Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.mft
File:                     ardZKec1zmWma9gtyotlHZhWzSw.mft (raw, json)
Hash identifier:          +7HvPEgeFzcy+QzX4jkG8fbfH5uQ2eGvKdu9Ep2/QII=
Subject key identifier:   64:30:A5:7F:3F:57:76:70:74:CC:2D:5C:66:DC:BB:C2:68:FE:B4:21
Authority key identifier: 6A:B7:59:29:E7:35:CE:65:A6:6B:D8:2D:CA:8B:65:1D:98:56:CD:2C
Certificate issuer:       /CN=6ab75929e735ce65a66bd82dca8b651d9856cd2c
Certificate serial:       01974D44EDD574EDDBD7A655CE3D517C2D8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ardZKec1zmWma9gtyotlHZhWzSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.mft
Manifest number:          11CC
Signing time:             Sun 08 Jun 2025 02:00:52 +0000
Manifest this update:     Sun 08 Jun 2025 02:00:52 +0000
Manifest next update:     Mon 09 Jun 2025 02:00:52 +0000
Files and hashes:         1: ardZKec1zmWma9gtyotlHZhWzSw.crl (hash: yL42IU2rVsJDos0cU3N4kIQj7TLgGgzj8ZsKKYURdmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ardZKec1zmWma9gtyotlHZhWzSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 02:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:44:ed:d5:74:ed:db:d7:a6:55:ce:3d:51:7c:2d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ab75929e735ce65a66bd82dca8b651d9856cd2c
        Validity
            Not Before: Jun  8 02:00:52 2025 GMT
            Not After : Jun  9 02:00:52 2025 GMT
        Subject: CN=6430a57f3f57767074cc2d5c66dcbbc268feb421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5a:ed:4a:48:43:af:00:80:ec:75:0b:f3:23:
                    41:6b:ff:8f:97:31:38:22:ba:f2:dc:0e:06:19:85:
                    91:0e:67:24:0d:ce:cf:37:0d:2d:4a:d3:32:9a:43:
                    ae:63:38:7c:08:35:83:6a:04:13:5d:17:07:5e:61:
                    07:4c:53:c9:d0:83:a5:4e:95:fd:ec:7c:8b:82:60:
                    c8:4a:32:53:fc:b4:e0:36:7e:a4:10:b9:74:03:68:
                    3f:e8:ea:1f:4b:14:6a:ab:d7:8b:f4:03:55:b9:16:
                    e3:89:fe:42:82:ff:00:58:35:ca:ec:b0:79:6c:fa:
                    35:e2:da:d0:51:22:90:e0:df:45:e2:a1:c1:bd:b8:
                    19:5c:e8:15:d2:11:37:44:1a:74:2f:4d:03:e0:0d:
                    24:77:dd:69:a2:5d:6a:83:33:c1:64:af:cc:86:34:
                    51:b8:74:74:08:be:78:e2:9d:d7:8c:24:62:11:01:
                    d6:58:cb:97:cc:63:28:31:6c:fc:3b:8b:b1:b6:90:
                    1b:d0:a0:64:1c:a5:42:50:76:3c:b4:a7:45:fa:31:
                    93:c4:1b:33:36:68:c3:fb:14:e9:c7:41:ca:03:97:
                    d1:d1:fd:a9:27:dc:47:64:5e:83:25:c3:76:df:12:
                    28:e7:1c:3d:58:13:8d:70:5e:ad:de:45:7a:e1:9f:
                    2c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:30:A5:7F:3F:57:76:70:74:CC:2D:5C:66:DC:BB:C2:68:FE:B4:21
            X509v3 Authority Key Identifier:
                keyid:6A:B7:59:29:E7:35:CE:65:A6:6B:D8:2D:CA:8B:65:1D:98:56:CD:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ardZKec1zmWma9gtyotlHZhWzSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:53:86:78:91:53:fc:82:3a:29:23:92:42:20:39:cf:71:0a:
         22:e7:88:dd:d3:65:2a:7f:c8:7e:6f:f4:81:a2:42:ac:2f:3e:
         f6:a6:20:4f:97:1b:1e:0a:ef:b7:cb:d0:87:c8:10:0b:14:83:
         9a:0e:c7:f0:c9:56:f1:c7:ee:ef:3f:49:8a:e6:57:36:48:b6:
         70:35:b6:d2:d1:01:60:71:18:4a:6e:08:65:24:72:99:bd:63:
         fe:66:b8:5a:67:2d:9e:5b:a2:6e:8d:3b:b4:3f:b5:22:01:4f:
         3e:5d:92:81:c3:c2:d1:ca:e4:d9:5e:60:ef:3e:09:81:12:af:
         1e:0b:6e:76:2f:13:41:f6:e7:8a:92:2f:71:23:f9:5b:8c:5f:
         e5:5b:b4:c1:23:c3:f0:91:1a:46:54:b1:1c:f1:99:f9:22:e1:
         24:6b:56:bf:de:7e:3b:71:fd:d8:9e:9f:fe:2c:bc:2c:47:81:
         a1:92:24:f6:19:a2:ef:5e:d2:9d:0f:ab:81:93:ae:c4:7c:20:
         a8:85:18:b6:e2:79:87:ae:5d:33:5a:2e:e1:ad:3a:21:6c:2d:
         33:fc:ef:76:eb:8c:21:1f:c5:18:7c:1e:1e:72:a6:9b:49:fa:
         2c:ea:30:24:37:b7:a2:6a:fc:2a:6a:f1:54:6d:59:e1:bc:a6:
         04:fe:15:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:58:38 2025 by rpki-client