Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
File:                     6laHr9YhtSqXTNOvC-iiWmcRhtI.mft (raw, json)
Hash identifier:          m9yIrdnCRguDmYWZFlMntXD2LLGQNtE3PdykXKwPji4=
Subject key identifier:   12:B9:71:F3:A8:75:A5:60:C0:BF:CF:8C:D7:89:60:3F:76:BB:48:97
Authority key identifier: EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2
Certificate issuer:       /CN=ea5687afd621b52a974cd3af0be8a25a671186d2
Certificate serial:       019873E340B8190442945071DBA71CA2ECFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
Manifest number:          063E
Signing time:             Mon 04 Aug 2025 07:02:09 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:09 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:09 +0000
Files and hashes:         1: 6laHr9YhtSqXTNOvC-iiWmcRhtI.crl (hash: 6ycaxwX6QsCWhGXwomilRxPYu2d6WUeZsnN56YGlYwM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:40:b8:19:04:42:94:50:71:db:a7:1c:a2:ec:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5687afd621b52a974cd3af0be8a25a671186d2
        Validity
            Not Before: Aug  4 07:02:09 2025 GMT
            Not After : Aug  5 07:02:09 2025 GMT
        Subject: CN=12b971f3a875a560c0bfcf8cd789603f76bb4897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8b:77:0e:1d:fe:9c:47:71:db:12:41:ee:bb:
                    09:92:d4:d8:92:ac:0b:44:64:d5:bd:fe:85:fb:95:
                    9d:f9:ea:92:32:75:10:91:c9:cc:1b:3b:08:f3:5b:
                    96:18:08:df:e0:d7:6b:44:a1:12:de:74:77:39:6d:
                    b8:c0:9d:06:5f:a7:e0:07:c0:12:87:71:7a:27:8a:
                    99:6f:17:ca:f6:ec:7a:a9:06:76:76:74:d8:86:23:
                    59:3a:b7:a5:75:3a:c6:96:bf:88:f9:7a:ad:40:2f:
                    20:fe:44:37:dd:cf:45:23:78:df:f4:86:63:52:af:
                    28:ef:1f:b9:36:8a:02:4e:e4:dc:da:8a:1b:07:36:
                    55:4f:07:7a:f4:f3:20:c6:af:4f:bf:87:fa:3b:65:
                    fd:14:84:da:95:a8:31:bf:e5:40:9f:80:1e:5d:ac:
                    0c:11:ca:67:66:f4:30:e0:1b:03:22:7c:3a:83:5f:
                    34:5c:40:33:d3:b7:2e:8b:2f:c7:0f:02:d9:a0:a9:
                    db:39:46:54:13:ce:65:fc:fc:18:04:ac:de:5c:34:
                    d2:4e:53:1b:5a:f4:27:f0:22:4d:e3:c2:0c:6a:12:
                    77:43:32:8c:72:6f:4f:12:4a:d2:d0:9c:5e:de:ad:
                    99:c8:f4:91:86:b2:80:1c:62:e7:59:0e:d6:3e:fe:
                    ad:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B9:71:F3:A8:75:A5:60:C0:BF:CF:8C:D7:89:60:3F:76:BB:48:97
            X509v3 Authority Key Identifier:
                keyid:EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:23:28:0b:b2:cd:ad:10:57:dd:0e:a7:4c:15:d5:f5:04:64:
         b5:dc:4d:8b:e6:35:02:04:9a:a6:8e:5f:6d:e8:ff:11:55:97:
         be:66:52:a8:22:7e:52:ab:4e:32:1e:8f:7f:d5:de:59:6d:64:
         6f:cb:49:5c:3f:54:95:a3:28:16:37:2c:20:a1:03:20:6a:fc:
         ef:96:46:13:4b:68:5e:f5:a4:70:dd:b3:82:64:71:fa:f3:9f:
         a5:0a:01:1d:67:e1:f2:2f:1e:29:d3:a8:2e:dc:9f:8c:15:be:
         76:0a:37:c2:f0:70:06:e9:01:f1:bc:40:5a:d3:39:8b:f8:aa:
         07:12:2c:92:03:d0:91:f3:73:79:7d:0d:c3:24:c7:2d:91:3d:
         2d:7f:a6:03:2f:1e:8d:b5:66:eb:37:10:39:cc:a6:ec:c1:33:
         2d:7b:7e:7f:e8:46:8a:e5:da:20:f1:41:43:46:cd:78:4d:a7:
         15:58:ab:40:a1:57:dc:d6:07:9f:37:d9:28:f0:a9:07:b5:6f:
         7e:38:fb:ff:6e:61:05:6d:7d:95:31:d1:a0:33:d0:8a:96:74:
         70:80:be:b9:20:a5:ea:86:24:25:ca:93:b2:4b:89:91:54:80:
         42:16:d6:02:b1:53:db:fa:9d:8c:e9:81:94:b9:44:88:c0:b3:
         e1:e7:47:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:09 2025 by rpki-client