Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
File:                     6xUL-GuHz4n8RJBgZfaXKwawnqg.mft (raw, json)
Hash identifier:          1m7DYqHRonpt/SPk99F50NXViP9a8qzDirAQq5b8JFo=
Subject key identifier:   87:BD:DF:3E:3E:D0:A9:63:C6:83:6A:CB:65:6E:7B:4C:AB:37:0E:15
Authority key identifier: EB:15:0B:F8:6B:87:CF:89:FC:44:90:60:65:F6:97:2B:06:B0:9E:A8
Certificate issuer:       /CN=eb150bf86b87cf89fc44906065f6972b06b09ea8
Certificate serial:       019761A71172D5BC0E07CB7253BEB81AFCBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
Manifest number:          1586
Signing time:             Thu 12 Jun 2025 01:00:28 +0000
Manifest this update:     Thu 12 Jun 2025 01:00:28 +0000
Manifest next update:     Fri 13 Jun 2025 01:00:28 +0000
Files and hashes:         1: 6xUL-GuHz4n8RJBgZfaXKwawnqg.crl (hash: q+dJVBaB77gDx2QX2iz1MPSeemlqMxWB1EtadrCm2L4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:a7:11:72:d5:bc:0e:07:cb:72:53:be:b8:1a:fc:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb150bf86b87cf89fc44906065f6972b06b09ea8
        Validity
            Not Before: Jun 12 01:00:28 2025 GMT
            Not After : Jun 13 01:00:28 2025 GMT
        Subject: CN=87bddf3e3ed0a963c6836acb656e7b4cab370e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:59:5d:7b:12:d0:9c:1a:c7:f4:dc:7c:1f:
                    93:a5:ed:f6:85:de:59:99:d9:d1:d4:c7:9b:07:73:
                    19:65:55:81:61:7a:de:96:f2:f6:ef:2b:92:45:01:
                    ad:a4:3a:b9:a4:64:b1:56:e3:23:46:f0:3f:6c:df:
                    f6:fd:04:fb:78:0c:b8:b4:59:30:1f:9a:28:26:3d:
                    81:47:89:50:e8:75:6b:05:ea:f8:06:41:88:c2:ab:
                    25:df:70:f7:27:66:15:57:1e:07:00:dd:c0:a1:31:
                    be:ea:7b:f3:b4:29:b5:ba:5d:7b:7e:b9:5d:24:55:
                    da:a9:c1:f5:28:a2:cb:93:1c:68:5f:96:43:ce:51:
                    1e:59:4b:dd:1e:e8:32:d4:0a:dd:8d:3b:22:4c:32:
                    cf:83:af:17:70:1c:5e:b4:9f:57:f5:bd:3e:64:87:
                    25:c6:56:09:b5:15:52:9f:a2:7e:38:a7:9d:7e:d3:
                    79:f6:b9:f6:9b:83:8a:d1:01:43:37:4a:9f:d5:5e:
                    65:4b:5f:9a:19:0b:be:2f:2d:70:96:4f:b0:49:5a:
                    ee:dd:05:79:06:1d:54:72:f5:3f:b2:be:de:4f:0c:
                    08:81:cb:8f:fa:2f:3b:24:88:c8:33:8a:c6:d0:85:
                    a2:fb:3f:4e:56:61:53:d7:08:6c:5e:99:c6:e0:b7:
                    35:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:BD:DF:3E:3E:D0:A9:63:C6:83:6A:CB:65:6E:7B:4C:AB:37:0E:15
            X509v3 Authority Key Identifier:
                keyid:EB:15:0B:F8:6B:87:CF:89:FC:44:90:60:65:F6:97:2B:06:B0:9E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:a0:b3:e6:15:b0:64:c7:82:b7:b3:b0:25:fb:2a:54:0a:5b:
         c0:42:36:3e:26:3d:5c:51:df:e7:d6:a3:21:53:4c:bb:ff:07:
         3d:46:2a:d1:fd:41:f3:39:c4:6f:0b:6e:c6:23:a9:54:b5:63:
         e0:3e:d0:16:a2:cc:27:7f:9e:08:0e:43:51:a5:32:40:aa:e1:
         54:9e:66:6f:d9:c9:9a:23:3c:40:9e:ab:48:86:a2:94:63:d0:
         01:3e:b0:1c:6c:39:ab:67:27:f7:7c:2c:1d:db:dd:07:ae:3a:
         eb:18:be:da:91:85:09:a9:c8:5c:d1:78:58:16:fe:3b:02:46:
         27:28:a0:5e:37:fa:48:61:e5:bb:f6:d8:2c:b2:55:aa:d8:2a:
         ed:cf:74:54:be:d7:f9:cc:4c:bd:39:87:b2:df:1d:ae:e3:a1:
         5e:19:c6:e0:89:b7:59:62:f1:be:0c:fc:0b:41:fe:ca:82:8f:
         e7:6b:92:a1:f9:8a:32:c1:04:37:01:de:b5:45:59:db:39:17:
         fa:d9:00:1a:fc:bc:13:73:03:43:47:15:93:5f:91:71:80:aa:
         c6:95:9e:a4:16:f4:40:82:e0:03:d9:e6:b1:36:e0:48:ff:1e:
         93:94:d3:b8:2b:cf:01:94:b5:07:12:08:6d:56:fa:a3:ed:78:
         b0:fa:79:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 06:05:58 2025 by rpki-client