71:fb:6d:cd:c1:2a:51:c5:3c:99:4a:
                    24:c8:5d:86:dd:13:d7:8f:fe:b6:f0:de:3a:54:26:
                    f8:26:c6:ad:77:78:c1:65:1d:c8:01:14:4b:6e:72:
                    d2:5d:9b:6a:18:03:a5:84:06:93:c3:c1:ea:02:db:
                    dc:a5:16:89:2f:12:55:52:98:e3:15:21:9c:30:e2:
                    87:5d:a7:5a:7f:18:13:a1:9f:25:8d:20:9c:5c:26:
                    96:9c:93:85:3a:86:f4:03:64:2a:7b:1e:06:ab:7b:
                    14:81:4b:15:ed:e0:e1:d1:5b:ed:17:cc:74:d4:b9:
                    b7:b1:2c:0e:0b:30:79:6f:37:fa:e7:c1:df:6c:06:
                    f0:ad:2a:59:d4:ee:3f:b9:57:70:95:81:20:a9:2f:
                    9e:8f:a0:47:da:e8:e5:94:cd:07:e7:61:1b:d9:46:
                    45:d3:13:d6:64:a3:91:f2:e5:18:1e:49:d1:59:20:
                    ec:51:1f:35:fe:5a:f1:6e:0e:19:38:32:8f:06:6a:
                    1e:c1:57:bc:96:1f:a0:65:6a:51:c1:67:bd:2a:14:
                    ae:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D0:5A:2E:8E:B9:5E:8D:0B:F9:16:D9:54:4C:59:0D:76:5B:72:5B
            X509v3 Authority Key Identifier:
                keyid:E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:ca:d6:ea:ed:bf:67:6c:36:b5:2a:29:73:6e:40:56:f0:ee:
         33:29:78:bd:4b:21:29:85:78:f9:f4:06:9c:b0:f0:2f:73:b9:
         e7:ef:1c:69:ae:3f:51:69:3a:28:ef:70:06:1b:25:c8:ec:af:
         73:6f:16:c7:87:e3:9e:f8:b3:1f:6a:86:89:fa:e3:f8:b1:76:
         a8:88:55:b2:6a:1d:e3:88:18:1e:47:40:84:fd:b5:26:0c:f2:
         5d:1b:03:40:2e:8e:6c:d7:0c:34:f1:af:70:2b:ba:50:32:11:
         da:a2:e6:62:96:c6:06:06:29:67:d7:f2:30:47:b3:98:3f:7f:
         54:db:c3:3e:6b:f7:5d:0c:7b:79:c7:0e:53:7b:d5:57:00:11:
         86:0f:9c:cd:97:9b:a1:d9:2b:6f:c7:f5:68:25:1c:6e:6a:03:
         c2:dd:b5:2c:68:f9:57:21:b1:f2:51:1f:f0:ad:4d:64:1d:d1:
         9f:03:aa:77:30:10:62:8d:38:d3:99:be:d6:df:08:3f:5b:80:
         e6:1f:c3:e3:61:06:78:dd:cb:ea:62:71:a3:5e:3f:c9:42:7c:
         aa:87:05:3f:ac:16:bc:fa:45:98:05:5c:96:e9:22:7e:20:6a:
         65:91:fb:35:ab:a2:73:03:8d:96:7a:b9:31:c1:e9:8b:50:59:
         2b:29:14:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:30:42 2025 by rpki-client