Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
File:                     6po2KjoeqNaaLSY__8GA2rWjgck.mft (raw, json)
Hash identifier:          dCJ7z4PlXlsnLXOfZVV/wno1FneblY/zHjCWtHUJvO4=
Subject key identifier:   7A:66:B3:5D:62:1F:AB:8D:37:00:37:32:89:CB:62:0C:F0:11:D8:98
Authority key identifier: EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9
Certificate issuer:       /CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
Certificate serial:       01976F9A579E8ED51D65C728CA9C331D4133
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
Manifest number:          0983
Signing time:             Sat 14 Jun 2025 18:01:15 +0000
Manifest this update:     Sat 14 Jun 2025 18:01:15 +0000
Manifest next update:     Sun 15 Jun 2025 18:01:15 +0000
Files and hashes:         1: 6po2KjoeqNaaLSY__8GA2rWjgck.crl (hash: uAAbdgHm3EBxoGlQeG0Pc+ASGqSApsQCAvNW2fPqd6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:9a:57:9e:8e:d5:1d:65:c7:28:ca:9c:33:1d:41:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
        Validity
            Not Before: Jun 14 18:01:15 2025 GMT
            Not After : Jun 15 18:01:15 2025 GMT
        Subject: CN=7a66b35d621fab8d3700373289cb620cf011d898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a8:0f:6d:09:85:36:8d:f1:67:4b:5d:09:e0:
                    05:7e:cf:28:a9:dc:7f:f3:86:c7:ca:1d:2a:1c:95:
                    ad:da:17:f6:f4:67:ea:a1:20:50:1d:16:a8:05:5a:
                    7c:20:00:9e:20:08:dd:4f:53:73:71:4c:e5:c7:d1:
                    cf:48:e3:b9:ea:24:da:e2:bd:ec:19:8b:d2:1c:20:
                    2a:84:ec:07:4a:02:2a:3b:8c:b5:54:ca:db:7f:33:
                    03:2f:39:c8:40:84:8d:28:f7:81:4d:e0:ec:ce:6d:
                    9b:de:49:24:bc:e8:93:1b:b6:9c:0b:e1:e1:7f:7a:
                    54:19:22:ad:db:44:28:29:24:f8:73:43:23:92:07:
                    93:96:5f:d6:69:fe:70:37:b2:c2:d6:91:bc:06:20:
                    99:c9:37:df:20:6c:89:6c:5a:a2:3c:c3:9a:7d:55:
                    73:79:a6:0c:ba:90:7b:b8:a3:ba:b4:35:a0:7d:b5:
                    04:ee:8d:45:2e:bf:bd:35:a3:d1:64:32:39:ae:ef:
                    1f:d7:2c:9d:e6:70:72:46:3a:b9:62:af:0e:d9:8c:
                    d6:1a:91:47:c8:bb:72:09:b0:0d:59:2f:83:cf:2f:
                    0c:51:cf:30:06:58:41:9b:3b:2c:d8:7a:ee:4f:d5:
                    bc:4c:6e:68:f1:79:89:4d:39:5c:2e:54:c9:46:c0:
                    28:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:66:B3:5D:62:1F:AB:8D:37:00:37:32:89:CB:62:0C:F0:11:D8:98
            X509v3 Authority Key Identifier:
                keyid:EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:e3:da:eb:8f:c3:7c:bd:99:86:78:e4:cd:33:78:e5:67:2f:
         00:bf:26:09:f4:85:9e:2b:cf:22:f9:88:4b:bf:10:20:d3:72:
         43:f0:e0:b0:65:85:e1:70:7b:69:fd:ae:20:fd:ed:0e:da:db:
         0d:0c:07:6f:30:58:8c:a1:21:ff:59:29:45:6b:0d:1c:72:d9:
         e9:fd:b3:39:98:00:16:dd:db:cf:22:dd:9f:56:9a:72:72:67:
         52:c3:3e:7b:41:e6:ca:45:a4:10:40:b6:3e:b7:a2:ec:64:46:
         ce:94:0d:1c:84:32:23:49:f4:d4:47:ac:5a:ea:21:e9:21:03:
         d1:28:e2:5a:12:38:01:b4:30:fa:dd:b2:91:94:47:54:eb:9c:
         24:a0:7e:43:52:6a:15:5b:4b:87:c8:ca:39:8d:e2:74:3a:dd:
         0f:ae:9b:d1:3a:36:dc:39:64:8a:85:0a:79:51:aa:69:34:2b:
         9b:a3:98:6c:70:1f:89:cd:2c:43:f8:a1:bc:44:e8:6e:c4:56:
         ce:91:29:c8:bd:79:4b:e0:44:e9:b8:9d:49:3d:a1:52:76:dc:
         95:1e:23:db:53:2b:92:e0:7d:a2:45:d6:5b:ae:c6:10:65:10:
         49:fc:18:02:76:94:53:ce:ca:de:6d:83:64:f7:bf:27:40:cb:
         1a:fc:f6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:46:17 2025 by rpki-client