Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
File:                     Rg7_G6LS91kqRNITPSB7KT4kGsI.mft (raw, json)
Hash identifier:          GCLM/U6zNTIHELcewDimEw3g5iP4TmeHSkelnDqyKYc=
Subject key identifier:   6E:E7:2D:00:41:B0:7B:99:D5:0B:E1:C0:68:12:81:6F:F9:CF:6C:D4
Authority key identifier: 46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2
Certificate issuer:       /CN=460eff1ba2d2f7592a44d2133d207b293e241ac2
Certificate serial:       01977008152E6EF660992436F2D403FF8C4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
Manifest number:          0A97
Signing time:             Sat 14 Jun 2025 20:01:07 +0000
Manifest this update:     Sat 14 Jun 2025 20:01:07 +0000
Manifest next update:     Sun 15 Jun 2025 20:01:07 +0000
Files and hashes:         1: Rg7_G6LS91kqRNITPSB7KT4kGsI.crl (hash: MLoGfbab1ntWSRpVHHNi9uJRXBsMkDgGQNjZvNG/lhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:08:15:2e:6e:f6:60:99:24:36:f2:d4:03:ff:8c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460eff1ba2d2f7592a44d2133d207b293e241ac2
        Validity
            Not Before: Jun 14 20:01:07 2025 GMT
            Not After : Jun 15 20:01:07 2025 GMT
        Subject: CN=6ee72d0041b07b99d50be1c06812816ff9cf6cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ec:01:52:c2:25:2d:06:d2:ca:85:54:97:8c:
                    c7:96:96:e4:4d:a0:bd:2f:a7:49:2b:98:2c:05:73:
                    72:5c:7c:6b:73:48:4a:57:1f:a3:2e:7c:0c:30:71:
                    37:b1:ee:b1:7e:48:b6:e5:cc:90:29:fe:02:0d:21:
                    ee:05:9e:71:b0:83:4b:6a:b2:2e:05:2c:6e:3e:06:
                    07:ce:07:62:6f:c7:3f:11:94:a6:a0:b0:61:af:24:
                    53:14:af:04:e9:24:bb:90:fd:77:50:9d:0c:a8:2c:
                    a3:32:57:26:50:ac:73:ae:70:49:3f:ce:67:ff:21:
                    a4:7a:09:fb:df:bc:68:1a:1a:26:2e:ed:5b:01:bd:
                    fd:cb:e1:f6:ec:3f:e5:5b:5a:6b:11:ec:d3:3a:7e:
                    89:78:9b:9f:d8:26:bb:13:ca:f5:59:dd:37:7b:0e:
                    4a:70:37:8c:8c:5c:23:75:34:e8:51:50:48:4d:6e:
                    0f:c7:15:ff:ca:4e:0f:3b:6e:65:17:67:96:81:e0:
                    90:4b:ed:2a:41:6e:e4:f0:9d:aa:33:e1:5a:71:c5:
                    63:59:3d:3c:93:18:2e:d2:9b:79:08:b4:ea:bd:48:
                    7c:12:8f:06:14:89:6a:99:fc:7f:6c:53:9e:43:51:
                    80:09:a2:aa:c6:1a:dc:09:6f:53:12:07:46:b9:df:
                    25:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E7:2D:00:41:B0:7B:99:D5:0B:E1:C0:68:12:81:6F:F9:CF:6C:D4
            X509v3 Authority Key Identifier:
                keyid:46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:be:56:a9:4c:57:0d:f0:85:2f:a5:fa:32:8b:41:db:3f:08:
         3c:95:d1:dc:3d:b6:c3:bd:d6:dd:60:31:95:88:bb:94:47:78:
         0f:e4:7a:6e:df:7d:74:81:4d:e5:f9:97:91:53:94:12:7c:6f:
         f0:96:a0:ce:4e:2d:06:76:06:08:d9:0d:a8:3e:bc:7f:80:56:
         c9:39:8c:97:4e:7e:4c:52:16:83:77:bf:5c:96:18:56:68:2b:
         bc:7a:2b:3e:9d:90:b2:57:d9:18:9f:4c:76:f5:18:fb:35:29:
         a9:05:01:78:1c:01:a5:51:00:61:e1:b8:fa:e8:f2:47:6b:1f:
         8c:0e:f1:f5:d0:ba:74:3d:27:ff:7e:03:35:e0:b3:fd:94:50:
         c4:05:c5:88:a6:16:63:cb:2c:b4:7c:6c:1b:f7:e1:91:cb:d9:
         96:14:d3:22:57:3c:1e:06:9d:67:b4:d1:0d:4f:f6:46:e2:6f:
         33:ea:75:63:d4:f2:12:70:3c:99:d3:e8:b6:45:64:11:5f:7d:
         bb:77:1c:dd:9a:74:02:61:4e:c5:a5:bf:96:fa:7e:1b:63:85:
         90:f1:e3:03:bc:96:7d:e9:c5:84:7c:c7:77:4d:fd:d2:47:58:
         d2:40:2c:19:8e:a9:ed:1d:91:8f:1c:19:14:20:98:ec:9e:31:
         a5:71:c7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:06:01 2025 by rpki-client