Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
File:                     6x5t-zkpXJOgRyycE1WUAYqPy1w.mft (raw, json)
Hash identifier:          GEdSAOQ3cU3WVfi5NdwFZkh67klkKolhBcx+Co7it4o=
Subject key identifier:   13:A2:56:E0:10:36:04:AE:F0:4A:5D:62:BD:5E:3F:D0:4F:7C:ED:F9
Authority key identifier: EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C
Certificate issuer:       /CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
Certificate serial:       0197485509113AD4D728085883DB51BD75E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
Manifest number:          046E
Signing time:             Sat 07 Jun 2025 03:00:21 +0000
Manifest this update:     Sat 07 Jun 2025 03:00:21 +0000
Manifest next update:     Sun 08 Jun 2025 03:00:21 +0000
Files and hashes:         1: 6x5t-zkpXJOgRyycE1WUAYqPy1w.crl (hash: lTHwxiwrGGETjJHbx6o1I3ApY5kuy1jYE3doLkUNp6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:55:09:11:3a:d4:d7:28:08:58:83:db:51:bd:75:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
        Validity
            Not Before: Jun  7 03:00:21 2025 GMT
            Not After : Jun  8 03:00:21 2025 GMT
        Subject: CN=13a256e0103604aef04a5d62bd5e3fd04f7cedf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:69:67:88:3f:92:7c:7b:37:5e:5f:8c:d3:05:
                    18:86:b8:0f:71:e7:9e:e3:f3:92:94:7b:7a:41:68:
                    26:ef:c2:37:13:fe:11:e9:86:c6:e0:ce:59:e8:ce:
                    b9:a6:23:87:7a:03:7b:e1:7a:97:25:48:91:58:bd:
                    f9:57:fa:50:d2:ce:c1:65:96:36:bf:74:e8:0f:ff:
                    d3:d4:ec:1e:da:2e:ec:dd:62:f3:34:73:3a:91:5e:
                    b2:94:dc:98:82:59:ec:77:cb:a6:99:32:86:62:ba:
                    b0:7c:2e:19:6e:85:8a:25:70:9c:46:0b:63:f9:74:
                    71:a7:65:43:2c:8b:51:b1:d7:38:e5:81:7d:0e:6e:
                    00:81:9a:7f:35:57:d4:24:79:b8:c6:d6:9f:26:40:
                    f6:04:55:28:dd:70:4b:17:4c:9e:ce:fe:65:35:26:
                    7c:a4:3b:c7:01:2c:93:69:50:1e:b2:b4:80:7e:98:
                    19:ea:00:75:97:09:ca:8e:3f:92:b9:62:e9:d8:3e:
                    a0:55:04:1d:61:7c:6d:99:41:65:21:47:9a:8a:30:
                    f6:f5:41:02:97:52:ad:1c:47:f1:2b:de:fc:c0:fe:
                    91:0c:e1:03:ea:1e:cb:4c:36:e1:66:34:5f:63:db:
                    e5:60:32:f4:ae:22:22:df:aa:9c:54:00:14:1a:fa:
                    d5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A2:56:E0:10:36:04:AE:F0:4A:5D:62:BD:5E:3F:D0:4F:7C:ED:F9
            X509v3 Authority Key Identifier:
                keyid:EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:54:e4:c9:3d:b3:be:3d:42:81:f6:5e:97:47:5b:24:a1:bb:
         55:fc:eb:6f:bd:63:da:57:21:41:57:ba:c0:6d:b1:fe:ca:85:
         58:39:3f:9e:e9:3f:2f:05:08:78:90:8a:c4:6c:23:6d:79:11:
         6c:9b:1d:80:aa:27:38:65:ae:17:28:ae:e7:15:ee:1b:08:db:
         e6:33:8e:46:78:cd:c4:14:ff:9d:ee:ca:9d:58:46:09:37:94:
         7d:3f:fb:b0:59:f4:57:f8:9e:75:b1:ee:aa:34:09:93:36:39:
         b0:e1:57:f2:ee:30:79:35:a4:93:18:5e:48:16:2e:1e:4b:bd:
         66:96:6a:86:ac:11:15:d8:df:5a:45:9b:9b:a0:26:9f:53:10:
         fa:c9:51:dc:aa:5f:11:50:a8:78:28:0f:c5:e3:ad:7f:20:ca:
         43:d9:bf:64:93:15:82:94:e0:87:08:ae:5e:23:33:e8:39:49:
         82:7b:43:c1:b8:cc:d8:3b:4d:19:bd:54:4b:c7:d6:16:45:1b:
         d0:c8:98:2b:3c:a4:c4:63:97:11:b9:19:42:04:25:4d:6e:61:
         af:c2:22:a9:c0:ad:98:37:5d:13:30:09:7d:38:e5:3b:f5:d5:
         47:0f:4b:51:57:ef:68:c0:09:35:92:94:22:a1:18:ae:2e:15:
         b6:3a:3c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:07:12 2025 by rpki-client