Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
File:                     6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft (raw, json)
Hash identifier:          7xJtV47EdS/8P1cL7wFIAEJXuKK6OzXUoYtXUJc9PU4=
Subject key identifier:   15:F8:9F:59:72:67:7D:BE:B7:16:34:F9:6A:00:54:8D:B8:42:16:5D
Authority key identifier: E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD
Certificate issuer:       /CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
Certificate serial:       01987F793577EDF4FBB29AD5941BE0694C3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
Manifest number:          0C74
Signing time:             Wed 06 Aug 2025 13:01:46 +0000
Manifest this update:     Wed 06 Aug 2025 13:01:46 +0000
Manifest next update:     Thu 07 Aug 2025 13:01:46 +0000
Files and hashes:         1: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl (hash: zWmG5HiEUvIHf4JJA8Fl1xp19a7ah6BhWh5kUpKzYz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 13:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:79:35:77:ed:f4:fb:b2:9a:d5:94:1b:e0:69:4c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
        Validity
            Not Before: Aug  6 13:01:46 2025 GMT
            Not After : Aug  7 13:01:46 2025 GMT
        Subject: CN=15f89f5972677dbeb71634f96a00548db842165d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7b:0d:4a:4e:f4:95:ff:bb:c8:6f:f1:e1:3e:
                    41:a2:04:b6:72:f7:ac:a9:62:8c:93:b2:00:45:19:
                    7b:cd:cf:7c:73:15:02:65:08:5b:ad:83:bf:19:61:
                    78:d1:8e:89:94:29:de:cf:39:3a:aa:7f:23:c1:77:
                    33:db:c0:ef:42:ee:60:cf:86:59:d1:69:02:7b:a9:
                    28:fe:36:fd:fa:16:af:4d:28:40:d5:e0:c6:95:62:
                    d6:90:7a:db:48:72:7c:cb:d3:a8:35:da:4f:e8:8f:
                    f3:e4:46:a2:ef:91:d2:18:aa:c9:6a:64:a6:7a:29:
                    cb:43:65:8e:7a:d2:f7:f0:82:ea:3a:24:45:17:88:
                    82:2b:f2:ed:bd:9f:13:2b:07:8e:73:8c:63:2a:ee:
                    3c:63:9e:b1:eb:15:4e:5d:37:05:a0:0b:f7:33:a9:
                    35:b4:95:74:78:06:76:fe:b9:19:ab:f5:00:b7:0c:
                    35:f4:6b:67:33:f4:49:16:fc:60:3c:42:f2:3f:ca:
                    70:5c:65:6c:45:d0:a3:99:03:ce:9d:53:32:59:77:
                    f5:43:eb:57:1a:1b:ca:54:a3:df:af:20:c0:db:6b:
                    9c:d5:29:37:9e:ad:92:f0:ac:7f:bf:b1:1a:eb:bf:
                    1a:e0:ec:e9:c0:e1:8b:2b:71:fd:bd:ab:c8:92:a6:
                    2b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F8:9F:59:72:67:7D:BE:B7:16:34:F9:6A:00:54:8D:B8:42:16:5D
            X509v3 Authority Key Identifier:
                keyid:E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:3d:8f:f0:d3:53:b6:4b:3b:37:0b:d7:07:36:d4:ea:cb:56:
         88:db:d9:5a:c0:e0:60:45:d6:15:1c:ed:d0:ac:17:5a:f1:f5:
         02:2c:00:0f:03:84:0c:90:91:90:39:55:04:7c:a5:51:96:ea:
         e6:d7:7b:45:17:8b:37:21:f2:64:13:d4:92:cb:58:fe:f8:eb:
         47:87:2a:41:32:ec:e1:13:f3:04:3c:c3:42:ed:af:28:32:ef:
         1b:fe:4b:19:47:28:71:2d:c8:1d:40:0a:8e:2a:df:51:6d:2a:
         72:3c:e9:f2:3e:77:0c:b9:bc:7d:aa:a7:96:30:fe:71:0f:d2:
         58:2e:25:4c:be:10:36:d2:29:30:40:92:1b:2f:df:a7:b4:7d:
         fe:6c:29:c5:82:a4:9c:8c:e6:08:75:8c:ba:ba:da:3d:bb:87:
         e5:66:59:8a:5a:3b:ec:92:28:02:bb:ae:cc:99:d2:5b:72:ca:
         b9:71:b7:e0:28:46:2e:de:1d:bd:7b:ba:39:cf:38:be:39:d8:
         f4:a0:77:fa:79:c0:10:90:aa:d8:be:76:cf:a1:78:28:ee:d0:
         a5:60:8f:7d:43:f1:2c:b7:83:ec:4f:36:bd:40:f3:20:5b:78:
         eb:23:5b:9f:26:b4:4b:f1:6b:2a:6a:96:65:7a:0a:69:94:ce:
         9e:5e:32:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:28:53 2025 by rpki-client