Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
File:                     6B8A4bRaGW0p_COM5zm6kUD2GUY.mft (raw, json)
Hash identifier:          /uxsMyXc31Q8vGJ/k/ZxfQCp+6WQ0w/Rb8LbzxVCYqA=
Subject key identifier:   16:95:C9:1F:CE:10:6D:5A:BD:1B:3E:7A:11:68:3A:CE:06:F0:80:0A
Authority key identifier: E8:1F:00:E1:B4:5A:19:6D:29:FC:23:8C:E7:39:BA:91:40:F6:19:46
Certificate issuer:       /CN=e81f00e1b45a196d29fc238ce739ba9140f61946
Certificate serial:       019761A7C4852843F895E9EA331962212927
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
Manifest number:          0135
Signing time:             Thu 12 Jun 2025 01:01:14 +0000
Manifest this update:     Thu 12 Jun 2025 01:01:14 +0000
Manifest next update:     Fri 13 Jun 2025 01:01:14 +0000
Files and hashes:         1: 6B8A4bRaGW0p_COM5zm6kUD2GUY.crl (hash: zxFxCJtchdaBR3Mni1sOb1l+gN1ftCyNpjZjW7/gaeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:a7:c4:85:28:43:f8:95:e9:ea:33:19:62:21:29:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81f00e1b45a196d29fc238ce739ba9140f61946
        Validity
            Not Before: Jun 12 01:01:14 2025 GMT
            Not After : Jun 13 01:01:14 2025 GMT
        Subject: CN=1695c91fce106d5abd1b3e7a11683ace06f0800a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:72:ea:ff:1d:d9:d8:53:ed:98:da:1d:92:74:
                    be:06:64:64:d7:b7:1e:02:fa:cb:5e:32:ea:a2:fa:
                    34:29:c0:ec:28:d7:0e:59:3d:5d:c9:27:ad:aa:14:
                    7c:1c:11:40:63:b7:5d:b2:ea:68:cd:38:e0:d7:2a:
                    ae:0b:a5:d3:87:bb:23:11:38:71:08:6d:a2:7b:06:
                    b9:32:06:97:9c:64:ae:51:ab:e5:9d:a7:73:29:ad:
                    64:6f:c2:84:f2:ad:e5:11:54:df:ce:c0:21:ba:ff:
                    33:dc:90:fa:1f:ab:da:85:62:53:52:30:bb:82:b0:
                    2a:6c:a4:a4:86:64:8b:cd:3d:20:35:1d:af:15:c2:
                    88:37:70:3b:27:e6:9a:11:bc:4e:06:df:fa:61:fa:
                    e4:15:00:52:c6:88:6c:4f:16:df:d5:f3:97:a7:0b:
                    70:5e:e2:f5:f2:13:ae:f2:fe:33:a5:0a:15:50:86:
                    39:17:13:b4:fa:8b:84:3c:0a:02:51:aa:74:cd:ee:
                    2f:f4:30:19:63:e9:9f:21:a5:69:46:ad:ba:03:b3:
                    e7:62:7d:bd:fe:ce:d9:c0:ce:3d:9a:bf:d7:3e:ed:
                    be:d8:69:df:e9:08:9e:b0:e3:5d:cb:41:aa:8b:70:
                    5b:30:c6:ad:6d:4a:89:5e:1b:0b:ba:c2:01:da:79:
                    d4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:95:C9:1F:CE:10:6D:5A:BD:1B:3E:7A:11:68:3A:CE:06:F0:80:0A
            X509v3 Authority Key Identifier:
                keyid:E8:1F:00:E1:B4:5A:19:6D:29:FC:23:8C:E7:39:BA:91:40:F6:19:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e3:06:4f:b7:78:3d:ba:4f:c4:a6:d2:b4:c7:31:00:64:70:
         23:85:a0:95:43:83:31:d2:aa:12:87:9d:e6:56:4f:1b:61:be:
         44:1c:2b:27:b5:10:8c:e0:3c:f4:f5:77:9c:8b:8a:91:ce:ac:
         fb:4e:29:b7:98:65:f2:7a:d8:bd:c8:ef:b6:be:75:e3:90:b3:
         df:14:09:07:f7:b8:3e:f2:a4:95:81:fe:d1:19:73:8f:0e:bf:
         51:17:93:55:d7:c8:f5:f7:75:f8:5e:32:03:bc:f7:95:ce:b4:
         b7:f8:aa:48:e1:e6:17:59:56:e6:25:09:d9:f2:d2:c5:82:58:
         43:10:0e:9b:bb:8f:e7:6c:24:d9:be:15:20:6d:41:d6:1e:19:
         a4:93:59:56:68:b3:81:8f:0a:b7:33:3f:94:24:02:66:e4:8f:
         8f:43:70:f5:5a:e5:94:6a:51:73:e8:7e:bb:6c:2f:e6:87:a6:
         11:31:3e:d4:26:95:c8:60:7f:86:14:4c:6f:c8:15:83:f6:26:
         79:dd:91:66:60:d5:01:fa:d3:b4:ff:dd:44:4b:15:5b:f9:87:
         0f:ff:27:92:76:1e:66:ae:39:e9:f3:a7:52:ba:98:18:ae:29:
         cf:20:ce:b0:14:c9:d2:1b:29:74:64:78:4e:d9:05:ac:cf:5b:
         13:64:1a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:30:12 2025 by rpki-client