Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
File:                     6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft (raw, json)
Hash identifier:          L3xKEbDMhbJurFw0sEuyfdNkv/haJftL1R3370eYRDo=
Subject key identifier:   ED:B4:06:FC:24:B5:4D:47:63:8C:75:73:27:25:CC:C7:7B:C8:BC:C3
Authority key identifier: E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC
Certificate issuer:       /CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
Certificate serial:       01976F2C2063FC1EB71D51BE7B438B32EEB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
Manifest number:          0D26
Signing time:             Sat 14 Jun 2025 16:00:52 +0000
Manifest this update:     Sat 14 Jun 2025 16:00:52 +0000
Manifest next update:     Sun 15 Jun 2025 16:00:52 +0000
Files and hashes:         1: 6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl (hash: 7Ih3F79TN1WGcfHiIIUoOZLo5qDHpnvioZJypeeas24=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:20:63:fc:1e:b7:1d:51:be:7b:43:8b:32:ee:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
        Validity
            Not Before: Jun 14 16:00:52 2025 GMT
            Not After : Jun 15 16:00:52 2025 GMT
        Subject: CN=edb406fc24b54d47638c75732725ccc77bc8bcc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cd:52:b1:9b:c0:39:ef:85:ab:4e:06:ff:82:
                    6d:7d:b0:79:a6:7b:3e:77:b8:8f:6a:a6:e7:51:0c:
                    ee:52:ae:50:03:39:b6:2b:10:98:c3:43:f0:79:a1:
                    1d:41:a8:31:59:62:a5:39:ff:fa:44:c8:cc:e8:de:
                    4f:21:7c:39:57:d8:5b:3c:f2:9d:b6:3a:11:5e:6a:
                    e9:9b:f2:db:ea:d1:21:39:10:e9:74:0e:ca:ea:e7:
                    ca:44:b4:da:9b:1b:49:94:d2:84:a1:91:fb:94:9f:
                    e4:79:1c:8c:7a:79:f7:f4:f9:1e:b5:31:62:05:bb:
                    8e:c3:8d:2b:f7:13:b9:0a:0c:1e:fa:c7:72:d6:d6:
                    71:f6:2c:18:93:16:8d:aa:5a:6a:1f:a6:0c:5a:df:
                    b8:94:d1:39:a3:10:ce:0f:7a:02:69:aa:63:4e:24:
                    7d:6f:3c:0a:1b:e9:a8:24:fc:2a:41:ea:b4:89:54:
                    d1:a9:52:96:2b:03:d4:8f:3a:76:e2:96:98:30:4a:
                    a7:bf:b6:30:54:8a:01:b4:7c:41:84:78:12:67:80:
                    d6:12:8d:65:aa:58:c7:11:ce:f2:db:6f:eb:55:67:
                    9e:f0:10:83:b2:0a:c8:cf:dc:1b:74:5e:3a:af:2b:
                    dd:d3:5e:99:9e:55:eb:0f:83:e5:e1:65:f5:d1:f7:
                    ad:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B4:06:FC:24:B5:4D:47:63:8C:75:73:27:25:CC:C7:7B:C8:BC:C3
            X509v3 Authority Key Identifier:
                keyid:E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:da:1c:0b:9d:43:0d:8c:a7:bf:ab:2f:d9:41:97:3d:6a:48:
         b6:f3:d1:31:24:11:3f:18:3a:64:6d:75:f2:21:af:e6:5a:cb:
         b9:fd:6a:06:ba:c7:b8:08:45:90:7b:ea:40:64:a4:9a:4f:75:
         f1:db:47:96:7e:2b:20:ef:53:92:e2:7b:fc:9f:d5:cc:d9:59:
         ed:24:ad:71:bb:62:08:9f:4a:8f:23:c9:47:e0:51:8d:bb:a5:
         22:fe:4e:d0:27:c5:97:33:75:3a:a3:52:b5:93:11:89:c5:20:
         f6:4e:00:05:43:ab:fc:3b:75:79:7a:15:01:bd:b6:48:d1:56:
         dc:73:63:ce:12:58:6d:ba:ad:d7:c4:a9:7b:b8:cc:6a:51:f6:
         87:46:3f:f0:54:9d:a0:ff:74:9c:a6:68:40:ae:ce:c3:39:40:
         86:0f:c5:ec:ad:c1:76:3f:e4:73:91:ff:bb:c3:4a:26:47:ee:
         c2:28:5a:ef:70:c8:e9:b4:6c:3d:c6:61:ac:02:8e:f5:8a:c0:
         08:2d:d8:d9:d3:46:50:4a:0f:79:13:bd:bb:ed:a7:c2:29:d5:
         6b:06:85:90:40:58:77:50:41:9f:77:e8:4a:06:5c:d2:ea:83:
         78:64:55:09:07:7f:0b:60:d1:40:d2:33:c9:e5:29:fc:65:aa:
         3a:bf:f5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:41:58 2025 by rpki-client