Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.mft
File:                     6E2eW-w81Mrhfl-Hsu6lImpO518.mft (raw, json)
Hash identifier:          QSIDvOJ+kzy23zczGbjvKft8VTcaP6AXKMrs4Nvb5Lw=
Subject key identifier:   79:BD:14:77:FA:86:45:26:B0:76:10:89:7C:43:18:6C:38:50:8C:B2
Authority key identifier: E8:4D:9E:5B:EC:3C:D4:CA:E1:7E:5F:87:B2:EE:A5:22:6A:4E:E7:5F
Certificate issuer:       /CN=e84d9e5bec3cd4cae17e5f87b2eea5226a4ee75f
Certificate serial:       01987CE4E29007A22FD652A8F9B0CFEFF4B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E2eW-w81Mrhfl-Hsu6lImpO518.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.mft
Manifest number:          0C07
Signing time:             Wed 06 Aug 2025 01:00:31 +0000
Manifest this update:     Wed 06 Aug 2025 01:00:31 +0000
Manifest next update:     Thu 07 Aug 2025 01:00:31 +0000
Files and hashes:         1: 6E2eW-w81Mrhfl-Hsu6lImpO518.crl (hash: 4VgYdJLUMhZD+z3yGuDbkea9thLDYFQDtVkqalJUg/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6E2eW-w81Mrhfl-Hsu6lImpO518.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:e4:e2:90:07:a2:2f:d6:52:a8:f9:b0:cf:ef:f4:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84d9e5bec3cd4cae17e5f87b2eea5226a4ee75f
        Validity
            Not Before: Aug  6 01:00:31 2025 GMT
            Not After : Aug  7 01:00:31 2025 GMT
        Subject: CN=79bd1477fa864526b07610897c43186c38508cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d2:c3:7f:b4:71:c7:f0:b7:a3:09:6b:ee:15:
                    4a:1e:fc:e0:46:c5:de:28:4b:9f:e5:f0:5a:82:40:
                    c1:78:45:8c:aa:fe:04:64:5b:55:a8:55:47:7a:b2:
                    7d:8f:d4:7c:93:c6:2d:72:85:c7:b1:28:be:cb:5a:
                    32:5c:df:f6:22:73:9a:6a:d1:91:36:61:91:da:e6:
                    f1:db:87:23:89:6e:7e:36:7a:c0:33:1c:bb:40:db:
                    19:86:53:72:5d:15:94:10:f6:ac:66:23:ff:bd:37:
                    59:7b:27:6c:c7:58:88:2a:4f:28:74:38:0c:69:92:
                    0a:e2:95:74:2a:12:91:62:12:b2:29:30:95:9d:e9:
                    aa:3d:f0:7d:4b:fb:10:26:50:ec:97:c1:92:17:39:
                    d9:a9:7c:f8:bc:89:32:c4:fd:77:a7:99:2d:d5:e9:
                    9f:4e:83:3f:fc:4f:1d:78:35:0c:88:7e:51:79:6f:
                    5b:dc:cd:20:86:00:02:96:f2:ed:46:51:71:85:9c:
                    11:92:6f:1c:7f:ce:82:6a:c5:aa:1f:30:70:75:ac:
                    8a:6f:49:a1:bd:8c:e4:89:2e:fb:a7:64:55:64:66:
                    8a:a8:d5:f0:0c:48:92:16:54:d7:f0:01:89:f3:4e:
                    d0:fe:ff:d7:a4:4a:3c:9f:ab:09:59:14:57:c8:25:
                    eb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BD:14:77:FA:86:45:26:B0:76:10:89:7C:43:18:6C:38:50:8C:B2
            X509v3 Authority Key Identifier:
                keyid:E8:4D:9E:5B:EC:3C:D4:CA:E1:7E:5F:87:B2:EE:A5:22:6A:4E:E7:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E2eW-w81Mrhfl-Hsu6lImpO518.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f9:65:74:22:0c:f2:63:9d:1d:cb:ae:52:f1:bd:dd:30:e7:
         85:84:b1:95:ff:6e:9e:8b:8a:7e:05:4d:f2:8b:42:25:9b:b4:
         2c:f3:21:f8:6f:a6:3d:c4:4e:42:7b:f2:53:15:83:f2:5f:f6:
         73:2d:3d:98:a1:66:ae:a8:0e:9c:14:df:15:87:18:1d:64:fe:
         8e:3d:42:10:ba:53:c0:60:3a:c0:9e:bb:10:c0:5d:ab:a9:65:
         06:de:69:3a:62:ac:72:33:5d:4f:eb:db:c3:97:0f:81:ee:d3:
         b1:af:d0:fb:b6:40:e3:10:3d:c9:f3:c2:ec:31:e9:7d:f8:dc:
         33:ff:44:16:9b:d6:f3:65:cd:6e:a6:57:7d:5e:11:a3:8f:44:
         83:00:75:1f:a9:ca:3e:f1:e7:b2:36:12:34:41:68:e4:fb:f4:
         41:b0:40:09:54:8f:e8:fe:fa:91:4f:ba:0a:64:2e:26:96:87:
         ed:32:2b:9a:74:c1:e6:f3:41:c4:f4:fa:93:1d:0e:4e:86:5f:
         8f:d8:9e:49:29:e7:cc:2f:4a:dc:be:7a:4a:1c:a9:c0:1c:76:
         d6:f6:30:3c:ea:4a:f4:64:3a:8e:9e:2a:39:49:84:b7:47:a6:
         2f:19:b5:f4:dc:01:ea:4a:9a:12:34:e1:60:ef:fa:ef:df:07:
         e9:fe:64:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:13:47 2025 by rpki-client