Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
File:                     6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft (raw, json)
Hash identifier:          yOXrM9kgrD9HWCqYByhZUSMKf/9dTXb93jkgAXa3epQ=
Subject key identifier:   A9:6F:19:A1:4E:CB:E0:1A:27:53:5D:73:B8:DB:1F:D4:BB:71:93:18
Authority key identifier: E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC
Certificate issuer:       /CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
Certificate serial:       0197488C92E975B642CB8E70228E3C46A585
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
Manifest number:          0D12
Signing time:             Sat 07 Jun 2025 04:01:01 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:01 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:01 +0000
Files and hashes:         1: 6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl (hash: UqVhf6YjnGtI+UHGvGPEeW0xdQZkYpIFrcwsUbJr2+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:92:e9:75:b6:42:cb:8e:70:22:8e:3c:46:a5:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
        Validity
            Not Before: Jun  7 04:01:01 2025 GMT
            Not After : Jun  8 04:01:01 2025 GMT
        Subject: CN=a96f19a14ecbe01a27535d73b8db1fd4bb719318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:39:26:fe:87:1e:47:4c:66:3c:1e:c4:50:b3:
                    29:46:b7:d5:c1:69:97:c2:5c:25:a4:d8:fc:4d:57:
                    8b:6a:e9:1a:e4:e3:7d:15:48:47:05:8f:cb:ca:11:
                    84:57:d6:7b:6d:0f:c5:1a:82:1d:73:39:45:b9:09:
                    d6:d4:5d:cb:11:d9:80:82:0d:bb:15:e0:7f:a0:28:
                    29:09:af:6b:a6:47:68:76:53:b3:ec:a6:63:5a:49:
                    c3:78:98:7c:b3:b0:cd:a6:63:24:9f:63:b5:4a:52:
                    8f:bf:46:fe:f1:5b:da:63:92:fc:32:71:5b:94:72:
                    b9:7b:2a:dd:96:02:4c:e1:d9:cf:5c:5e:ce:ad:49:
                    0b:17:a3:2b:3e:79:0e:8a:b6:1d:34:93:f5:70:52:
                    12:9a:be:0b:a0:5a:98:5e:c3:d4:c6:cc:06:c9:07:
                    07:57:ee:bc:39:f1:01:fc:0e:55:12:2f:19:cb:fb:
                    14:1b:3d:94:c1:0b:af:0c:ba:68:b3:81:89:f2:ca:
                    a0:f3:b0:cc:0d:1b:42:76:34:c8:e0:3a:6d:b0:ad:
                    29:e9:79:f0:24:2d:3f:e1:ec:1a:d0:fa:37:5f:b1:
                    d0:f4:43:82:b3:87:0c:ea:d3:bc:d6:0a:01:29:79:
                    cc:cf:85:ef:d2:73:e7:8d:ed:d5:77:33:c0:06:60:
                    a0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6F:19:A1:4E:CB:E0:1A:27:53:5D:73:B8:DB:1F:D4:BB:71:93:18
            X509v3 Authority Key Identifier:
                keyid:E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:7e:71:80:11:a8:b2:38:76:10:00:26:78:1e:9c:14:1e:b3:
         31:8c:5e:6e:35:aa:2b:fe:af:26:48:6d:38:f5:9d:ee:bb:2d:
         2a:1a:a7:32:8c:a0:28:7c:3f:15:62:be:45:12:a1:c2:f4:67:
         92:5d:cb:29:91:e2:9a:09:8b:e5:f3:d0:94:83:43:e9:24:4f:
         c9:0c:fd:1f:bd:89:0e:56:6a:26:b8:fa:03:2b:a0:42:ab:7a:
         d1:68:12:4b:8d:31:ab:b8:51:11:e7:cf:80:4e:53:6a:6b:bc:
         b2:1b:49:53:db:63:7c:03:34:80:1e:0d:4f:6b:e7:e0:f3:09:
         86:67:27:22:99:a9:ab:08:85:72:77:fe:37:47:47:20:e0:fa:
         2e:64:33:3d:66:23:02:25:da:ee:dc:09:65:87:4a:e1:0d:e8:
         45:49:c7:24:97:30:c9:18:d5:24:6f:bb:68:7e:1b:4a:54:d3:
         18:5d:e2:5c:87:20:75:f4:f3:7a:d3:51:b5:ac:89:1d:64:a0:
         bc:24:0d:38:a1:51:d3:7b:c1:15:e6:ec:7c:0f:3b:aa:45:7f:
         70:67:71:1c:dc:c4:83:5a:bb:c1:f1:08:47:30:f3:e0:b3:a6:
         e0:1d:ae:8a:d4:36:78:0b:20:46:28:2b:f0:07:6b:67:31:d0:
         dd:07:4b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:56:55 2025 by rpki-client