Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
File:                     6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft (raw, json)
Hash identifier:          vqN4Vy8vHY+D8351WSOgqPMCJfkUpHDAiyZZ2qxKSgo=
Subject key identifier:   1A:8A:5F:0F:EA:EF:F2:D0:82:E5:88:64:50:0D:CB:24:19:08:C8:E8
Authority key identifier: E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD
Certificate issuer:       /CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
Certificate serial:       0197711A1828A993A763FC22465355F69EEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
Manifest number:          0BE8
Signing time:             Sun 15 Jun 2025 01:00:24 +0000
Manifest this update:     Sun 15 Jun 2025 01:00:24 +0000
Manifest next update:     Mon 16 Jun 2025 01:00:24 +0000
Files and hashes:         1: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl (hash: 13aZPtJqu3eNyFRPUua3Ixiti+g24xz19Z8Yld5wNck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1a:18:28:a9:93:a7:63:fc:22:46:53:55:f6:9e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
        Validity
            Not Before: Jun 15 01:00:24 2025 GMT
            Not After : Jun 16 01:00:24 2025 GMT
        Subject: CN=1a8a5f0feaeff2d082e58864500dcb241908c8e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bf:a1:49:5d:a9:49:4c:bc:a9:06:36:4e:05:
                    13:a7:7f:32:8a:49:42:f3:40:ac:d8:b1:28:44:f3:
                    04:9e:8c:a8:e2:e7:79:34:99:10:17:64:c4:2b:e5:
                    e5:eb:bc:d3:e2:8c:18:28:3a:8e:c4:2a:cf:0d:ba:
                    c9:0c:e4:a3:b9:7e:31:e1:21:4d:30:1d:16:10:1a:
                    6d:d5:4a:d5:98:c9:f2:c7:41:d2:84:cc:1a:d2:b1:
                    be:f2:b3:6e:aa:59:35:c2:1b:73:bf:c9:ba:f9:9a:
                    75:68:55:27:37:ec:c6:1b:14:d5:22:f7:98:6c:7e:
                    c7:6f:02:3a:53:b7:7b:dd:3c:9b:fb:89:c5:0d:4e:
                    62:24:e9:aa:b5:86:5c:ef:79:3c:c3:02:3a:75:96:
                    80:f0:90:66:9e:e3:a9:47:80:8b:63:96:0b:4d:25:
                    c2:d7:5a:07:df:e8:53:0f:ee:68:8d:e8:12:08:ec:
                    e3:25:c1:51:9d:ae:de:1b:08:d6:c9:83:69:42:21:
                    be:4b:3f:4a:55:3e:eb:86:73:60:69:69:0c:11:56:
                    60:f8:41:29:b1:9d:c0:2e:ab:e1:56:37:ef:bd:64:
                    1d:d2:0e:ea:3f:5d:a7:09:87:a8:7c:6a:1d:2b:a9:
                    4d:f6:74:45:94:81:13:af:e7:ac:9d:87:d1:53:f5:
                    be:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8A:5F:0F:EA:EF:F2:D0:82:E5:88:64:50:0D:CB:24:19:08:C8:E8
            X509v3 Authority Key Identifier:
                keyid:E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:e9:cb:56:04:dc:9a:73:d8:0f:d8:67:3e:df:e4:32:f0:ca:
         90:77:67:4e:6f:82:02:37:dd:c5:d2:f2:d0:23:bb:df:f8:62:
         93:6a:ec:95:08:bc:19:c8:b6:89:b6:5f:bf:c7:96:2a:3e:8b:
         03:19:f9:5f:dd:82:ca:cd:36:3f:1e:bb:d9:fb:4a:94:c8:77:
         e8:5d:20:cf:da:69:29:9c:cc:3f:56:58:31:1f:6e:b7:78:1f:
         9a:cd:d4:47:4a:1b:4a:71:cc:13:a2:03:1a:59:70:5f:84:ab:
         14:20:97:ad:86:5e:ad:83:05:44:22:e5:16:dd:de:88:90:c2:
         47:d0:c0:98:24:5e:7c:de:ea:fc:3f:b1:e4:d1:b3:23:88:67:
         03:9e:c5:9d:0b:42:3d:13:ce:f7:4d:74:39:36:38:13:0a:3c:
         07:5e:ed:a5:23:0c:a5:75:ef:7a:7b:45:f2:bd:4d:31:7e:82:
         3e:a0:03:42:c6:26:c8:d7:ec:02:62:91:9a:b9:66:f2:b1:ee:
         59:32:96:26:1e:25:2f:5c:59:aa:bd:df:de:81:f8:72:27:91:
         be:e5:f8:aa:19:73:54:1f:3c:a2:c8:aa:9f:77:0b:57:17:0f:
         80:f3:93:b7:4f:e8:63:67:44:23:ab:8d:b5:8f:f3:a3:80:2f:
         c8:77:e5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:09:16 2025 by rpki-client