Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft
File:                     6_uNO-4VJTdjsHaqMuLium-eBcM.mft (raw, json)
Hash identifier:          jCzmVgsDpNQKv3eReqntQrtUGV6G3bWjBwwxemLRiHw=
Subject key identifier:   6C:34:EE:3E:ED:89:99:4E:5A:69:96:02:EF:ED:19:6B:82:96:47:00
Authority key identifier: EB:FB:8D:3B:EE:15:25:37:63:B0:76:AA:32:E2:E2:BA:6F:9E:05:C3
Certificate issuer:       /CN=ebfb8d3bee15253763b076aa32e2e2ba6f9e05c3
Certificate serial:       019881D5C16E513486C5864A6A27E4D35918
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_uNO-4VJTdjsHaqMuLium-eBcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft
Manifest number:          0CFB
Signing time:             Thu 07 Aug 2025 00:02:06 +0000
Manifest this update:     Thu 07 Aug 2025 00:02:06 +0000
Manifest next update:     Fri 08 Aug 2025 00:02:06 +0000
Files and hashes:         1: 6_uNO-4VJTdjsHaqMuLium-eBcM.crl (hash: qnKLUSlA+JAPkmsmu3bTb67JXN9lDqG0LE7+mmW+Xrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_uNO-4VJTdjsHaqMuLium-eBcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:d5:c1:6e:51:34:86:c5:86:4a:6a:27:e4:d3:59:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebfb8d3bee15253763b076aa32e2e2ba6f9e05c3
        Validity
            Not Before: Aug  7 00:02:06 2025 GMT
            Not After : Aug  8 00:02:06 2025 GMT
        Subject: CN=6c34ee3eed89994e5a699602efed196b82964700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d3:59:7d:f5:33:a6:3a:dd:aa:21:50:70:ee:
                    00:99:e0:83:92:09:00:ae:8b:3d:e5:c5:fd:36:a6:
                    16:a9:98:64:af:38:f8:78:4f:ee:af:ba:a7:61:db:
                    89:98:24:64:23:38:9b:88:c8:e8:36:6e:ef:d4:68:
                    6f:5a:12:1c:b4:a6:15:e5:e2:37:0c:fb:37:3b:67:
                    3e:9e:43:18:04:2d:8b:5b:6e:ba:11:25:0c:6a:42:
                    b6:89:05:0b:ae:02:c4:eb:be:93:fd:35:1f:9d:34:
                    e1:4f:35:54:99:99:fe:5d:eb:d2:b5:f2:56:e1:52:
                    a5:0f:c9:f3:4e:c9:68:07:7e:84:e8:94:56:e2:ca:
                    91:d6:01:a1:77:a5:16:a6:19:89:6b:9e:83:11:7e:
                    54:b3:45:99:4f:f5:d0:92:29:d2:31:3b:c8:af:9f:
                    24:58:d8:fc:db:81:8e:03:cb:71:e3:9a:6c:62:38:
                    50:87:32:9f:d4:a5:0b:80:eb:21:91:40:6f:74:a6:
                    f3:b4:b9:e1:65:78:24:07:b1:29:4f:fb:fa:f5:47:
                    ed:43:04:b4:f5:a4:35:2b:ec:3a:09:da:27:16:83:
                    98:8f:90:57:91:bc:66:3b:53:cb:f1:b1:89:d0:f9:
                    2c:e6:34:11:72:b9:10:60:a4:ea:b8:90:16:67:10:
                    16:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:34:EE:3E:ED:89:99:4E:5A:69:96:02:EF:ED:19:6B:82:96:47:00
            X509v3 Authority Key Identifier:
                keyid:EB:FB:8D:3B:EE:15:25:37:63:B0:76:AA:32:E2:E2:BA:6F:9E:05:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_uNO-4VJTdjsHaqMuLium-eBcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a4:5c:c2:ad:87:22:60:31:1e:bc:30:76:d1:b2:e5:24:94:
         a1:da:99:c1:ea:b7:89:dd:97:b2:15:96:db:48:51:c3:99:32:
         ed:a9:1a:57:90:db:8b:af:d8:a0:01:0c:6a:be:16:a5:20:17:
         01:c5:9b:3a:25:0a:79:29:af:8e:26:1a:a7:03:43:22:36:fc:
         a5:9d:a1:4b:ed:35:10:49:86:0c:2e:8e:d8:9a:5c:1f:e7:98:
         d6:e7:68:b1:81:bb:70:3e:63:36:91:fb:26:cc:12:72:db:bc:
         05:30:65:1e:c9:e1:89:d0:1a:c1:63:23:5a:b8:e0:50:f2:80:
         77:05:a2:52:4f:23:60:f7:35:fb:5f:b0:e2:70:c6:ea:d5:04:
         a5:23:06:f8:5d:70:eb:d2:4c:0f:19:60:76:dd:c5:f3:e3:db:
         76:aa:b9:7a:9d:ee:98:bc:76:37:09:c4:8a:6b:47:66:3e:ba:
         4d:af:11:e9:6b:09:62:57:74:66:64:a5:72:c7:6f:7b:1f:a5:
         44:52:a5:80:a7:be:90:7f:0b:95:4b:f8:a3:75:e6:81:75:0c:
         0f:9c:71:90:f3:0b:39:63:ff:15:e2:33:a7:fd:c5:19:c5:61:
         42:45:eb:8a:d5:db:01:38:c1:6e:7a:2d:14:c8:ed:cc:6b:31:
         de:0a:7f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:22:28 2025 by rpki-client