Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
File:                     6laHr9YhtSqXTNOvC-iiWmcRhtI.mft (raw, json)
Hash identifier:          Zo2YRTQ3t8kIqQdsiSW+lMD7j2ldvazQsLl+VK1foiQ=
Subject key identifier:   25:84:73:43:F4:C5:78:F5:9B:0A:7C:F5:36:50:98:C6:C7:03:41:B1
Authority key identifier: EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2
Certificate issuer:       /CN=ea5687afd621b52a974cd3af0be8a25a671186d2
Certificate serial:       0197711A6202ACBABF8C59422401E7E6CA50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
Manifest number:          05B8
Signing time:             Sun 15 Jun 2025 01:00:43 +0000
Manifest this update:     Sun 15 Jun 2025 01:00:43 +0000
Manifest next update:     Mon 16 Jun 2025 01:00:43 +0000
Files and hashes:         1: 6laHr9YhtSqXTNOvC-iiWmcRhtI.crl (hash: Dr2Q+D1H1vINKn58MECUBI/P7d5XnM0sj+cNuwNM90E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1a:62:02:ac:ba:bf:8c:59:42:24:01:e7:e6:ca:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5687afd621b52a974cd3af0be8a25a671186d2
        Validity
            Not Before: Jun 15 01:00:43 2025 GMT
            Not After : Jun 16 01:00:43 2025 GMT
        Subject: CN=25847343f4c578f59b0a7cf5365098c6c70341b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:43:14:58:07:09:ec:75:92:4d:51:1e:6e:10:
                    90:6b:38:12:22:11:ce:60:11:33:96:57:e5:94:6a:
                    80:3a:1e:86:36:b4:68:ea:a8:3c:99:a1:38:6e:51:
                    14:02:9a:82:88:c7:21:44:b1:d5:b1:00:2e:c7:05:
                    e1:8d:67:c2:cd:f3:96:1e:55:65:65:7b:e4:2a:91:
                    8d:f3:58:2f:16:eb:d4:2e:66:25:8a:03:fc:19:65:
                    04:84:f8:2b:ae:3a:e5:3d:be:d0:92:cb:b2:cc:c8:
                    df:ad:61:61:d0:92:58:c3:7d:61:2b:03:9b:7c:ae:
                    6a:75:21:6e:c6:2d:aa:75:59:1d:45:63:04:51:90:
                    12:d0:e2:73:e3:70:05:ef:42:e9:96:9f:66:07:c7:
                    7b:93:45:59:67:f9:17:67:c0:97:12:d4:bc:0a:75:
                    13:f9:9f:a4:2f:61:c2:c9:c3:44:3e:87:5e:57:62:
                    12:9d:1d:ec:81:21:af:98:29:6e:18:98:8a:e9:96:
                    64:82:17:10:c6:d7:48:ba:b8:e7:bd:ee:4d:92:b6:
                    cb:75:e1:4f:13:9a:cc:25:b6:1d:0b:84:c7:99:6f:
                    3b:82:2b:80:21:60:5f:16:17:c7:54:53:14:ae:58:
                    7c:cd:cd:64:fc:68:0f:a9:6b:21:4c:d7:02:8d:17:
                    4d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:84:73:43:F4:C5:78:F5:9B:0A:7C:F5:36:50:98:C6:C7:03:41:B1
            X509v3 Authority Key Identifier:
                keyid:EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:79:50:0b:01:1d:85:de:00:5a:1e:5c:4a:6f:ba:c8:4d:0e:
         cf:66:c2:00:f0:6b:29:c1:6e:5d:fb:50:50:7d:87:c6:25:59:
         c4:0b:91:0e:7b:a5:11:9a:41:d7:cb:b5:64:05:de:08:8b:09:
         44:c0:08:29:43:95:89:95:79:b8:e9:0e:f7:ce:b2:33:74:ab:
         55:22:2f:e1:58:1f:a4:00:80:8b:54:08:d1:e4:54:03:0e:cd:
         a5:ff:c3:a2:95:9b:93:e8:b9:42:5a:49:ee:29:7a:95:f7:f6:
         06:b3:51:1e:07:80:5a:55:2e:1e:3a:4b:c8:ca:a5:a0:d0:38:
         03:b7:df:a9:6e:68:11:7e:44:ee:3b:d8:d4:7d:73:bb:21:87:
         a4:67:a3:8f:24:22:cf:74:a7:5a:f4:e6:fa:a4:f3:ab:2a:ea:
         4d:db:70:26:aa:29:d4:c1:fa:e3:12:a7:4e:c4:40:ca:93:c1:
         58:c9:2d:07:24:b8:c0:7e:b3:a1:41:30:51:01:f9:cd:6b:2b:
         96:3b:38:36:47:c4:47:6d:1f:9c:72:26:67:9f:a4:da:e5:6f:
         53:54:af:73:a0:51:0d:24:b8:fc:c2:10:a8:f2:cd:8b:01:06:
         10:cf:15:3d:67:15:aa:d1:47:53:ae:13:94:19:ef:da:f0:85:
         96:6e:78:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:33:12 2025 by rpki-client