Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
File:                     C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft (raw, json)
Hash identifier:          eYt12dwTkgcek2AuKK0Wq6yXiSrRCU9Z4x0LbQT/R58=
Subject key identifier:   BB:4F:DA:E8:18:EB:BD:19:EF:4E:41:47:94:36:67:C6:12:91:B9:D8
Authority key identifier: 0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
Certificate issuer:       /CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Certificate serial:       01987B9D827F0B748EE9613A1DCF0FFA7B3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
Manifest number:          04D5
Signing time:             Tue 05 Aug 2025 19:02:56 +0000
Manifest this update:     Tue 05 Aug 2025 19:02:56 +0000
Manifest next update:     Wed 06 Aug 2025 19:02:56 +0000
Files and hashes:         1: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl (hash: 5yFhqZVdrjH8f/jsvZkA3YbJp57/im/Z2Vonsuh8Cw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 19:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9d:82:7f:0b:74:8e:e9:61:3a:1d:cf:0f:fa:7b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
        Validity
            Not Before: Aug  5 19:02:56 2025 GMT
            Not After : Aug  6 19:02:56 2025 GMT
        Subject: CN=bb4fdae818ebbd19ef4e4147943667c61291b9d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8e:4b:dc:b2:19:40:ef:c6:33:6e:66:a5:09:
                    ee:2a:5b:da:8d:9c:81:9e:96:d5:f4:18:40:63:2d:
                    65:a7:11:b4:2d:5a:f4:a9:79:01:66:32:7f:8c:db:
                    82:72:b7:95:4c:f7:7a:63:ae:a2:87:4f:4e:3c:20:
                    77:d6:7c:73:1e:b4:b2:85:c8:77:b8:69:a1:e6:a8:
                    96:11:9e:3f:a6:3b:2b:f2:30:ba:02:7c:30:10:49:
                    e9:4b:77:cb:4e:dc:98:84:03:1d:84:89:b0:c0:2b:
                    c7:56:b7:ca:d7:19:45:be:6b:d9:31:40:f9:df:be:
                    0f:88:7b:53:6d:61:0b:6d:05:82:13:92:84:67:df:
                    92:21:0c:ec:8f:b8:e3:fe:9b:97:75:fc:b5:f5:67:
                    2b:27:b0:6d:ef:dc:47:1e:54:59:06:22:26:f2:20:
                    47:0a:f8:a3:60:05:8d:ff:09:05:ef:40:e2:2a:1d:
                    ea:91:28:77:8c:c4:75:22:cb:85:3e:9c:b0:4c:39:
                    2d:6a:1e:8c:3b:8a:c7:2c:7b:c9:6c:6b:22:c7:73:
                    cd:b1:7e:1b:78:98:50:a3:32:79:0f:1c:06:a3:e1:
                    e8:6e:5d:fd:ba:cf:cb:e7:d6:7c:d5:c2:54:73:4b:
                    84:4f:8d:6d:e6:7e:2a:fe:f1:9f:8d:97:14:8e:65:
                    47:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4F:DA:E8:18:EB:BD:19:EF:4E:41:47:94:36:67:C6:12:91:B9:D8
            X509v3 Authority Key Identifier:
                keyid:0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:be:09:57:af:4c:70:fc:65:bb:25:e2:40:46:07:e8:f3:d7:
         4f:3a:a5:29:b7:51:4c:22:34:73:02:18:89:85:0e:9b:73:3a:
         4c:60:3f:34:8c:52:36:98:98:e6:01:e4:cc:49:5f:f0:4c:0d:
         f7:b2:0b:39:64:4e:34:ab:bd:b9:6f:56:20:ec:c0:76:8e:23:
         49:aa:67:a5:82:96:77:82:ea:28:b0:02:b6:d2:fa:6f:54:9b:
         7a:5c:1e:b7:4e:f9:67:cc:fa:05:b7:c7:1d:0c:0c:e0:a6:f0:
         c6:fb:fc:90:11:e0:30:3a:83:55:ae:e7:36:b3:b3:fc:e0:52:
         97:52:92:83:cd:85:c2:98:4c:61:11:17:62:18:e1:6a:5c:37:
         25:7d:c1:b3:dc:d2:3a:c9:02:c5:60:57:03:e9:d2:20:00:aa:
         e7:94:9c:dc:23:06:51:b6:60:a8:64:86:59:f6:2b:bc:0e:ee:
         79:5e:09:2b:3e:8f:98:a1:ea:2c:d6:65:4a:78:49:7b:5a:28:
         eb:a1:4e:60:3d:40:3e:97:6c:d3:82:ad:06:e7:8b:44:b3:77:
         15:04:4e:29:0f:6e:76:46:a7:2d:b6:df:79:6f:f3:91:28:d5:
         67:38:ea:3c:e3:ee:3b:b9:b9:02:51:64:42:de:18:a4:4e:24:
         25:c9:e9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:13:18 2025 by rpki-client