Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft
File:                     rvl6leIXAnXoyC7oeLbQjeuCHlU.mft (raw, json)
Hash identifier:          5+zG2szK2VlyDYGFIt7kFpZCJWY0eNsakwF+CUaw3Ww=
Subject key identifier:   13:4F:07:11:A4:58:25:C6:29:23:5B:25:8E:4C:3E:69:B9:47:75:B2
Authority key identifier: AE:F9:7A:95:E2:17:02:75:E8:C8:2E:E8:78:B6:D0:8D:EB:82:1E:55
Certificate issuer:       /CN=aef97a95e2170275e8c82ee878b6d08deb821e55
Certificate serial:       01975045A4410F8148A195D36DA60684681C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rvl6leIXAnXoyC7oeLbQjeuCHlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft
Manifest number:          0EA6
Signing time:             Sun 08 Jun 2025 16:00:30 +0000
Manifest this update:     Sun 08 Jun 2025 16:00:30 +0000
Manifest next update:     Mon 09 Jun 2025 16:00:30 +0000
Files and hashes:         1: rvl6leIXAnXoyC7oeLbQjeuCHlU.crl (hash: Rij9DDXvk9Xpab8h5UrI11D5V4pdpKQbvaGk5zNN/mk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rvl6leIXAnXoyC7oeLbQjeuCHlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:45:a4:41:0f:81:48:a1:95:d3:6d:a6:06:84:68:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aef97a95e2170275e8c82ee878b6d08deb821e55
        Validity
            Not Before: Jun  8 16:00:30 2025 GMT
            Not After : Jun  9 16:00:30 2025 GMT
        Subject: CN=134f0711a45825c629235b258e4c3e69b94775b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2f:c8:9b:c2:5c:65:44:a2:05:ce:ae:0e:03:
                    2f:a1:c8:58:c2:2a:38:6b:75:b5:3e:49:6d:75:b5:
                    20:52:19:24:37:53:c6:a5:ed:fb:b4:1e:d9:ce:89:
                    82:41:53:93:7c:84:4d:65:d4:99:57:26:ee:2f:a8:
                    ef:81:96:31:88:53:63:a9:d7:fc:4a:04:5c:1d:24:
                    bb:e9:90:08:36:5b:b9:22:63:3a:f1:80:cc:32:98:
                    ac:88:6b:b1:bc:71:2b:fd:cd:ff:34:33:04:d4:e1:
                    e0:0a:e0:f6:62:1c:c5:75:5b:bf:dd:77:90:ad:99:
                    0b:0a:aa:ed:f8:1c:e6:57:3f:05:9b:93:5f:7a:68:
                    09:6d:e5:ae:f1:90:c6:db:8c:d0:d0:ce:e8:77:25:
                    1c:d9:d3:df:fd:41:2c:7a:50:26:8c:5f:07:46:3d:
                    1d:98:2b:07:1a:64:11:21:e9:db:c2:cd:6e:5a:f0:
                    b0:75:0a:9b:cc:f0:bd:93:51:60:6c:93:37:cd:93:
                    0c:41:e2:a9:90:f0:90:cc:96:e8:10:47:9d:c7:32:
                    a4:84:12:9d:d3:66:37:1e:87:3e:77:3c:26:4c:40:
                    bd:ab:db:2b:44:15:6d:5f:3c:ef:a0:33:1f:4a:d0:
                    2b:db:60:64:35:7f:7f:2d:b4:bb:b1:c0:76:a0:11:
                    b3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4F:07:11:A4:58:25:C6:29:23:5B:25:8E:4C:3E:69:B9:47:75:B2
            X509v3 Authority Key Identifier:
                keyid:AE:F9:7A:95:E2:17:02:75:E8:C8:2E:E8:78:B6:D0:8D:EB:82:1E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvl6leIXAnXoyC7oeLbQjeuCHlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:38:e8:1b:0e:4e:ef:07:a0:0a:0d:f4:2a:29:cf:23:b8:17:
         40:8d:1d:78:f2:7e:31:bd:80:b3:32:af:9e:79:d4:f9:be:4e:
         63:1e:66:d8:ad:36:b3:71:e0:cc:0f:fa:29:e0:6a:5c:35:4b:
         0c:b6:20:9a:11:f0:99:10:42:3c:e9:d4:86:49:dd:9a:83:52:
         c2:b8:b4:57:a0:6c:6c:4d:eb:37:ea:fd:65:af:c2:6d:03:a8:
         f6:fc:20:89:5c:6a:8c:aa:48:5c:bb:26:b6:c7:8a:c8:a4:f4:
         51:7a:22:c7:eb:dc:36:24:8e:4e:2c:7a:58:4c:b3:47:27:54:
         ba:e0:7a:19:ca:fc:cc:36:55:20:16:f9:23:27:49:b5:dd:cd:
         83:c7:0d:7d:39:9f:40:aa:1c:62:7a:b7:ed:6a:c1:ea:d1:18:
         a1:4a:52:ef:54:ee:18:09:b5:09:2f:39:46:27:f9:9a:bf:c3:
         8b:6d:3f:49:bd:b2:2a:2f:c6:01:3c:a8:dc:05:28:80:db:96:
         f7:6e:af:4b:51:74:bd:9d:48:c3:3a:7c:de:42:a7:7c:73:31:
         2f:83:1d:16:37:bb:69:4b:10:fe:b1:64:da:a6:54:b0:fd:5f:
         9d:79:0b:cc:a5:2b:61:04:7a:91:79:c4:d3:34:47:0b:01:91:
         a8:9e:69:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:08:44 2025 by rpki-client