Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
File:                     6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft (raw, json)
Hash identifier:          zLqLhVfrQ8Mou/+dMqNwn0IuJBsT6wxXSuFC5d4RHtM=
Subject key identifier:   93:5D:43:64:B9:6F:03:7A:C5:13:1B:8F:F2:D4:60:70:DA:6D:89:AB
Authority key identifier: E8:2B:EF:EC:70:6E:ED:27:7A:9D:98:F7:0B:B3:FB:66:84:9B:F2:96
Certificate issuer:       /CN=e82befec706eed277a9d98f70bb3fb66849bf296
Certificate serial:       01977BD4C6CDC617B0A74B97F46D079DB3DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
Manifest number:          0EAD
Signing time:             Tue 17 Jun 2025 03:00:31 +0000
Manifest this update:     Tue 17 Jun 2025 03:00:31 +0000
Manifest next update:     Wed 18 Jun 2025 03:00:31 +0000
Files and hashes:         1: 6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl (hash: Bep1OAiYmZ6MCCB0CtV8tBKxvgWzIlDsk0VuS4fmMFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 03:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7b:d4:c6:cd:c6:17:b0:a7:4b:97:f4:6d:07:9d:b3:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82befec706eed277a9d98f70bb3fb66849bf296
        Validity
            Not Before: Jun 17 03:00:31 2025 GMT
            Not After : Jun 18 03:00:31 2025 GMT
        Subject: CN=935d4364b96f037ac5131b8ff2d46070da6d89ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:14:d7:45:cb:f2:ca:bd:eb:8f:4c:df:1f:0d:
                    5b:e3:f1:14:c1:82:f7:ff:47:a7:16:e3:19:11:39:
                    00:38:5d:de:f9:a9:66:df:20:d6:e8:32:02:6b:df:
                    d0:38:76:02:31:88:a4:ca:a0:c9:b5:83:95:b5:3c:
                    3b:06:7e:1a:d1:8e:09:67:39:9f:c4:39:8b:05:cc:
                    a4:26:78:53:40:28:89:00:fb:ce:b3:dd:41:48:dc:
                    cd:f7:71:14:f8:cc:bd:c5:43:05:48:81:d6:37:72:
                    37:7c:22:da:08:7b:0b:fc:36:8b:6f:f0:bf:40:aa:
                    f4:4f:b7:ea:cc:97:0c:b4:6a:31:c4:d5:5c:2a:9a:
                    24:be:4c:9d:65:12:58:8c:92:76:62:e9:d8:36:8e:
                    0a:fb:9e:17:b8:1a:f4:10:7e:ac:4e:b0:77:c7:d1:
                    9b:98:a9:ee:b5:21:55:ba:75:1d:f9:bd:da:26:58:
                    e1:df:fe:93:24:73:9c:fd:29:fc:87:42:f7:07:9e:
                    ce:49:2e:3c:1a:d9:73:5a:7c:ad:b5:a4:02:8f:d5:
                    5c:53:ce:04:95:54:1b:13:cb:5a:37:9a:44:68:d0:
                    5d:d5:86:4c:75:3f:d1:07:4f:c3:e5:78:14:6b:36:
                    31:e9:cc:b5:89:4a:ef:de:d5:ca:cd:5e:6c:08:4b:
                    0e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5D:43:64:B9:6F:03:7A:C5:13:1B:8F:F2:D4:60:70:DA:6D:89:AB
            X509v3 Authority Key Identifier:
                keyid:E8:2B:EF:EC:70:6E:ED:27:7A:9D:98:F7:0B:B3:FB:66:84:9B:F2:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:0a:8b:4f:30:0b:49:78:1c:17:f6:92:27:76:7b:65:26:69:
         7a:8c:61:21:a8:43:0c:be:69:7a:bb:38:32:2f:ee:e8:6e:0e:
         70:9c:5e:d8:27:a8:a4:44:f9:ae:3b:a6:6b:a8:d6:a8:03:08:
         69:2e:4c:e7:ac:4a:1b:37:91:6a:40:32:71:31:e5:16:39:2e:
         01:4d:c2:01:94:a3:59:d3:24:b8:86:c8:76:c3:a6:81:30:c3:
         a2:01:73:ed:c1:75:aa:64:1c:42:43:5b:6f:db:7a:95:77:a3:
         d4:1d:99:de:74:6f:ac:32:2d:01:1a:de:86:00:0a:be:2d:17:
         39:ce:61:92:af:f3:3b:fe:f3:6d:99:b4:d2:99:02:f7:ee:bd:
         aa:15:b5:5c:7d:6f:a8:21:46:dc:0b:10:ae:ee:1b:82:39:43:
         8c:b7:56:23:ab:71:f4:83:05:26:9b:2d:f2:4a:c5:b5:13:e9:
         45:fe:37:33:ef:f3:57:d5:64:ce:0f:61:c6:7c:0a:5f:df:e1:
         66:cf:3f:1d:4f:a3:9b:ff:d4:3c:0e:07:4e:5a:b3:e8:27:fd:
         78:43:c7:29:dc:bb:1f:e3:03:da:c7:36:dd:73:4c:20:f6:37:
         86:cf:a9:e8:6d:95:43:b2:95:48:d2:9f:4a:cb:c4:4f:ba:52:
         1f:4d:37:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:47:32 2025 by rpki-client