Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
File:                     6RvExCxQPaC3-K8W9-5LVHH_DgE.mft (raw, json)
Hash identifier:          8Q0GeWXVPcf9vAcVONJVnRt0mMTP9HocefK9TLe5Lec=
Subject key identifier:   DB:A2:10:61:29:92:B9:F1:B7:BE:05:9D:28:82:6B:88:8E:21:F2:22
Authority key identifier: E9:1B:C4:C4:2C:50:3D:A0:B7:F8:AF:16:F7:EE:4B:54:71:FF:0E:01
Certificate issuer:       /CN=e91bc4c42c503da0b7f8af16f7ee4b5471ff0e01
Certificate serial:       01976D3D7202532502CA7C14D4F91D6AA39F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6RvExCxQPaC3-K8W9-5LVHH_DgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
Manifest number:          0D
Signing time:             Sat 14 Jun 2025 07:00:32 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:32 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:32 +0000
Files and hashes:         1: 6RvExCxQPaC3-K8W9-5LVHH_DgE.crl (hash: mCbsWOQlWM2MZqYdPpnrLo6ZFJ8WXlpHtgmoMfcM9Mk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6RvExCxQPaC3-K8W9-5LVHH_DgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:72:02:53:25:02:ca:7c:14:d4:f9:1d:6a:a3:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e91bc4c42c503da0b7f8af16f7ee4b5471ff0e01
        Validity
            Not Before: Jun 14 07:00:32 2025 GMT
            Not After : Jun 15 07:00:32 2025 GMT
        Subject: CN=dba210612992b9f1b7be059d28826b888e21f222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:78:f2:2c:4c:9c:f4:72:39:8f:54:df:b6:f1:
                    90:36:e7:8b:e2:f0:1f:c8:5c:7e:44:fc:81:3d:9c:
                    23:5a:ab:1d:59:16:ce:41:b0:91:33:ee:b4:f1:92:
                    36:fd:15:e7:12:2b:80:25:e8:fa:5a:f6:0b:4c:e5:
                    93:2d:24:df:96:54:81:f8:c4:c0:eb:08:15:9a:61:
                    f3:c1:0e:53:a9:d6:9d:11:c1:ce:8a:d5:ff:a9:ef:
                    dc:00:17:4c:44:21:2c:f1:f8:4b:e4:37:43:ba:17:
                    1a:3b:7f:2e:bf:43:dc:48:47:71:df:8c:68:8e:b5:
                    60:87:04:43:53:39:e4:b0:51:57:4b:3c:ba:b1:98:
                    cd:d3:1c:e0:16:02:0c:64:e0:db:3d:71:92:5e:8a:
                    10:57:96:e5:97:bc:d5:c7:e0:dc:4d:85:fe:1d:25:
                    f6:52:b1:4d:3a:cb:9d:53:5f:86:9c:f4:06:59:a0:
                    8a:39:23:10:a2:5e:11:a7:50:40:03:3f:ef:67:de:
                    96:11:cb:e4:8c:53:14:ab:0d:24:a4:15:30:d2:5e:
                    87:22:1e:4b:9e:61:06:4e:fc:0b:f4:94:2f:ec:ef:
                    35:f3:98:dd:ad:0c:4a:b3:4f:d1:69:ab:49:de:ee:
                    7a:48:dc:94:b1:65:d7:44:04:1d:59:90:5b:dd:21:
                    d0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A2:10:61:29:92:B9:F1:B7:BE:05:9D:28:82:6B:88:8E:21:F2:22
            X509v3 Authority Key Identifier:
                keyid:E9:1B:C4:C4:2C:50:3D:A0:B7:F8:AF:16:F7:EE:4B:54:71:FF:0E:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RvExCxQPaC3-K8W9-5LVHH_DgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:dd:00:cb:af:0d:57:4e:a0:2e:9c:34:09:f0:4f:b8:90:d9:
         85:88:5a:74:dc:76:a9:23:45:07:93:02:e3:3a:4d:9c:30:13:
         c3:98:f5:c8:55:67:ed:8a:1a:fd:2f:3d:0f:5e:28:22:ca:fb:
         8e:da:cf:4a:70:e8:b0:0d:59:da:0b:ef:e4:6b:cc:85:65:b3:
         9f:72:e9:1e:b9:fd:7e:d3:d7:1d:9f:e7:7f:a9:b8:61:a4:6e:
         c8:5c:aa:08:f2:2d:a7:19:ab:0c:a2:6f:d6:5f:81:34:b4:62:
         62:27:f6:ea:95:a5:5c:65:b8:9d:04:76:8c:96:51:aa:3e:31:
         dd:2c:2d:c3:4c:c9:7b:6e:59:ce:ea:18:b9:e8:94:73:13:df:
         ad:d0:76:98:4e:8e:65:56:e9:ca:c8:1f:1a:c5:0f:8c:d0:7c:
         a5:36:8f:44:80:3b:19:0e:aa:68:e9:39:1f:b1:d0:c3:f2:9b:
         3b:95:d2:91:31:99:24:bd:e6:8c:78:32:98:51:77:60:01:0d:
         e6:25:4a:77:75:c6:a8:13:0f:93:ae:20:6b:1a:78:0b:61:fa:
         34:a5:05:1f:6e:89:43:8a:2f:de:90:ab:64:0a:55:87:be:32:
         0f:da:83:17:31:9d:53:12:70:e6:a2:54:e3:83:f3:68:0a:6c:
         0c:f4:3e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:17:47 2025 by rpki-client