Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
File:                     i6gkldaDsIyIGoGM0B-kL_9v9tE.mft (raw, json)
Hash identifier:          Ni4EwClXiElDLlEtEub6qyfO4d3dS3Iu7q6WaQ5kYuk=
Subject key identifier:   4E:4F:FD:91:CE:13:C0:6A:31:4F:E4:3B:FF:5F:F1:DD:FF:01:14:BB
Authority key identifier: 8B:A8:24:95:D6:83:B0:8C:88:1A:81:8C:D0:1F:A4:2F:FF:6F:F6:D1
Certificate issuer:       /CN=8ba82495d683b08c881a818cd01fa42fff6ff6d1
Certificate serial:       019764DF0F5AB2355F604091FCF3DF8E43CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6gkldaDsIyIGoGM0B-kL_9v9tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
Manifest number:          0180
Signing time:             Thu 12 Jun 2025 16:00:29 +0000
Manifest this update:     Thu 12 Jun 2025 16:00:29 +0000
Manifest next update:     Fri 13 Jun 2025 16:00:29 +0000
Files and hashes:         1: i6gkldaDsIyIGoGM0B-kL_9v9tE.crl (hash: 4Rn6AA68+oVIzuj4pJvoZxKaUHZfO+VEOwkEOkjgQhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i6gkldaDsIyIGoGM0B-kL_9v9tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:df:0f:5a:b2:35:5f:60:40:91:fc:f3:df:8e:43:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ba82495d683b08c881a818cd01fa42fff6ff6d1
        Validity
            Not Before: Jun 12 16:00:29 2025 GMT
            Not After : Jun 13 16:00:29 2025 GMT
        Subject: CN=4e4ffd91ce13c06a314fe43bff5ff1ddff0114bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:40:5b:b0:7c:38:e5:7f:f0:78:de:be:07:5e:
                    86:f1:5f:e3:09:d4:19:fe:2a:4a:a3:ce:1c:7c:f4:
                    9c:8d:c1:c0:17:19:09:0b:2c:50:2a:90:96:92:b9:
                    94:b8:9d:6d:1b:bf:59:85:4d:25:f6:99:b0:f8:af:
                    21:6c:65:04:ba:20:e2:b0:fa:6d:15:62:e4:12:c2:
                    6b:b5:94:38:46:59:13:d2:2f:c9:34:c4:a6:41:e7:
                    68:2a:4f:ce:2d:f5:02:4d:18:1b:85:47:13:b2:43:
                    2a:20:1d:bc:e5:8d:a1:be:bb:50:18:59:ec:23:53:
                    47:a6:dd:81:9f:7a:b8:2d:67:68:89:fd:ab:15:2c:
                    bd:eb:84:3c:6f:50:75:7e:f1:a7:2e:9a:b4:e3:61:
                    92:8d:5e:d6:0d:83:de:4d:53:fd:d9:cc:f9:de:cd:
                    e4:fd:b1:bd:ee:6d:8d:1c:d1:28:fa:e5:39:47:40:
                    a8:3e:12:90:84:74:98:3b:b1:01:17:c1:c5:bb:38:
                    6f:b7:8f:a8:8f:21:00:df:8c:d6:ef:41:dd:51:fe:
                    23:db:ef:db:08:99:cd:ec:38:f2:e3:2f:65:31:8f:
                    fd:e0:06:a3:1b:3d:4f:fd:96:da:16:92:9a:b7:f1:
                    93:44:4b:91:31:ee:4f:61:a4:00:43:e1:83:05:61:
                    2f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:4F:FD:91:CE:13:C0:6A:31:4F:E4:3B:FF:5F:F1:DD:FF:01:14:BB
            X509v3 Authority Key Identifier:
                keyid:8B:A8:24:95:D6:83:B0:8C:88:1A:81:8C:D0:1F:A4:2F:FF:6F:F6:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6gkldaDsIyIGoGM0B-kL_9v9tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:3f:03:bf:8c:29:c5:ae:fb:b3:52:37:d3:a7:18:c4:b2:46:
         70:0e:c7:db:dd:d6:6a:62:c8:05:4f:59:45:57:a0:b6:a4:6c:
         e7:96:fa:09:3f:c9:b9:2e:1b:5b:de:20:22:1d:f4:86:a5:ef:
         70:90:ba:e6:3f:47:c5:da:09:e6:03:44:b6:19:77:44:fa:43:
         3d:0a:14:af:4c:0f:f3:6c:f7:3d:bb:b3:85:58:0c:9f:33:9e:
         c3:66:4f:98:1e:38:77:f5:b9:80:2f:87:55:bc:44:ac:83:cd:
         ae:c0:6a:ac:54:30:65:9a:90:00:b9:2f:1f:ab:c8:03:d5:52:
         86:44:3e:9a:c1:d0:72:89:f0:ea:e4:e3:f3:3c:11:d6:ce:95:
         6f:68:4c:2e:b4:5b:47:22:bc:b5:46:17:42:ea:b4:81:30:ee:
         c2:ec:f4:b1:a8:e8:1b:f9:fd:d2:ba:a6:a1:6e:e2:ce:ae:ba:
         52:58:84:5d:df:f5:7c:fb:54:ae:c1:5b:8a:51:19:60:5a:0f:
         3b:12:e7:7c:66:b3:dd:48:21:19:e0:a6:c8:44:9f:7b:e1:83:
         5a:65:3c:3b:b4:36:e5:aa:78:6a:d0:a1:23:c1:e0:d7:41:70:
         b9:5e:d7:8d:4c:ab:0f:1b:18:17:5b:c1:6b:ff:e0:2a:09:3a:
         c8:b6:ba:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:45:42 2025 by rpki-client