Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft
File:                     au6rXTwAHVetswh4EhecgpIouCE.mft (raw, json)
Hash identifier:          MFWtoti4uGBPxbFEnFtQEtDiwjuUPJvSoiUujgablek=
Subject key identifier:   3F:67:D0:8E:B8:63:7F:6F:06:D8:AF:F4:9A:C7:2D:31:5E:96:EF:23
Authority key identifier: 6A:EE:AB:5D:3C:00:1D:57:AD:B3:08:78:12:17:9C:82:92:28:B8:21
Certificate issuer:       /CN=6aeeab5d3c001d57adb3087812179c829228b821
Certificate serial:       01974A7B9856BDBF0385EB9A5D8DB9C810B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/au6rXTwAHVetswh4EhecgpIouCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft
Manifest number:          157A
Signing time:             Sat 07 Jun 2025 13:01:43 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:43 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:43 +0000
Files and hashes:         1: au6rXTwAHVetswh4EhecgpIouCE.crl (hash: JwPR/ttKVjFORH4pFmB86DS+xT+258x3PowWlu9URu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/au6rXTwAHVetswh4EhecgpIouCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:98:56:bd:bf:03:85:eb:9a:5d:8d:b9:c8:10:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aeeab5d3c001d57adb3087812179c829228b821
        Validity
            Not Before: Jun  7 13:01:43 2025 GMT
            Not After : Jun  8 13:01:43 2025 GMT
        Subject: CN=3f67d08eb8637f6f06d8aff49ac72d315e96ef23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:ec:67:bf:17:e3:75:b6:b2:5f:69:e8:86:
                    4a:4a:5c:4e:48:d4:a9:e6:58:b6:93:39:83:66:82:
                    d7:a6:59:ca:b8:4f:5f:10:90:c7:dd:80:8f:d1:c7:
                    42:a7:f0:86:db:a5:81:ec:4d:49:55:3e:c4:04:2d:
                    b6:19:52:fb:30:01:6b:bd:3a:3c:cd:13:56:d5:5d:
                    16:d5:83:d8:26:2b:5c:0e:76:c1:65:14:07:c2:5b:
                    33:d4:ff:64:7b:eb:64:92:b9:c5:d0:7f:de:93:a5:
                    d3:b5:48:6b:bc:ec:de:9c:b1:30:4a:ee:42:67:71:
                    68:e5:ac:83:01:7b:49:78:8a:91:85:6d:40:13:c8:
                    a7:0e:48:da:bc:a7:25:93:5b:af:ce:73:17:6b:ca:
                    3a:e3:7c:d5:8d:2e:0b:1b:88:de:17:8c:b4:90:5c:
                    8c:09:80:15:44:d1:72:c2:3e:49:ed:23:49:1c:73:
                    12:c0:5c:5b:07:bf:20:a6:79:86:ea:1c:75:bd:87:
                    09:50:e8:f9:5d:28:c9:48:51:64:4a:da:56:bc:ac:
                    a2:8c:6d:ed:8b:22:f1:65:a9:c2:ec:59:cf:01:1d:
                    f1:d4:43:7f:1b:c9:23:74:0d:30:aa:e6:9e:1f:4c:
                    74:ca:bb:11:3c:3f:fe:f5:25:09:e1:8d:9d:9f:ba:
                    6d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:67:D0:8E:B8:63:7F:6F:06:D8:AF:F4:9A:C7:2D:31:5E:96:EF:23
            X509v3 Authority Key Identifier:
                keyid:6A:EE:AB:5D:3C:00:1D:57:AD:B3:08:78:12:17:9C:82:92:28:B8:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au6rXTwAHVetswh4EhecgpIouCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:b5:85:70:f9:5c:f3:99:35:49:67:9d:ed:99:d2:35:8e:30:
         05:27:d8:51:b2:5b:60:61:d8:4f:d3:69:f1:ac:86:19:ae:38:
         71:51:bc:ca:e1:61:46:a5:1e:5a:d5:98:18:25:dd:fc:69:6b:
         4b:cc:24:79:b8:f7:47:d1:e6:a0:91:c7:b5:52:f4:cb:36:86:
         6d:18:48:fd:e5:01:b7:52:2a:88:12:3d:30:4b:82:fa:70:dd:
         0c:a1:c8:eb:39:4c:20:8e:49:87:3c:47:ac:57:6b:a5:a6:23:
         6e:77:cd:d2:af:82:24:c7:7a:e8:87:c8:e0:f0:60:22:bb:ae:
         53:c5:bc:1c:59:13:c7:1f:4a:8d:0e:57:dd:c8:1c:d0:82:49:
         5d:70:23:4e:4e:b0:eb:c3:60:af:32:c9:db:26:f0:31:79:39:
         e9:f9:9f:d2:3e:6b:a0:36:d4:b0:e3:b1:b7:76:02:4a:38:75:
         f6:11:8b:f9:60:15:08:e3:1e:ed:41:3d:d0:fc:78:fe:8e:3e:
         a1:2b:05:06:ee:2e:6c:1f:0c:76:4b:72:2a:2d:f7:21:29:c3:
         3f:11:f8:85:c1:4c:9b:c3:9f:f1:18:77:6f:db:7e:7d:d9:5d:
         8f:87:c4:5f:cd:1f:f8:36:77:c5:25:0e:b6:a3:db:08:76:9e:
         c0:a3:4b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:25:21 2025 by rpki-client