Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft
File:                     6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft (raw, json)
Hash identifier:          TYpMOCHLI/1PGUe0hcikELz58T5BKzntT95miNW5o/0=
Subject key identifier:   95:D2:FD:CB:2A:13:D3:EE:32:35:A4:87:75:49:4F:79:1E:D8:0A:FC
Authority key identifier: E8:9F:22:85:77:FA:91:B2:70:9E:70:B8:19:FF:46:9C:4C:C2:EA:91
Certificate issuer:       /CN=e89f228577fa91b2709e70b819ff469c4cc2ea91
Certificate serial:       01975C49ADB02A2EC3E46EF0C8702A0EFB1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft
Manifest number:          1589
Signing time:             Wed 11 Jun 2025 00:00:21 +0000
Manifest this update:     Wed 11 Jun 2025 00:00:21 +0000
Manifest next update:     Thu 12 Jun 2025 00:00:21 +0000
Files and hashes:         1: 6J8ihXf6kbJwnnC4Gf9GnEzC6pE.crl (hash: gBDmLoqqwybobL8TTgI2viTzx/IiUDyYZotzm6IwaHM=)
                          2: FI0vaC_-wS4Ctp40wQ6DLlcQC5Q.roa (hash: /18Wg9WgOUF/QfCmOwGmGVq/qijiG5C2ckmZROjPcZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:49:ad:b0:2a:2e:c3:e4:6e:f0:c8:70:2a:0e:fb:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e89f228577fa91b2709e70b819ff469c4cc2ea91
        Validity
            Not Before: Jun 11 00:00:21 2025 GMT
            Not After : Jun 12 00:00:21 2025 GMT
        Subject: CN=95d2fdcb2a13d3ee3235a48775494f791ed80afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:52:5f:c8:b3:b0:04:b2:8e:2a:ee:df:1d:5b:
                    eb:cd:75:70:52:5a:49:66:01:c0:fa:e0:30:de:df:
                    23:62:f0:d2:bb:3d:31:f0:39:3a:24:22:ff:9c:6d:
                    fc:10:1a:71:c0:a0:86:e0:a4:e4:c2:70:cc:05:78:
                    5f:0a:66:f4:7e:77:51:3c:03:78:b8:5a:59:7b:90:
                    25:b6:11:2c:06:3d:b0:d0:37:e8:94:d1:98:32:76:
                    33:ec:3f:7e:19:bf:3a:53:2f:8b:48:e8:77:d2:c7:
                    68:49:13:c1:b2:4b:ce:57:25:85:88:0c:17:f8:f3:
                    83:99:ea:9a:37:fb:5d:56:fd:0d:55:33:39:a2:98:
                    0d:84:da:50:6b:5d:77:bf:3c:d0:d9:ef:66:d6:51:
                    c5:d3:87:36:35:db:10:a8:94:5a:72:96:f4:e4:24:
                    a0:cc:3a:df:f2:2e:70:ad:15:80:4d:a1:34:9b:a7:
                    f9:b9:21:7c:22:79:f6:10:ca:ee:c5:2d:0d:f7:03:
                    23:81:bc:be:23:b9:b1:e3:95:f4:a5:31:ab:7a:ad:
                    ba:dc:be:9f:4f:4d:4b:cd:f6:89:b6:30:94:f9:96:
                    92:ca:5c:3e:79:dc:0c:ac:69:74:83:33:8d:4c:49:
                    15:89:43:6e:ff:5d:96:3b:d2:07:73:db:30:6e:bc:
                    cc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D2:FD:CB:2A:13:D3:EE:32:35:A4:87:75:49:4F:79:1E:D8:0A:FC
            X509v3 Authority Key Identifier:
                keyid:E8:9F:22:85:77:FA:91:B2:70:9E:70:B8:19:FF:46:9C:4C:C2:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:fb:88:b5:02:d2:3d:a7:1e:0e:8f:c9:62:7b:57:c0:29:ca:
         84:75:eb:c5:05:24:c9:61:eb:28:0f:4e:6b:fd:fa:57:70:f6:
         16:eb:2a:0c:e1:c2:91:be:30:e2:5d:bd:8c:8b:2e:73:eb:a1:
         4c:0c:21:ce:fc:e0:f0:4e:e7:2a:43:38:f0:72:cf:93:a7:b5:
         27:8b:e5:37:1c:50:94:90:42:2a:78:fc:d0:39:51:b3:fa:0c:
         db:05:09:57:de:71:67:51:c5:b4:84:9f:7d:fb:2d:0c:78:a9:
         ac:78:89:82:63:c5:8d:42:e4:99:52:d7:8b:c8:e5:0b:52:d5:
         e4:e3:45:de:ad:c0:c4:d8:f3:e9:62:42:e7:d8:21:f2:90:1f:
         d9:6e:83:be:99:4f:3e:bf:3a:83:33:dc:7c:db:2e:23:42:f5:
         59:81:02:9c:ef:2b:16:34:ac:3c:05:00:59:f9:e9:c5:d4:a0:
         4d:da:7a:29:77:12:ce:a5:00:16:52:5d:8f:bf:08:23:6d:bb:
         c3:d8:cc:82:97:89:0e:08:12:81:bf:1d:4e:b0:03:a7:a3:5d:
         d0:a1:e3:98:0c:61:c3:02:51:fb:55:a2:62:4a:d0:6a:8a:a0:
         d8:a1:d8:81:da:d5:90:3c:5a:87:42:07:eb:8f:0e:27:68:38:
         ea:c5:9f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:24:46 2025 by rpki-client