Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
File:                     6lz30dxfvb1jS9YbgLfv_uxGKHM.mft (raw, json)
Hash identifier:          0BCXHFLxXaWNSOsPfpvWeeLKPyLdKuS4cEKVJjjiSDk=
Subject key identifier:   59:75:90:02:E5:0D:5C:00:53:AB:8D:05:0F:A6:4D:7E:FF:45:C2:23
Authority key identifier: EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73
Certificate issuer:       /CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873
Certificate serial:       01987E2EA74AC4CFE95469A9A49F6D6D0C61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
Manifest number:          14CF
Signing time:             Wed 06 Aug 2025 07:00:43 +0000
Manifest this update:     Wed 06 Aug 2025 07:00:43 +0000
Manifest next update:     Thu 07 Aug 2025 07:00:43 +0000
Files and hashes:         1: 6lz30dxfvb1jS9YbgLfv_uxGKHM.crl (hash: gsLyIEYopLI5bvyOCRQ0c5xqYBz3y0SEbq//TBb38Eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 07:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:2e:a7:4a:c4:cf:e9:54:69:a9:a4:9f:6d:6d:0c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873
        Validity
            Not Before: Aug  6 07:00:43 2025 GMT
            Not After : Aug  7 07:00:43 2025 GMT
        Subject: CN=59759002e50d5c0053ab8d050fa64d7eff45c223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:97:af:ef:42:9b:73:7b:f4:e6:d2:fd:4f:93:
                    34:f6:3e:cb:81:5d:fd:53:c5:85:4b:cf:91:1c:a7:
                    55:e5:d3:a3:24:46:6e:6d:11:97:cc:bc:9c:bb:5f:
                    fc:b6:a2:8c:6d:6c:8f:7a:a9:a4:f3:dd:88:97:95:
                    aa:ac:0b:83:59:54:8d:30:d2:5d:8e:cb:9d:c3:2a:
                    c2:b3:95:a3:c7:b3:69:50:0e:4d:83:20:c6:1a:d2:
                    4b:c0:7f:02:1a:1b:61:b3:f6:bc:6a:ca:fd:4f:c7:
                    8e:0a:79:9f:8a:c0:85:30:d0:9a:72:62:e3:49:93:
                    be:8e:85:d3:77:13:d8:fa:00:18:c7:46:09:0c:2c:
                    8e:85:2e:03:65:0a:dc:ae:d4:8e:5f:40:f9:c2:03:
                    0c:6c:15:bb:6b:e5:ab:b4:25:ad:42:05:4a:60:59:
                    5d:86:35:d2:29:97:54:a3:7d:be:d4:d7:25:07:8a:
                    04:d9:d4:1b:51:69:f7:50:69:a4:4a:23:77:06:7b:
                    d1:ff:b7:72:60:79:57:f7:25:29:6a:94:0f:51:6e:
                    6f:d1:9f:da:0a:d0:7c:cc:52:25:c4:7a:07:ef:0a:
                    3d:40:13:d5:38:7f:d6:82:54:c6:75:9e:4a:74:42:
                    2e:5c:30:93:26:38:1a:11:6e:91:2c:3f:02:be:ae:
                    f0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:75:90:02:E5:0D:5C:00:53:AB:8D:05:0F:A6:4D:7E:FF:45:C2:23
            X509v3 Authority Key Identifier:
                keyid:EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:af:fd:45:21:ae:bc:7c:35:55:68:29:1f:0c:aa:6b:44:53:
         4c:15:90:70:37:b6:5a:7d:14:1e:05:86:20:d7:9f:74:b5:20:
         1c:78:97:e3:62:55:a3:64:25:eb:01:00:48:29:dc:ce:76:2c:
         02:aa:6f:93:99:e5:99:ac:2d:0a:29:38:a6:53:3e:6a:b3:fc:
         66:38:fa:9d:df:cc:c1:9f:1b:4a:50:cb:b2:83:83:75:93:b6:
         5f:05:da:f5:f5:73:74:b3:b2:c5:9a:0d:99:c4:ed:b2:55:b1:
         85:cf:75:22:00:5c:e0:0f:3c:02:63:43:3e:58:4b:4a:d7:3d:
         5b:74:a3:7c:e4:50:66:bf:6f:6e:91:aa:32:8a:4c:6c:66:92:
         2e:a9:52:d4:8a:24:dc:1c:67:ed:cb:90:bd:01:3d:1a:6c:50:
         f0:00:16:53:ec:fa:01:8a:64:5e:7b:1a:92:66:fc:e7:87:4f:
         4f:de:dd:05:a5:b7:cc:55:18:1d:6b:2b:42:f3:aa:ac:c5:54:
         94:b0:06:71:11:64:1c:bf:71:7f:54:81:6f:51:b1:eb:58:10:
         3c:04:26:fd:2f:4f:55:b6:d6:e6:9b:a1:2a:c1:b7:2e:01:99:
         49:5d:c2:4c:31:70:64:4e:98:26:f8:64:ac:0a:23:20:25:47:
         b9:db:28:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:11:13 2025 by rpki-client