Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft
File:                     6gYhpKcsclr8dUFej4rPdTPUIH0.mft (raw, json)
Hash identifier:          pDs7Ul+u6sSVVollLhcHiZZwCEvOc26nKL/19/RrCBo=
Subject key identifier:   76:80:20:97:65:FE:F3:C6:39:E9:E2:5B:40:38:FD:43:34:05:00:BF
Authority key identifier: EA:06:21:A4:A7:2C:72:5A:FC:75:41:5E:8F:8A:CF:75:33:D4:20:7D
Certificate issuer:       /CN=ea0621a4a72c725afc75415e8f8acf7533d4207d
Certificate serial:       0197B6A17FFB6234D4841CBA84F5B3AC5D33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft
Manifest number:          1400
Signing time:             Sat 28 Jun 2025 13:02:06 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:06 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:06 +0000
Files and hashes:         1: 6gYhpKcsclr8dUFej4rPdTPUIH0.crl (hash: 3G7FDX1N1fbHOD/N0wP9Hr+XdVYpKDBKWpbsTBFYi1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:7f:fb:62:34:d4:84:1c:ba:84:f5:b3:ac:5d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea0621a4a72c725afc75415e8f8acf7533d4207d
        Validity
            Not Before: Jun 28 13:02:06 2025 GMT
            Not After : Jun 29 13:02:06 2025 GMT
        Subject: CN=7680209765fef3c639e9e25b4038fd43340500bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0e:e5:6f:d8:93:bc:46:74:dc:a8:c7:78:44:
                    7a:5e:c3:90:c1:1f:1a:92:c8:7d:ec:a6:39:ef:40:
                    10:d7:bb:14:fb:10:d5:b7:10:88:25:d2:2f:ae:19:
                    96:1b:2d:b3:6c:b8:4d:08:de:6b:03:c0:bc:44:87:
                    48:33:90:9c:0e:87:96:c4:d7:93:c4:f3:78:56:88:
                    57:93:aa:22:f5:f3:df:13:29:22:d8:4e:3d:28:f5:
                    6a:d6:96:7a:75:d8:4d:cc:1b:fa:94:ff:c4:83:58:
                    9c:8d:76:4b:49:da:bf:ec:81:7c:6f:32:27:3c:6d:
                    52:00:03:34:9a:fa:c3:13:4f:bd:2e:44:94:71:c5:
                    cb:3c:73:72:b3:72:df:f4:57:ee:01:83:e2:b2:05:
                    84:45:e2:29:15:bf:15:3c:8b:ae:3e:00:25:8e:70:
                    ff:78:11:86:64:8d:58:6d:aa:01:5c:4a:46:1d:e0:
                    01:80:ee:2a:0c:be:46:0c:27:52:12:16:2e:ea:3d:
                    2b:7b:da:f8:cd:7f:67:91:09:28:84:cd:39:7a:66:
                    07:4d:e2:a2:f8:8a:ea:e9:97:1b:e8:49:fb:af:f4:
                    89:c2:96:00:1c:5f:d9:07:13:db:96:35:14:82:4b:
                    45:34:dc:d8:2d:7c:bf:36:1e:e6:1d:c1:90:a5:e5:
                    af:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:80:20:97:65:FE:F3:C6:39:E9:E2:5B:40:38:FD:43:34:05:00:BF
            X509v3 Authority Key Identifier:
                keyid:EA:06:21:A4:A7:2C:72:5A:FC:75:41:5E:8F:8A:CF:75:33:D4:20:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:0b:da:47:39:cc:19:2d:a7:d2:b5:a5:21:07:ff:46:33:c8:
         47:49:b1:70:ed:4d:5f:ff:f3:a9:27:d6:a5:f1:f9:71:d5:dd:
         2b:63:0b:92:a5:98:ef:c1:4c:e2:2a:0f:3f:a1:e4:58:8b:09:
         f5:26:6f:b8:06:8a:ef:2d:31:36:c7:b8:6d:7f:fc:72:14:23:
         15:ea:bc:96:7b:da:6a:b8:93:85:c3:b0:2c:1d:37:d2:6c:29:
         d3:e8:b3:9a:3a:6a:92:61:81:46:9a:67:b5:ae:02:09:3d:12:
         51:bf:30:86:66:d1:8e:f7:1e:95:e4:a1:d5:28:8b:7e:f3:68:
         da:97:18:9a:78:dd:da:00:3e:cb:01:13:c7:f9:6b:6f:20:aa:
         85:bb:68:70:a5:16:21:c2:0f:c7:c1:9d:67:56:ea:f0:fe:71:
         43:4d:73:af:1e:00:20:48:03:b2:63:82:bd:a1:3a:75:ff:47:
         bf:09:ad:25:56:1e:7c:09:d1:28:a6:0c:34:22:eb:1c:d0:32:
         71:03:84:25:f7:7f:53:b3:c5:c8:69:0f:d7:87:55:93:70:22:
         21:2d:89:88:81:63:59:bd:1b:fd:c3:75:26:f2:ed:45:7c:49:
         43:b2:3c:8b:c4:db:8d:27:ed:1a:4c:54:0b:04:6a:64:f9:f5:
         df:86:4f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:43 2025 by rpki-client