Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
File:                     6B8A4bRaGW0p_COM5zm6kUD2GUY.mft (raw, json)
Hash identifier:          /g5i9hR9/hCp2EF1ufz9654hiFO6H4PBK0sjWdcwTN8=
Subject key identifier:   B4:B7:54:79:CB:6B:71:AC:5E:E2:30:03:96:6C:1E:1F:DD:8C:83:83
Authority key identifier: E8:1F:00:E1:B4:5A:19:6D:29:FC:23:8C:E7:39:BA:91:40:F6:19:46
Certificate issuer:       /CN=e81f00e1b45a196d29fc238ce739ba9140f61946
Certificate serial:       01965CF197B540133570370E1DB84EB0F106
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
Manifest number:          AE
Signing time:             Tue 22 Apr 2025 10:00:58 +0000
Manifest this update:     Tue 22 Apr 2025 10:00:58 +0000
Manifest next update:     Wed 23 Apr 2025 10:00:58 +0000
Files and hashes:         1: 6B8A4bRaGW0p_COM5zm6kUD2GUY.crl (hash: Koma9AvUO8UuE+Ta3Bg14dswU0Zsbql3C4FXl+V46l4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5c:f1:97:b5:40:13:35:70:37:0e:1d:b8:4e:b0:f1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81f00e1b45a196d29fc238ce739ba9140f61946
        Validity
            Not Before: Apr 22 10:00:58 2025 GMT
            Not After : Apr 23 10:00:58 2025 GMT
        Subject: CN=b4b75479cb6b71ac5ee23003966c1e1fdd8c8383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4b:a9:37:0f:45:6f:7d:3b:cc:9b:b5:06:5c:
                    ee:72:df:1c:13:a3:4c:18:78:a7:27:f6:45:ed:c6:
                    2c:e6:d3:1a:3f:37:a4:5b:c8:d1:e8:b4:a7:07:03:
                    f3:0f:eb:56:2f:1e:0e:9d:6f:fe:96:a7:70:9c:39:
                    31:91:31:c1:89:6f:7f:ac:e8:80:00:b8:43:dd:fa:
                    fa:e8:3b:3b:03:95:b4:42:f5:03:57:55:34:73:ab:
                    99:76:98:d8:23:14:cb:c4:94:ff:2c:09:94:5c:b1:
                    49:d0:93:79:ae:8d:03:a8:1e:92:7b:81:2a:9e:45:
                    1a:a0:6e:57:9a:21:af:99:db:50:8d:5a:b3:7a:bd:
                    1d:c0:37:c8:27:f2:05:67:b4:e1:6d:47:8b:bf:de:
                    9d:8a:14:e7:b0:26:16:e7:d4:7d:e9:75:a9:0b:30:
                    33:d4:86:5f:0f:54:e8:3d:d3:45:aa:44:d2:e1:dc:
                    8a:05:8b:85:e2:1d:e5:d8:96:c4:53:f4:c3:9a:76:
                    8a:39:41:1d:af:0f:97:c4:cb:24:2a:29:f4:65:3c:
                    ef:fc:49:d3:df:b4:51:33:9e:83:6f:95:ab:c7:48:
                    45:e4:f4:b8:d0:6b:63:71:45:92:48:2b:c7:7b:1a:
                    40:b6:ed:a7:ac:66:ee:87:54:c7:fb:fc:a4:70:d9:
                    01:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B7:54:79:CB:6B:71:AC:5E:E2:30:03:96:6C:1E:1F:DD:8C:83:83
            X509v3 Authority Key Identifier:
                keyid:E8:1F:00:E1:B4:5A:19:6D:29:FC:23:8C:E7:39:BA:91:40:F6:19:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c6:5f:e7:53:cd:89:d5:aa:5f:ac:0c:8f:ec:5f:ae:4e:a4:
         68:69:6e:34:2d:03:85:2c:85:ef:09:18:d3:6e:ac:4b:41:e0:
         8c:40:b5:04:8b:67:c0:15:b2:67:42:d2:8c:05:d4:f5:86:da:
         2b:25:09:3d:55:89:36:12:8a:49:55:09:43:82:96:62:31:09:
         dd:dc:b5:8b:cd:de:9f:89:55:e1:42:e3:7e:b2:66:e3:c3:06:
         ec:ce:36:0a:98:40:25:ac:09:52:68:f4:18:1d:6e:e3:80:54:
         c2:e5:4b:85:c1:4c:bf:25:b7:35:af:8b:8f:8b:5a:10:1e:f3:
         4c:de:05:d1:bc:18:9a:e3:2c:e2:91:5e:b6:22:2e:e7:c0:89:
         9a:11:d2:18:3a:36:4d:55:55:08:34:8b:62:d8:3f:4c:ac:f4:
         ef:9c:2d:5d:98:41:9b:27:e3:ab:ec:12:b7:f3:0c:97:96:d0:
         2f:ff:1e:64:04:da:96:d2:ae:1c:fe:26:3e:25:1f:f6:c7:e5:
         a5:68:b3:bc:7a:15:f0:af:39:43:f1:52:c1:f0:e5:ba:bd:f2:
         e1:ec:07:94:f5:5d:5b:37:07:9b:bb:d6:81:6f:b4:97:be:94:
         df:0f:4c:7c:2a:4e:14:14:ca:08:ab:02:13:51:3c:9b:96:c5:
         4e:44:ca:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:52:59 2025 by rpki-client