Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
File:                     e6Ix0pxKI7PpixSBPawJg-OjQFk.mft (raw, json)
Hash identifier:          XD2+cnskc5Vos8fSlaBwn906yc3zGmfOVEBKM6OD0Gg=
Subject key identifier:   23:73:3C:E4:CD:11:03:16:F3:CA:03:70:9A:67:E1:E5:EE:41:08:52
Authority key identifier: 7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59
Certificate issuer:       /CN=7ba231d29c4a23b3e98b14813dac0983e3a34059
Certificate serial:       0197703F1B58FC7A0D474B52C2F8DED78B95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
Manifest number:          0568
Signing time:             Sat 14 Jun 2025 21:01:13 +0000
Manifest this update:     Sat 14 Jun 2025 21:01:13 +0000
Manifest next update:     Sun 15 Jun 2025 21:01:13 +0000
Files and hashes:         1: e6Ix0pxKI7PpixSBPawJg-OjQFk.crl (hash: J3iueTZn0xNZ/s6ua8mXM5tPCDMg4NMZSzFSiSlxuQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:3f:1b:58:fc:7a:0d:47:4b:52:c2:f8:de:d7:8b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba231d29c4a23b3e98b14813dac0983e3a34059
        Validity
            Not Before: Jun 14 21:01:13 2025 GMT
            Not After : Jun 15 21:01:13 2025 GMT
        Subject: CN=23733ce4cd110316f3ca03709a67e1e5ee410852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a6:a6:95:3d:6d:66:bd:ee:31:b2:5e:d9:16:
                    24:01:65:51:53:92:25:ea:ba:f3:4c:11:d1:d4:73:
                    a8:7d:66:39:c4:5d:2e:de:d1:73:01:e4:c8:01:1e:
                    6c:57:67:c8:01:26:29:34:40:1c:de:fb:91:a7:50:
                    82:6d:8c:12:34:5b:c6:ff:a1:07:ab:41:e7:74:11:
                    07:2c:39:8d:e0:86:62:b7:d7:0f:85:5a:e9:9e:2d:
                    36:32:0d:cc:dc:2d:42:75:63:53:17:79:a8:a3:e6:
                    2c:ce:0d:b2:dd:fe:ed:aa:9d:7b:7f:54:1e:7b:d8:
                    70:4f:25:28:3f:89:fa:2e:72:73:c1:2a:f0:77:6a:
                    b9:c5:df:4e:69:61:1c:b0:2d:44:65:53:21:1a:a1:
                    ed:e7:9b:38:4e:e9:77:d8:ff:60:2e:07:24:83:44:
                    a8:3b:b4:00:fb:bf:11:d3:2a:04:e2:10:1b:e4:15:
                    18:02:35:06:5c:c6:8a:eb:f8:d2:6f:fa:3c:3c:ea:
                    a9:9b:11:a0:e3:c1:16:88:c2:79:2f:31:ee:04:63:
                    00:6e:e8:63:37:7d:f4:3f:2a:6c:cb:c0:db:ad:e6:
                    71:3d:fc:e6:4d:fb:bf:56:4b:45:38:8b:df:2f:6a:
                    88:5c:0a:61:20:dd:17:60:5b:26:43:44:cd:a3:75:
                    56:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:73:3C:E4:CD:11:03:16:F3:CA:03:70:9A:67:E1:E5:EE:41:08:52
            X509v3 Authority Key Identifier:
                keyid:7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:9b:d6:2b:22:11:ce:b4:97:48:61:50:27:a0:75:9c:66:4b:
         ac:96:fd:8a:5b:f9:93:3d:71:3e:af:88:5b:f8:26:cb:fa:66:
         01:fb:4e:eb:61:a3:58:a9:b1:b3:9d:8e:df:6d:e0:d7:aa:8c:
         eb:59:0b:fa:19:ca:45:10:ed:3a:c1:04:22:95:94:4a:5c:b0:
         31:e2:df:16:76:8f:b9:62:7a:48:c5:1d:c9:7f:d4:61:0f:5b:
         a2:f6:3b:eb:bc:93:d3:e1:de:7b:20:3c:5e:da:77:aa:69:48:
         7d:fe:30:f1:af:f0:c3:7c:44:5f:a8:08:1d:55:b9:6e:29:f0:
         13:5d:c6:08:c3:b5:63:62:de:51:61:00:02:f0:2d:f5:e8:0b:
         39:f3:3e:16:cc:0c:b1:f8:71:80:7c:99:67:f4:3e:18:e5:96:
         88:76:5a:43:64:a2:c1:ca:15:0c:be:19:0c:a7:26:27:7e:6f:
         8e:40:64:1c:17:9a:cd:67:07:31:c3:04:d7:68:78:b7:a0:d9:
         5d:f5:d8:36:87:3b:d3:bb:fd:07:26:04:82:c4:8d:25:ac:5f:
         97:62:a2:a3:bf:58:1c:36:b8:ae:a6:60:84:ed:5b:5d:d7:c3:
         21:29:86:47:1e:a8:05:19:bb:7d:4c:f1:51:a6:c7:35:7c:c1:
         5d:1d:08:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:09:22 2025 by rpki-client