Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.mft
File:                     e6g1J3sxmmnH9usa1IsJ1mMv090.mft (raw, json)
Hash identifier:          Q30l2oUvdlLeU3FYvt172AcIeot+uNLVDYcXkkjEikQ=
Subject key identifier:   3E:65:4F:4D:AF:94:A9:1B:E0:1D:6B:C8:76:C9:E1:8C:F1:54:64:CA
Authority key identifier: 7B:A8:35:27:7B:31:9A:69:C7:F6:EB:1A:D4:8B:09:D6:63:2F:D3:DD
Certificate issuer:       /CN=7ba835277b319a69c7f6eb1ad48b09d6632fd3dd
Certificate serial:       0198D850DFBA5DDA8259261E303CB52E3C8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6g1J3sxmmnH9usa1IsJ1mMv090.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.mft
Manifest number:          04FC
Signing time:             Sat 23 Aug 2025 19:03:55 +0000
Manifest this update:     Sat 23 Aug 2025 19:03:55 +0000
Manifest next update:     Sun 24 Aug 2025 19:03:55 +0000
Files and hashes:         1: e6g1J3sxmmnH9usa1IsJ1mMv090.crl (hash: EWe2TSDEWRIWmMxZFO9jHP714j1bD/w7Hy5UL9I0aow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6g1J3sxmmnH9usa1IsJ1mMv090.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:50:df:ba:5d:da:82:59:26:1e:30:3c:b5:2e:3c:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba835277b319a69c7f6eb1ad48b09d6632fd3dd
        Validity
            Not Before: Aug 23 19:03:55 2025 GMT
            Not After : Aug 24 19:03:55 2025 GMT
        Subject: CN=3e654f4daf94a91be01d6bc876c9e18cf15464ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ac:73:89:06:39:f4:e9:a4:fd:66:cd:4b:1f:
                    dc:ae:b3:8b:01:1e:49:61:e1:c5:1f:14:e3:04:ec:
                    bb:35:dc:6d:42:f2:82:3f:d5:9d:f8:a8:bc:ae:22:
                    e2:ca:d0:45:e4:8d:d7:44:da:d5:b9:91:d7:83:f0:
                    fa:ab:8d:8f:6a:eb:ca:34:95:9d:1c:e8:f5:65:ff:
                    27:81:a5:cc:21:33:c4:38:28:a3:9c:e5:f2:3f:a6:
                    b9:2b:79:8f:6a:4f:01:61:d1:1e:e6:65:0c:01:15:
                    fb:c6:a3:37:04:fe:24:2d:ee:43:c4:86:43:24:f8:
                    7d:8c:eb:b9:3a:2b:14:3a:61:8b:7a:9c:7b:5f:49:
                    2d:18:b6:e5:19:79:b7:04:2a:eb:81:0f:21:20:d9:
                    5e:4a:fe:b7:4f:01:fa:c6:08:d9:74:26:0a:67:86:
                    4a:75:b5:3f:ce:e6:3d:06:e7:ed:18:2f:db:6c:d0:
                    28:75:f6:88:f3:92:ee:6b:56:a9:3f:5f:c6:dd:41:
                    8a:bd:f6:a4:50:61:e3:23:f9:06:56:ea:45:84:dd:
                    c5:1a:fa:7f:0d:d7:61:bf:7f:7c:d5:1d:f0:f8:bd:
                    c8:15:00:79:2f:3f:a0:5e:7d:a0:90:80:69:38:7c:
                    82:d6:53:95:4f:46:0d:39:d9:93:02:1c:9f:44:a6:
                    f3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:65:4F:4D:AF:94:A9:1B:E0:1D:6B:C8:76:C9:E1:8C:F1:54:64:CA
            X509v3 Authority Key Identifier:
                keyid:7B:A8:35:27:7B:31:9A:69:C7:F6:EB:1A:D4:8B:09:D6:63:2F:D3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6g1J3sxmmnH9usa1IsJ1mMv090.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:11:3f:08:bb:ea:54:9f:59:c0:4f:f1:66:49:94:64:08:da:
         5e:b3:39:60:78:84:4e:0b:f9:3d:24:55:30:63:ca:ae:0d:3f:
         9c:b2:be:19:13:67:e7:62:7c:17:7f:d5:73:b5:f7:7d:6f:1b:
         c6:11:8e:80:0a:22:28:84:98:6f:b0:4a:a6:96:d3:c6:21:4d:
         91:d1:86:ed:36:a9:92:a5:7e:f8:fd:d6:9e:d7:aa:79:cd:85:
         67:2c:1d:2f:0b:1c:39:04:89:9b:d2:e8:2f:41:8f:cb:f1:7f:
         84:5a:70:0d:5c:47:0e:12:29:c3:74:2c:c8:8f:7b:8a:66:4a:
         f3:c0:d1:f3:4f:17:20:8f:50:86:96:e0:2a:80:ef:73:96:31:
         e7:4b:4a:78:f0:ea:b4:76:12:84:84:ba:ba:e4:23:33:de:af:
         dc:92:39:ce:3b:da:83:80:a2:49:87:9a:79:82:6d:05:a1:ca:
         e8:e1:8c:8e:02:45:01:71:eb:e1:81:8d:a4:0f:15:f3:99:fc:
         31:bc:e2:f8:0a:b4:c9:75:95:8d:cf:64:f5:de:29:4d:ed:2b:
         c6:4e:07:63:52:2b:e7:6e:87:a8:b8:9b:d1:57:b6:75:6b:7b:
         37:be:3f:58:6b:94:11:17:7e:b2:b5:0a:77:d2:0f:2c:d3:d0:
         94:0b:de:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:04:08 2025 by rpki-client