Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.mft
File:                     6E2eW-w81Mrhfl-Hsu6lImpO518.mft (raw, json)
Hash identifier:          tSY8+EDxPCq3SRfHGqOaDC6H1DLrdaBrE0hgwptBTVk=
Subject key identifier:   A0:DA:10:29:4B:77:C7:48:45:23:96:E7:25:29:1A:96:D4:8E:5C:91
Authority key identifier: E8:4D:9E:5B:EC:3C:D4:CA:E1:7E:5F:87:B2:EE:A5:22:6A:4E:E7:5F
Certificate issuer:       /CN=e84d9e5bec3cd4cae17e5f87b2eea5226a4ee75f
Certificate serial:       01974DB26CD33F079DF77A7BC05E15CB880A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E2eW-w81Mrhfl-Hsu6lImpO518.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.mft
Manifest number:          0B6A
Signing time:             Sun 08 Jun 2025 04:00:28 +0000
Manifest this update:     Sun 08 Jun 2025 04:00:28 +0000
Manifest next update:     Mon 09 Jun 2025 04:00:28 +0000
Files and hashes:         1: 6E2eW-w81Mrhfl-Hsu6lImpO518.crl (hash: GDZH90fZg2OUDo8HpwSo5hrNMd/gozbynM0mCsCH5T4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6E2eW-w81Mrhfl-Hsu6lImpO518.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:b2:6c:d3:3f:07:9d:f7:7a:7b:c0:5e:15:cb:88:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84d9e5bec3cd4cae17e5f87b2eea5226a4ee75f
        Validity
            Not Before: Jun  8 04:00:28 2025 GMT
            Not After : Jun  9 04:00:28 2025 GMT
        Subject: CN=a0da10294b77c748452396e725291a96d48e5c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:89:31:ed:8c:fd:92:03:5f:16:12:fd:b4:10:
                    78:4f:89:8e:e7:f4:ea:21:78:46:51:4d:00:17:d3:
                    ce:9c:88:25:94:00:75:da:c1:4f:65:78:cd:c9:ca:
                    ba:c5:39:5c:dc:bc:1f:3c:2f:89:7a:e7:76:6c:b5:
                    32:66:7c:f6:a8:02:b9:91:2a:8d:c5:61:58:6c:8e:
                    f4:ed:e5:96:0a:30:30:27:00:e7:b9:ea:c1:a5:8b:
                    e9:61:b8:2c:e9:52:50:bc:f4:39:8b:e9:39:05:08:
                    3e:25:10:fa:d2:d1:97:f8:03:e4:12:b4:67:11:6c:
                    f1:c9:13:56:5d:b6:67:95:f6:bd:77:d0:a3:70:e1:
                    d7:65:e7:24:4d:29:7b:f7:14:55:e2:c6:6b:79:2b:
                    e2:20:83:89:7e:45:74:20:b1:87:05:40:74:a7:e0:
                    6b:3e:59:bd:91:c7:0b:43:84:c0:97:d0:8c:df:37:
                    8d:05:3b:99:4d:7b:b9:47:d9:01:02:1a:13:c1:be:
                    f1:3f:87:23:77:3f:5f:5a:ee:90:cc:9b:65:08:b2:
                    40:5e:99:d9:c5:9c:9c:45:ca:e2:f9:79:f5:7b:30:
                    9e:9c:1a:99:d8:d4:ab:d4:d5:0b:53:da:55:7c:de:
                    55:92:b9:bd:0d:7b:4f:4d:cd:5d:21:c5:cb:3f:f1:
                    97:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DA:10:29:4B:77:C7:48:45:23:96:E7:25:29:1A:96:D4:8E:5C:91
            X509v3 Authority Key Identifier:
                keyid:E8:4D:9E:5B:EC:3C:D4:CA:E1:7E:5F:87:B2:EE:A5:22:6A:4E:E7:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E2eW-w81Mrhfl-Hsu6lImpO518.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:77:da:a9:a2:4b:c9:15:58:5a:e6:2c:49:1e:5a:45:c3:2a:
         2e:2f:d4:45:69:6d:c0:00:22:24:4c:f2:30:d6:83:18:c2:e0:
         06:14:8f:d6:2d:ee:e2:ed:86:c9:38:8d:ef:d8:18:04:86:6b:
         0c:d3:45:b1:a0:80:b5:6e:5f:d4:d4:a7:9f:57:b7:df:0d:1f:
         12:ee:25:f2:2e:b6:7f:66:a7:ab:8d:a7:92:72:3b:66:8f:de:
         20:70:00:80:fe:af:ca:8f:4f:f5:ad:b3:1c:9e:28:5f:73:f1:
         b0:b7:93:44:77:75:f6:3f:b3:05:03:b5:e6:5f:8e:78:d0:05:
         ec:69:da:4a:9d:08:ec:4d:b5:35:a2:ff:9f:b3:b7:51:00:e1:
         dd:6d:63:b2:4b:0c:b2:62:a0:c8:b7:10:0a:37:c7:c6:c1:3c:
         3d:d2:2b:4e:c0:48:3e:d5:fc:ab:5d:f2:d2:94:63:72:85:a2:
         9a:ea:2d:82:c4:24:a5:13:b2:c0:fb:17:94:ad:e3:00:31:dc:
         dd:3b:6b:94:d2:8b:f9:bd:58:fd:00:25:e9:46:2a:08:6e:16:
         bd:51:2b:5e:74:05:60:c3:d0:90:12:08:01:40:1d:ff:32:17:
         25:0d:25:bc:ec:2a:ca:52:c3:5a:b1:fe:bc:c8:d8:ea:0e:67:
         90:f1:17:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:21:59 2025 by rpki-client