Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft
File:                     _s7aKggEQpcq6nJV-LM6dg7LMcs.mft (raw, json)
Hash identifier:          LM6GI5oAxXibovaKCwaxhzl0yBMMhaPeszuizYicUyU=
Subject key identifier:   C7:34:8F:69:20:2B:DB:39:F0:6A:F1:74:DA:EE:02:73:50:D4:F9:D5
Authority key identifier: FE:CE:DA:2A:08:04:42:97:2A:EA:72:55:F8:B3:3A:76:0E:CB:31:CB
Certificate issuer:       /CN=feceda2a080442972aea7255f8b33a760ecb31cb
Certificate serial:       01974C69A6BA18D614CB8724035C3B78C6B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_s7aKggEQpcq6nJV-LM6dg7LMcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft
Manifest number:          0B87
Signing time:             Sat 07 Jun 2025 22:01:21 +0000
Manifest this update:     Sat 07 Jun 2025 22:01:21 +0000
Manifest next update:     Sun 08 Jun 2025 22:01:21 +0000
Files and hashes:         1: _s7aKggEQpcq6nJV-LM6dg7LMcs.crl (hash: USGFqGHy6Jl/wBYJAIU80jvJBD7bnJHne+kBK68A5KU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_s7aKggEQpcq6nJV-LM6dg7LMcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 22:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:a6:ba:18:d6:14:cb:87:24:03:5c:3b:78:c6:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feceda2a080442972aea7255f8b33a760ecb31cb
        Validity
            Not Before: Jun  7 22:01:21 2025 GMT
            Not After : Jun  8 22:01:21 2025 GMT
        Subject: CN=c7348f69202bdb39f06af174daee027350d4f9d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a8:aa:a0:5c:f9:9e:13:48:90:f3:4b:32:63:
                    36:0b:ea:7e:6c:e6:c6:a6:fb:2d:b3:ca:1f:69:06:
                    c9:42:a2:af:79:86:0e:18:2c:fd:86:97:3e:c8:c9:
                    27:c5:67:06:50:72:f0:63:41:3c:5a:da:5d:e4:6b:
                    3c:65:6e:ce:6c:97:59:ff:70:30:4b:fc:30:80:28:
                    20:b5:eb:f1:83:f1:d4:b4:e4:92:bd:0f:21:fa:54:
                    ef:1b:d3:cf:88:f1:59:42:16:2e:09:b4:ae:a1:7c:
                    a8:a8:0d:b0:8d:20:9f:b3:0a:1b:64:90:d7:c5:3a:
                    33:25:25:f3:2e:7e:8c:e4:b3:62:2b:7d:3c:c9:38:
                    bb:d5:60:37:ea:3e:fe:85:98:46:ce:70:70:70:6c:
                    9b:fd:92:c2:2b:cf:5e:9e:13:5c:1c:bd:88:ab:50:
                    41:bc:1a:6d:d8:1b:a0:c5:a2:a7:33:54:d9:4a:51:
                    3e:6c:c5:07:cb:72:1e:ff:c3:99:2a:3f:ee:e8:1f:
                    46:62:58:9f:34:12:f8:b0:06:9b:6b:c0:67:37:f7:
                    bc:4f:bf:63:d5:86:d8:9d:68:98:99:cb:24:23:a1:
                    94:0c:3f:ab:4b:c5:e9:14:12:b7:2c:eb:31:4f:47:
                    53:53:45:0b:3c:a3:0e:fe:47:b7:09:fb:96:9b:b0:
                    7a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:34:8F:69:20:2B:DB:39:F0:6A:F1:74:DA:EE:02:73:50:D4:F9:D5
            X509v3 Authority Key Identifier:
                keyid:FE:CE:DA:2A:08:04:42:97:2A:EA:72:55:F8:B3:3A:76:0E:CB:31:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s7aKggEQpcq6nJV-LM6dg7LMcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:2b:a3:24:a0:9b:15:f5:08:85:02:ea:3a:b3:dd:b8:6c:40:
         4d:04:89:4c:ec:04:1e:98:ef:9c:de:5f:ec:4d:c6:3c:62:b0:
         8d:dc:26:95:3f:93:50:b2:3e:c7:65:03:2e:23:6f:02:56:2b:
         f7:c5:ab:00:e2:51:a6:11:b0:c2:c1:eb:18:0f:b7:c0:1f:71:
         be:b3:90:ee:14:dc:32:61:36:68:16:3f:28:f7:b6:80:6d:9f:
         8f:58:39:f6:70:4a:69:2f:57:de:ca:9f:7e:0c:b0:91:98:6b:
         99:05:95:47:0e:7d:b8:7b:61:c5:a4:7a:98:50:19:e2:f3:84:
         24:22:d8:c1:a7:a4:bf:6b:45:d3:48:76:70:fa:09:c1:41:4b:
         fc:a3:4a:7e:ef:57:cd:80:4d:ce:44:6a:fe:e7:40:74:5b:b6:
         49:59:98:8c:c5:52:68:e9:93:4d:af:ee:0d:bc:3c:b6:bb:01:
         b8:75:fa:d3:e4:1f:3c:cc:2e:84:58:4c:d5:a2:bb:9b:41:62:
         a3:3f:77:3c:ae:2b:5d:f5:1d:0d:3f:4f:ad:f6:a0:ec:2f:38:
         e7:d4:d0:69:61:c2:1c:fc:02:7b:1c:a4:0a:aa:e9:93:3b:37:
         7e:32:ce:21:21:55:4d:44:f6:38:58:c7:e8:57:0d:6e:bb:4c:
         29:86:fe:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:39:52 2025 by rpki-client