Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
File:                     6DoszpCD6MFaHTJc9IdnVZ-StiM.mft (raw, json)
Hash identifier:          kDLG98u8oRlyOa9NTx5RTaDcmtWVgzFYQp9YLbsmH0U=
Subject key identifier:   A5:71:67:44:51:B7:9E:3E:ED:C3:4A:A1:1D:28:56:6B:69:65:03:82
Authority key identifier: E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23
Certificate issuer:       /CN=e83a2cce9083e8c15a1d325cf48767559f92b623
Certificate serial:       01975FB8C94F17307CC5D32525608963EF3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
Manifest number:          1586
Signing time:             Wed 11 Jun 2025 16:00:34 +0000
Manifest this update:     Wed 11 Jun 2025 16:00:34 +0000
Manifest next update:     Thu 12 Jun 2025 16:00:34 +0000
Files and hashes:         1: 6DoszpCD6MFaHTJc9IdnVZ-StiM.crl (hash: qPH24zzhArsFkN/HFBU1W6K8YQOrN9AhK6RKCQHBdV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 15:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:b8:c9:4f:17:30:7c:c5:d3:25:25:60:89:63:ef:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e83a2cce9083e8c15a1d325cf48767559f92b623
        Validity
            Not Before: Jun 11 16:00:34 2025 GMT
            Not After : Jun 12 16:00:34 2025 GMT
        Subject: CN=a571674451b79e3eedc34aa11d28566b69650382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7b:f2:9c:ee:cc:e1:5b:49:a7:42:eb:16:ea:
                    a2:bd:be:6c:74:e6:c9:fb:89:da:de:ed:b4:03:47:
                    e3:dc:86:4b:e1:a4:c9:43:0a:b8:aa:bf:15:ba:cd:
                    1c:2a:f3:94:bb:4b:ff:55:ea:85:4e:6d:2d:d6:12:
                    31:cb:fc:d6:9a:56:cd:4d:73:78:49:9a:46:49:ce:
                    6c:c7:fb:69:29:d8:92:3d:f2:40:90:28:12:23:1d:
                    9b:e5:bd:5f:8d:f9:9d:83:c0:fe:4b:ed:56:db:90:
                    de:9d:52:5c:f6:f7:7d:96:bd:12:e7:85:2d:d4:6c:
                    07:3f:c5:bc:18:33:20:ba:db:66:ac:84:23:73:db:
                    04:a1:1b:bb:cb:9a:a7:b0:da:ea:95:27:db:84:12:
                    72:0f:be:3e:f1:cf:23:0a:b8:3d:22:1a:a5:20:38:
                    fd:ac:bf:57:78:8f:53:e1:7f:71:f5:23:a5:cb:73:
                    3f:bd:4a:07:83:b8:06:ff:06:83:64:0e:60:9b:73:
                    14:3f:cb:91:09:45:98:da:30:94:d0:2d:73:ca:d1:
                    fc:2a:c8:c4:e5:64:38:62:9d:17:5f:76:ca:49:d6:
                    6f:61:78:5f:75:40:8f:c6:83:8c:5b:e9:b9:fd:06:
                    0f:78:98:88:d7:95:5e:17:4d:07:f0:e4:89:ee:36:
                    c2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:71:67:44:51:B7:9E:3E:ED:C3:4A:A1:1D:28:56:6B:69:65:03:82
            X509v3 Authority Key Identifier:
                keyid:E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:f0:81:cd:ff:57:0b:cd:fd:7d:df:de:dd:83:1b:c6:6e:04:
         da:50:f7:e6:6a:f6:20:7e:5c:0d:19:70:fc:33:53:c1:7b:91:
         75:1c:97:d1:c1:11:e5:d3:31:5b:64:55:e3:3b:5b:8e:a3:4f:
         e8:14:35:0f:e7:2c:58:41:a7:68:1b:91:51:75:3c:f9:44:9b:
         26:83:ed:a7:cf:fd:bb:d7:c6:e2:d8:da:af:51:af:58:e8:c5:
         b0:2f:2d:1c:a2:5a:94:0f:31:ea:e8:63:b1:d8:c3:9d:c2:63:
         e3:c3:51:da:ba:cd:5e:8e:44:6d:2d:ac:f6:11:f9:75:9a:91:
         a0:87:03:e5:ca:d8:60:b5:d7:de:46:c7:dd:3c:a8:cd:7c:d8:
         bb:e5:e7:9d:32:e1:da:94:7c:6c:77:f8:cb:67:b2:3c:75:62:
         53:4a:2a:05:3f:5a:48:9e:7f:9d:ff:d5:e8:fb:cd:dd:23:ce:
         34:5f:2d:f5:f9:81:91:bf:cd:79:ce:a5:79:e5:9a:b5:a8:55:
         cd:2b:fe:14:a3:b3:36:80:b1:52:79:fb:16:ba:e5:06:47:cf:
         56:67:3c:e6:f2:26:9c:33:07:30:ef:f8:95:64:60:ef:f4:62:
         29:04:93:a6:b9:73:62:9f:d6:61:a4:59:65:2b:7e:96:06:2e:
         3c:10:cb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:18:08 2025 by rpki-client