Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
File:                     F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft (raw, json)
Hash identifier:          aWH2EtZreXdkhE2HEYg9JK4ysedntHf49A/gG9XVTaM=
Subject key identifier:   6C:DA:44:9E:AA:4A:AE:2C:82:F1:61:8D:61:1D:36:69:F0:7B:B5:90
Authority key identifier: 17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5
Certificate issuer:       /CN=17a16657a2497737ca03621cc668d20c762136d5
Certificate serial:       0197700769869D5E7CD4664392A602F7685D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
Manifest number:          0D32
Signing time:             Sat 14 Jun 2025 20:00:23 +0000
Manifest this update:     Sat 14 Jun 2025 20:00:23 +0000
Manifest next update:     Sun 15 Jun 2025 20:00:23 +0000
Files and hashes:         1: F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl (hash: FIQ/6wIRY8SCUbmdJmvb1yZ/OSTUJXfmBopKRELzsYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:07:69:86:9d:5e:7c:d4:66:43:92:a6:02:f7:68:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17a16657a2497737ca03621cc668d20c762136d5
        Validity
            Not Before: Jun 14 20:00:23 2025 GMT
            Not After : Jun 15 20:00:23 2025 GMT
        Subject: CN=6cda449eaa4aae2c82f1618d611d3669f07bb590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8e:d1:72:7e:47:d1:e2:5d:65:d2:16:7d:f9:
                    ec:fe:55:cb:46:e1:25:91:0b:9f:8d:d2:72:83:54:
                    5b:a6:c3:e3:53:63:33:11:00:8f:ac:12:ba:87:a9:
                    19:e6:54:e0:8b:98:a7:7a:11:eb:29:8d:1d:46:16:
                    6f:a2:1f:31:50:49:96:37:91:e5:05:f9:c2:4c:56:
                    9a:a8:1c:8b:40:95:89:21:1f:85:9a:41:dc:fb:bd:
                    66:29:28:22:6f:88:78:9b:80:ce:45:5d:30:f7:6a:
                    63:d0:8f:fa:a3:4a:22:44:8c:9b:dd:1a:9d:2a:da:
                    13:8b:80:f3:fe:b0:39:91:1f:5f:e5:c7:c7:bb:46:
                    82:ee:9f:39:91:ba:1a:60:1f:26:d1:5a:31:bf:21:
                    1b:f0:08:93:eb:9d:79:44:1c:00:cc:37:79:51:03:
                    1f:a1:a8:46:f2:fa:f0:d0:16:93:97:52:31:59:2d:
                    85:1c:f9:bf:28:c9:18:f2:21:d1:a3:1d:09:16:85:
                    37:e2:9c:44:47:d2:16:65:65:2b:56:fe:18:45:6b:
                    bb:f9:8a:a9:54:f1:0e:80:eb:d3:a3:e4:1c:7e:4e:
                    1c:7a:64:8a:f9:6c:c8:64:ed:ee:4f:a9:b5:3d:f4:
                    d3:a5:00:e0:ad:3f:60:5d:29:90:53:1f:59:cd:51:
                    3b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DA:44:9E:AA:4A:AE:2C:82:F1:61:8D:61:1D:36:69:F0:7B:B5:90
            X509v3 Authority Key Identifier:
                keyid:17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:97:84:e7:4f:9b:d9:b0:62:70:9b:2b:1a:4d:6d:cd:7b:bf:
         9d:2b:b3:be:8d:5e:8f:aa:14:f2:42:01:3b:c1:88:7c:cc:cb:
         5c:79:da:17:fa:66:de:8c:ed:95:30:c3:9b:bb:31:46:3b:94:
         04:a4:59:88:4c:49:ab:a6:5f:7f:24:98:ea:3d:2d:61:fb:8b:
         76:00:ff:0c:5d:43:af:3b:aa:72:d9:fa:60:3d:cf:3f:d6:d5:
         0c:0a:27:38:24:d0:46:fb:8e:f2:a8:c7:fe:b0:72:06:d1:c1:
         ff:05:58:56:43:ed:fc:a0:6c:52:e7:2f:24:b3:25:1b:13:9b:
         93:0d:9e:99:6d:78:3b:14:ff:45:3f:c7:fe:bf:fc:aa:72:16:
         c9:e7:84:87:0f:c8:9f:3d:52:8b:83:de:aa:f4:a3:cd:24:af:
         6e:24:f7:69:fc:91:6b:48:f8:24:4b:d1:b3:78:f0:b4:52:57:
         ea:79:fa:3e:0a:ab:82:49:be:f0:6f:24:96:6d:b9:4f:f7:26:
         31:f6:ab:ef:f1:c9:a4:cc:27:bb:2a:61:a8:e0:cb:90:11:71:
         30:3b:8c:46:6d:fc:53:64:b0:52:10:12:7c:37:ba:9e:c1:95:
         d6:de:4f:6d:20:5d:2c:0a:de:a6:1c:d5:cc:01:47:fa:40:fa:
         c4:a0:2c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:59:00 2025 by rpki-client