Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
File:                     p6YlNTs6w-H5XJYlGRWNsSINCo4.mft (raw, json)
Hash identifier:          486mV0GVp+Z7RX7Cy0r2k0Nm9TGHKWKiBmVtQ3PgzG4=
Subject key identifier:   80:0D:24:47:89:87:8E:A4:24:45:1D:A8:48:3E:39:E2:18:AA:B2:6D
Authority key identifier: A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
Certificate issuer:       /CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Certificate serial:       01974A7B7C5273A3C578E51F18818B080957
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
Manifest number:          09E4
Signing time:             Sat 07 Jun 2025 13:01:36 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:36 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:36 +0000
Files and hashes:         1: p6YlNTs6w-H5XJYlGRWNsSINCo4.crl (hash: N0d/8mu58cAvhWkoJfGB+iQqtAhoKfi+WrWr7zklbaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:7c:52:73:a3:c5:78:e5:1f:18:81:8b:08:09:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
        Validity
            Not Before: Jun  7 13:01:36 2025 GMT
            Not After : Jun  8 13:01:36 2025 GMT
        Subject: CN=800d244789878ea424451da8483e39e218aab26d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:40:46:d6:d4:fd:7b:d2:a1:0a:62:37:45:46:
                    2c:18:bb:17:fb:34:e5:27:46:0a:0c:6d:8d:7e:26:
                    73:c4:31:49:d3:78:f5:75:02:35:1a:9f:6f:e4:94:
                    5a:eb:fa:dd:63:7a:b9:5a:0b:dc:1c:2f:3c:65:68:
                    7c:16:5f:07:75:a5:1c:e9:dd:95:0a:a2:34:de:14:
                    be:60:c2:87:9f:d8:9c:a2:65:28:42:e4:fa:bc:68:
                    8a:b1:24:9b:11:b7:05:71:a6:d7:9e:79:ad:64:08:
                    7a:77:13:9d:f9:0e:8b:18:46:1d:79:6c:af:93:57:
                    de:d2:ff:84:05:5d:48:18:37:6d:1e:ed:4e:c4:58:
                    48:55:7a:b2:22:9c:89:d3:0e:63:c7:3b:2d:98:64:
                    6d:0c:ed:92:ec:f5:d5:27:3a:e3:0a:93:46:44:08:
                    88:53:10:52:d4:67:c5:47:f6:79:06:8d:ad:97:8f:
                    1c:4c:d3:99:87:62:66:36:1d:a9:52:10:ba:9a:fb:
                    af:d0:dc:dc:36:11:7b:02:60:17:97:26:c5:d2:33:
                    a3:0d:d9:1d:3d:ea:ca:fa:7d:a2:d5:da:49:e2:19:
                    a0:d8:77:d1:c9:27:a8:cc:9b:01:ee:ae:49:4b:dd:
                    f3:76:2b:6c:06:fa:ae:72:10:3e:45:cf:ec:d8:8a:
                    8b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0D:24:47:89:87:8E:A4:24:45:1D:A8:48:3E:39:E2:18:AA:B2:6D
            X509v3 Authority Key Identifier:
                keyid:A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:86:98:26:f3:38:e5:25:cd:dd:66:09:b7:f4:4d:92:e4:63:
         d5:3b:35:5b:78:d6:7a:55:a6:e9:6d:95:9c:40:9d:c5:3e:96:
         8b:53:4f:d9:b7:34:c0:6e:f8:6e:c5:e9:8f:ec:70:e6:63:c8:
         ac:38:cc:bf:37:e5:94:0c:66:e1:7a:15:02:35:ef:3e:9a:eb:
         17:76:fb:d4:96:b3:ad:11:f6:cf:fe:4c:09:32:0c:99:3d:dd:
         d7:33:61:07:c9:b6:1f:44:3c:46:d1:34:d6:75:f1:ec:5d:1f:
         5c:b4:33:f5:f4:73:a4:9e:d4:4a:d3:2f:4f:d1:d0:a5:65:cd:
         bb:b5:bb:3e:27:a6:75:04:a1:0e:13:2c:5a:5e:2c:fd:6f:38:
         40:0a:5d:99:fe:32:64:a8:2b:18:dc:af:f3:97:22:50:a3:e4:
         f1:51:1e:ec:51:f6:62:92:b0:dc:b7:02:35:52:d8:e2:3f:d6:
         11:86:01:85:9d:04:50:7f:9e:4c:9d:46:e9:d4:e7:bb:73:2a:
         d8:ed:06:c9:19:85:8e:00:01:e6:49:94:db:03:35:54:61:99:
         9d:3a:b4:66:21:8e:64:9d:5c:2e:8a:5d:c4:90:85:fa:13:7c:
         dc:da:e9:06:88:a1:e0:98:f2:a0:02:42:34:62:0c:4b:51:46:
         10:6f:5d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:31 2025 by rpki-client