Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/cd340b-7bf2-4356-865f-428c6ca32116/1/6HbLQ_pdcxgHBTxr9g9PREb_kW4.mft
File:                     6HbLQ_pdcxgHBTxr9g9PREb_kW4.mft (raw, json)
Hash identifier:          6IePbVupfSi+X4Fk2ehWOscQJmo5fRBp61z96fcIGuo=
Subject key identifier:   B8:F4:31:54:F3:E8:AA:A9:CE:0E:91:0E:D2:81:8A:1B:AB:43:7B:0A
Authority key identifier: E8:76:CB:43:FA:5D:73:18:07:05:3C:6B:F6:0F:4F:44:46:FF:91:6E
Certificate issuer:       /CN=e876cb43fa5d731807053c6bf60f4f4446ff916e
Certificate serial:       01974BC4286D05392579872E4B1722C24B75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HbLQ_pdcxgHBTxr9g9PREb_kW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/cd340b-7bf2-4356-865f-428c6ca32116/1/6HbLQ_pdcxgHBTxr9g9PREb_kW4.mft
Manifest number:          04DE
Signing time:             Sat 07 Jun 2025 19:00:35 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:35 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:35 +0000
Files and hashes:         1: 6HbLQ_pdcxgHBTxr9g9PREb_kW4.crl (hash: fe0mnpGAzecU77sPUSTSeB/97Z9vOFGytCwm8erbtXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/cd340b-7bf2-4356-865f-428c6ca32116/1/6HbLQ_pdcxgHBTxr9g9PREb_kW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/cd340b-7bf2-4356-865f-428c6ca32116/1/6HbLQ_pdcxgHBTxr9g9PREb_kW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6HbLQ_pdcxgHBTxr9g9PREb_kW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:28:6d:05:39:25:79:87:2e:4b:17:22:c2:4b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e876cb43fa5d731807053c6bf60f4f4446ff916e
        Validity
            Not Before: Jun  7 19:00:35 2025 GMT
            Not After : Jun  8 19:00:35 2025 GMT
        Subject: CN=b8f43154f3e8aaa9ce0e910ed2818a1bab437b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:64:14:34:b9:97:d4:b8:4e:d5:45:d2:5b:4d:
                    6a:c3:c8:11:a5:12:dc:a6:fe:46:b3:b8:d0:0c:1c:
                    85:8e:cd:9f:42:4c:d9:1e:b3:0e:db:88:b9:d7:ce:
                    aa:fd:6b:a0:2d:dc:74:94:bd:23:79:a9:c3:a3:20:
                    bd:aa:14:d7:04:aa:1b:ca:82:ab:76:9f:45:6d:0b:
                    56:41:2b:1f:8f:41:07:f5:61:85:22:a0:60:e0:62:
                    15:e4:b9:9f:29:5b:04:ab:17:17:df:a4:4d:d2:d3:
                    08:6e:64:c0:b7:f0:1c:4f:84:93:a5:a3:9c:e1:07:
                    7a:ca:e0:49:0e:28:5c:4d:6c:f0:ce:13:1a:2c:17:
                    60:f3:8d:a8:41:19:79:71:7b:13:89:3f:9a:69:40:
                    4c:af:07:ff:86:ff:08:21:e1:92:bb:42:ef:70:f6:
                    32:99:96:2e:7e:48:21:3a:2f:44:dc:ac:da:31:88:
                    d1:f5:38:d6:8b:c8:29:47:bb:82:12:36:27:8d:e7:
                    46:2a:51:b2:e8:7c:44:81:b7:5f:f9:97:c6:6d:65:
                    24:bd:5d:27:78:99:15:95:24:bc:ee:5b:62:f9:5e:
                    e0:f8:47:9c:e0:58:bc:91:8a:f4:b1:4e:e5:21:87:
                    52:a8:e1:f5:e0:4d:55:36:61:05:7f:a0:f6:6d:a5:
                    bc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F4:31:54:F3:E8:AA:A9:CE:0E:91:0E:D2:81:8A:1B:AB:43:7B:0A
            X509v3 Authority Key Identifier:
                keyid:E8:76:CB:43:FA:5D:73:18:07:05:3C:6B:F6:0F:4F:44:46:FF:91:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HbLQ_pdcxgHBTxr9g9PREb_kW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/cd340b-7bf2-4356-865f-428c6ca32116/1/6HbLQ_pdcxgHBTxr9g9PREb_kW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/cd340b-7bf2-4356-865f-428c6ca32116/1/6HbLQ_pdcxgHBTxr9g9PREb_kW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:4d:af:66:07:0a:f1:6f:1c:c7:7c:a2:1a:50:6b:c2:34:0d:
         a4:14:d6:9e:29:3b:cb:18:d6:3f:25:6c:d4:fb:3c:97:36:17:
         25:8b:9b:95:5b:bd:dc:ca:27:68:6b:d4:ce:5b:7b:90:70:ec:
         39:91:cb:39:54:f9:30:02:43:e9:69:d3:68:cb:c5:9a:9f:56:
         58:c2:bf:14:bf:3f:82:3a:0c:d6:2e:62:52:c5:10:f8:62:98:
         c8:5a:50:63:9b:fe:b8:a7:dd:21:ca:a4:7b:c0:f5:49:2c:07:
         f5:ed:6a:e4:62:fa:e8:4f:64:5b:5a:cc:04:25:a7:aa:ad:e3:
         2e:e2:9e:6d:c6:e6:0a:30:7b:3d:ae:0e:05:59:70:1a:f2:2b:
         3f:6b:ed:35:81:9b:27:f1:ac:ef:08:ea:7e:2d:26:15:af:e2:
         ef:d7:54:61:ab:43:3c:e0:7a:60:a9:ba:76:45:59:e7:1d:c8:
         80:2f:05:c9:dc:5e:c8:0c:7e:c2:31:b9:c2:a3:3c:a4:5c:a5:
         da:7d:52:0a:fc:c4:e6:25:10:57:2f:23:d9:9b:15:f8:7d:f1:
         9e:bb:ed:88:ee:96:7d:be:70:5f:ed:c5:3c:41:0f:05:31:d0:
         14:13:34:31:b3:a2:e4:25:68:f4:7b:b3:78:a9:d1:07:60:8a:
         14:72:65:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:59:44 2025 by rpki-client