Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft
File:                     b_eJEzFFDchig6CJvZRw5pw37RI.mft (raw, json)
Hash identifier:          IXs2TLSobg9s+ybsdxLG2AY9tP0py8k3fSaEe90/goo=
Subject key identifier:   83:D0:73:13:97:6E:82:3C:60:DC:AB:85:C1:48:27:DF:E1:3D:7E:2B
Authority key identifier: 6F:F7:89:13:31:45:0D:C8:62:83:A0:89:BD:94:70:E6:9C:37:ED:12
Certificate issuer:       /CN=6ff7891331450dc86283a089bd9470e69c37ed12
Certificate serial:       019873E3353100080E30A2988889391F9D88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_eJEzFFDchig6CJvZRw5pw37RI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft
Manifest number:          01E6
Signing time:             Mon 04 Aug 2025 07:02:06 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:06 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:06 +0000
Files and hashes:         1: b_eJEzFFDchig6CJvZRw5pw37RI.crl (hash: o9TpYs7TZwKinoWHUipI/WOdRBNtFsBDQ41yMxkOblc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_eJEzFFDchig6CJvZRw5pw37RI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:35:31:00:08:0e:30:a2:98:88:89:39:1f:9d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ff7891331450dc86283a089bd9470e69c37ed12
        Validity
            Not Before: Aug  4 07:02:06 2025 GMT
            Not After : Aug  5 07:02:06 2025 GMT
        Subject: CN=83d07313976e823c60dcab85c14827dfe13d7e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ce:37:1c:12:9a:cc:9b:e4:b7:f4:d7:d7:21:
                    c6:03:fb:7f:30:7c:1f:07:30:11:c6:b1:28:84:e0:
                    6b:5a:0f:a1:cd:b3:e7:01:46:d9:a8:5f:0c:ab:f9:
                    39:9f:f7:fd:d5:73:57:f4:58:4e:40:38:c5:56:c5:
                    21:ec:99:0f:f1:e3:7b:17:fc:4f:5f:fa:0a:60:22:
                    f4:7f:2a:45:18:17:79:e1:71:10:dc:70:8e:de:d0:
                    04:63:60:95:0c:f9:66:ba:22:ec:e1:26:0b:35:44:
                    e8:6b:33:fb:58:a5:44:04:d0:4a:ca:11:38:58:8b:
                    04:4d:a5:c6:ae:c7:43:4a:f9:3f:3f:fe:d7:f6:c1:
                    a1:b4:fe:5c:4c:8e:ba:02:6e:b7:cf:c2:ae:cf:97:
                    71:07:60:a0:a7:0d:b5:72:6a:39:f2:eb:b8:ac:b1:
                    f2:d5:c4:8f:01:5a:bd:89:63:a4:e6:81:70:c4:6e:
                    da:88:99:11:f9:b3:92:8e:66:00:d2:8f:a5:c1:4d:
                    a0:6c:c2:b7:fc:5d:ce:8c:00:af:29:89:93:9d:57:
                    a1:39:f7:e3:69:0a:f6:49:43:48:3e:19:f1:f2:12:
                    90:d0:fd:bc:b6:1a:42:13:17:34:79:49:0e:69:c8:
                    20:99:28:53:48:4c:6e:7e:0b:d5:18:d9:a8:eb:ad:
                    b7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D0:73:13:97:6E:82:3C:60:DC:AB:85:C1:48:27:DF:E1:3D:7E:2B
            X509v3 Authority Key Identifier:
                keyid:6F:F7:89:13:31:45:0D:C8:62:83:A0:89:BD:94:70:E6:9C:37:ED:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_eJEzFFDchig6CJvZRw5pw37RI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:74:f9:e4:cd:82:16:a0:a1:a8:cf:b6:16:db:33:9f:cc:f3:
         d3:bb:84:3a:90:83:27:47:82:3f:5c:b4:5d:57:80:8d:a7:b6:
         f8:3b:2b:a6:8d:14:a7:3f:67:e4:8c:fd:6a:a3:71:c8:fc:f3:
         ab:aa:95:0e:f2:7b:c0:46:e7:ff:c8:09:c9:8a:8d:de:61:f4:
         ef:a7:55:67:56:2e:11:d8:05:b6:58:d4:ee:3c:bd:b2:73:b9:
         68:12:8c:bf:de:dd:78:bb:b2:77:43:44:07:bd:f0:e8:8f:62:
         0a:ea:b5:6a:22:ed:0a:87:c1:d0:0f:2b:a2:79:34:5e:66:02:
         88:ef:14:ca:76:01:af:50:76:8e:be:49:2a:13:cb:6f:d4:28:
         80:3e:e8:65:ef:9e:aa:a1:45:ca:d0:d7:03:05:6f:52:52:7e:
         a8:63:38:77:36:52:95:bd:d1:f6:ae:15:4c:ab:be:6d:35:b8:
         f5:a1:02:07:03:29:7d:b6:68:25:b4:68:d6:b3:27:85:21:87:
         1e:54:69:33:23:09:b4:3c:3c:6b:f5:40:72:52:f7:a6:3b:b6:
         ba:4a:7a:d4:ab:77:32:00:d6:a1:f4:70:db:d9:28:2b:37:25:
         1a:b4:61:e6:bb:ff:de:40:33:22:5c:b4:b8:66:13:83:2f:07:
         e9:5a:17:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:08 2025 by rpki-client