Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
File:                     6B8A4bRaGW0p_COM5zm6kUD2GUY.mft (raw, json)
Hash identifier:          XiHcngVoizTEbO2CdrutwGB1tqxs5ztS6xKvu9L3iF8=
Subject key identifier:   55:EF:11:64:7A:AA:45:73:3A:8A:C0:FA:34:88:E7:86:C6:FF:2A:A1
Authority key identifier: E8:1F:00:E1:B4:5A:19:6D:29:FC:23:8C:E7:39:BA:91:40:F6:19:46
Certificate issuer:       /CN=e81f00e1b45a196d29fc238ce739ba9140f61946
Certificate serial:       019759EE2BD512010255BE4AE3DFEE88BA4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
Manifest number:          0131
Signing time:             Tue 10 Jun 2025 13:01:10 +0000
Manifest this update:     Tue 10 Jun 2025 13:01:10 +0000
Manifest next update:     Wed 11 Jun 2025 13:01:10 +0000
Files and hashes:         1: 6B8A4bRaGW0p_COM5zm6kUD2GUY.crl (hash: cMniTN6fAmdIwTno/GPpKxyRirEzhObxh6oeWABKjBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:ee:2b:d5:12:01:02:55:be:4a:e3:df:ee:88:ba:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81f00e1b45a196d29fc238ce739ba9140f61946
        Validity
            Not Before: Jun 10 13:01:10 2025 GMT
            Not After : Jun 11 13:01:10 2025 GMT
        Subject: CN=55ef11647aaa45733a8ac0fa3488e786c6ff2aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:eb:2d:c0:1e:63:6a:fe:9e:03:20:5a:3b:d9:
                    cb:9d:8a:8e:68:81:57:ea:97:c2:ab:71:16:94:62:
                    22:70:4c:60:b1:45:c1:65:63:ba:91:71:af:8c:8a:
                    a8:1f:42:f1:f3:12:29:ca:07:f4:7f:2e:43:88:9b:
                    ca:e3:60:18:09:b9:0e:0e:ff:29:73:59:a4:4e:85:
                    c8:93:59:e4:34:09:e3:3f:0d:e5:1c:8f:4f:7a:26:
                    e5:61:e3:a1:cf:cc:bb:04:d5:79:ac:99:0a:94:d5:
                    c3:82:fc:4b:69:c9:0d:dd:38:4c:4e:78:79:d6:c2:
                    3d:ee:6d:4a:1d:7c:32:e7:8c:9e:15:30:55:69:b0:
                    2a:cf:d1:d6:08:24:72:ee:23:89:41:ef:3d:d4:41:
                    fa:d3:e6:72:af:0a:c0:55:e6:43:53:f3:57:ff:38:
                    8c:84:b8:3a:5f:03:13:56:20:3e:e0:d6:4c:4c:d4:
                    e6:3e:35:0c:4e:23:ed:4d:97:c3:af:36:2a:81:38:
                    fc:41:42:da:50:d3:c9:88:77:e0:08:7f:a9:3a:37:
                    1a:ca:0c:fa:1b:7d:24:ad:64:54:e8:95:b4:09:51:
                    1f:08:6e:1b:1b:05:57:97:28:da:ff:2d:f1:b5:82:
                    c2:63:ca:00:c2:af:20:4c:30:f5:55:13:c5:6b:28:
                    b2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:EF:11:64:7A:AA:45:73:3A:8A:C0:FA:34:88:E7:86:C6:FF:2A:A1
            X509v3 Authority Key Identifier:
                keyid:E8:1F:00:E1:B4:5A:19:6D:29:FC:23:8C:E7:39:BA:91:40:F6:19:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d8:55:8a:b7:57:77:b1:09:c6:04:07:60:4a:88:46:19:a1:
         80:cb:d2:f3:45:f9:59:4b:27:29:7a:52:8b:ee:ef:be:e8:24:
         23:7a:7b:00:bb:86:3b:ba:76:91:f9:1d:94:49:2f:6d:d9:58:
         a1:5e:a9:3d:91:40:fb:55:cb:14:6d:ca:bb:13:1d:57:fa:52:
         b2:b0:e5:04:b3:ce:30:c9:ca:fe:37:a0:9d:1f:09:10:cf:95:
         83:89:a3:23:eb:87:21:79:e1:83:68:a6:83:d0:4c:83:af:b4:
         b8:24:23:42:05:7a:b7:6c:0e:32:07:cb:06:c5:ac:e0:29:fd:
         6b:4a:e8:8d:5a:b1:a9:44:bc:ef:3d:0c:45:9b:06:02:c0:bc:
         ec:69:33:f7:20:cc:83:6b:c7:bf:4c:dc:1e:99:69:14:d3:50:
         92:fb:9c:6b:95:78:2d:df:6b:48:42:92:c1:a0:4e:08:05:f5:
         d1:63:dd:76:6d:34:93:12:ea:78:05:1b:84:44:e1:f8:03:a1:
         70:39:e6:06:dc:17:e9:44:9e:77:f2:1b:cf:ce:f3:23:56:75:
         09:68:db:de:58:6c:de:43:c1:93:79:3b:2b:eb:b6:d1:6d:d3:
         cd:0b:9d:c0:9a:b5:51:9e:f3:df:f9:e7:10:3b:f7:04:c8:9f:
         f3:d2:9f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:14:58 2025 by rpki-client