Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
File:                     _gC3BmlCNy_EjPLmHMdRjb8UuvM.mft (raw, json)
Hash identifier:          bTwHfoh2juidbAqEAy9LjO4N7rBkoROQDjamMKVIDLY=
Subject key identifier:   A8:CE:4E:24:87:26:04:56:DD:96:21:73:17:C5:C7:7C:61:25:A4:0C
Authority key identifier: FE:00:B7:06:69:42:37:2F:C4:8C:F2:E6:1C:C7:51:8D:BF:14:BA:F3
Certificate issuer:       /CN=fe00b7066942372fc48cf2e61cc7518dbf14baf3
Certificate serial:       01974C32444348668B9325E093A1EDB85801
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gC3BmlCNy_EjPLmHMdRjb8UuvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
Manifest number:          6A
Signing time:             Sat 07 Jun 2025 21:00:52 +0000
Manifest this update:     Sat 07 Jun 2025 21:00:52 +0000
Manifest next update:     Sun 08 Jun 2025 21:00:52 +0000
Files and hashes:         1: _gC3BmlCNy_EjPLmHMdRjb8UuvM.crl (hash: AOecDXAb56BwRPWVsOLv1QEs1hjd7goGDOD7Fiqq8F8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_gC3BmlCNy_EjPLmHMdRjb8UuvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:32:44:43:48:66:8b:93:25:e0:93:a1:ed:b8:58:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe00b7066942372fc48cf2e61cc7518dbf14baf3
        Validity
            Not Before: Jun  7 21:00:52 2025 GMT
            Not After : Jun  8 21:00:52 2025 GMT
        Subject: CN=a8ce4e2487260456dd96217317c5c77c6125a40c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0b:45:a8:54:4e:8d:83:ee:bf:22:63:c2:42:
                    51:9b:32:eb:a8:06:68:ee:25:8b:9e:46:1a:2a:ee:
                    3f:50:47:52:51:13:47:1b:e1:b2:e7:0c:02:cf:b1:
                    fc:35:71:c3:d5:84:f9:2f:72:2f:b3:20:0f:c6:8c:
                    7d:87:55:dc:95:9b:c2:e7:fa:6e:e7:f0:e5:03:45:
                    c8:47:51:99:9f:f0:36:2b:db:28:c0:1c:2c:c7:f7:
                    8a:b3:13:29:6e:33:8a:22:c5:52:fd:4f:12:fc:e4:
                    23:49:29:d4:b3:d0:f3:72:da:8c:10:12:e7:72:89:
                    e5:69:ba:34:8f:66:35:ac:93:28:74:dd:1a:ee:49:
                    b5:97:59:bc:d7:c8:a4:0a:09:76:73:51:44:61:ed:
                    84:03:96:e2:f8:18:2d:82:57:83:71:61:6f:d5:57:
                    ec:5f:99:87:ee:7a:3f:aa:80:dd:85:f5:e5:f4:4e:
                    72:83:7e:c2:16:39:9e:d7:88:50:ea:4b:7a:cb:ad:
                    35:ba:85:90:e7:b7:e3:71:fa:a6:70:08:53:63:7e:
                    61:25:8b:84:fd:4f:50:88:3d:34:69:b5:15:c3:78:
                    47:02:29:79:da:4f:0f:b3:f2:a6:f3:2c:16:ac:c6:
                    78:78:43:13:a0:fa:58:7f:6d:b1:32:d9:57:9d:4a:
                    6d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:CE:4E:24:87:26:04:56:DD:96:21:73:17:C5:C7:7C:61:25:A4:0C
            X509v3 Authority Key Identifier:
                keyid:FE:00:B7:06:69:42:37:2F:C4:8C:F2:E6:1C:C7:51:8D:BF:14:BA:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gC3BmlCNy_EjPLmHMdRjb8UuvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:42:5c:12:10:98:cc:3d:e7:28:8d:48:8e:ce:d8:67:53:0a:
         47:4a:4f:df:d9:3e:6d:75:b1:6c:4b:b2:65:d2:da:a7:13:23:
         4c:e9:e6:f0:a5:69:fc:d7:7d:38:f0:f8:7a:22:67:e6:cb:59:
         31:28:2f:88:29:85:46:6b:03:d1:3b:4d:7d:69:9d:67:cb:21:
         a2:47:f6:97:8e:7b:2f:bf:08:8e:d7:6c:1f:36:96:ff:58:9e:
         b0:73:ca:5f:b6:e9:64:60:b9:98:9a:e7:d8:0e:68:59:df:93:
         6f:62:19:0e:ac:3e:1d:a6:7c:49:ad:ca:9c:97:f2:cc:d6:29:
         00:da:c6:2d:4f:97:e1:aa:c9:a7:34:d2:81:fa:17:f1:d0:0c:
         1c:22:2a:63:55:7a:c1:e7:c4:8e:23:e4:8d:22:3f:78:12:b3:
         3e:66:f2:73:5d:5b:9c:3d:dc:de:f5:3c:d9:46:f5:ee:69:df:
         dd:a0:c5:19:36:e0:03:aa:c3:2e:47:e5:cf:1b:7c:84:9f:64:
         d6:1e:64:0c:63:48:69:8d:e4:f0:4a:29:98:c2:9f:56:32:e7:
         69:4f:68:6c:42:bd:f3:ba:06:a1:1a:25:03:4e:cc:e6:e5:82:
         c7:d1:3b:36:21:a1:cc:37:3b:27:76:37:4d:b4:13:07:98:68:
         fb:ef:4d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:30:10 2025 by rpki-client