Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
File:                     6ch0aZeAldiv9jJygEuy810UkQM.mft (raw, json)
Hash identifier:          9zflcuT4ABsuRrHctzLt7d3HCpdKcPSksvWaeEjYDIY=
Subject key identifier:   E8:0A:37:C7:EF:CA:23:9A:EB:09:40:B2:D7:BB:E0:22:29:D5:64:21
Authority key identifier: E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03
Certificate issuer:       /CN=e9c87469978095d8aff63272804bb2f35d149103
Certificate serial:       0198D4A7D360BAF7DD81302543737CF4CFB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
Manifest number:          0984
Signing time:             Sat 23 Aug 2025 02:00:24 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:24 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:24 +0000
Files and hashes:         1: 6ch0aZeAldiv9jJygEuy810UkQM.crl (hash: u13xH+grqrlEie3SUdmQbDYfSl7yD8OeIUl/JdzNMM0=)
                          2: zUJ5qWVbr4pmer3m739HNMffZjg.roa (hash: NJqHyM9HbL1+6lpUhrutNRFZX2Z30cCNuSy/2q+fWs4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:d3:60:ba:f7:dd:81:30:25:43:73:7c:f4:cf:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c87469978095d8aff63272804bb2f35d149103
        Validity
            Not Before: Aug 23 02:00:24 2025 GMT
            Not After : Aug 24 02:00:24 2025 GMT
        Subject: CN=e80a37c7efca239aeb0940b2d7bbe02229d56421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1e:98:7f:ba:41:9f:3a:c8:d0:0c:01:fb:ec:
                    ee:3b:a4:b9:38:98:4f:21:c1:b0:21:52:6d:d2:15:
                    e2:66:4d:80:e1:78:e9:87:93:f4:ca:9c:98:61:b5:
                    56:9b:4f:3f:02:7b:4d:09:5c:fa:e6:ec:e8:e8:17:
                    2b:7c:73:0e:d0:e1:12:f4:58:69:5b:06:82:e4:cd:
                    23:c4:40:15:6d:da:0f:5e:2d:96:9a:df:56:49:86:
                    f7:55:72:b7:fc:4d:7b:e5:5a:fb:ac:1b:95:ac:95:
                    b7:de:91:19:68:a9:2b:41:13:b6:0e:d6:39:11:8e:
                    b5:d9:19:fa:af:20:b0:8d:82:f1:15:4d:71:39:0c:
                    30:07:0a:7b:89:04:aa:8d:d0:25:e2:75:d6:2c:12:
                    78:e3:d6:76:e6:5a:73:43:3b:15:2c:99:b3:57:5e:
                    0f:75:3c:cd:14:82:fc:96:04:97:b8:08:d6:92:82:
                    10:1f:b0:25:07:66:d9:68:1e:39:af:74:07:f5:00:
                    6d:21:bf:38:43:80:31:43:a0:31:96:d8:48:72:fd:
                    0b:be:6c:8d:0d:d0:d1:8d:09:d2:12:9a:91:d3:12:
                    1d:c9:9c:94:af:ec:33:53:b4:41:f3:86:47:c4:bc:
                    2f:53:f3:4e:e3:89:19:6a:ad:9e:f0:ad:d6:6a:08:
                    81:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:0A:37:C7:EF:CA:23:9A:EB:09:40:B2:D7:BB:E0:22:29:D5:64:21
            X509v3 Authority Key Identifier:
                keyid:E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:af:13:7d:f4:fe:a8:d9:89:5d:3f:e6:c2:22:0d:89:79:a1:
         ba:cb:51:bb:2b:14:07:36:2a:b0:73:c7:b7:47:42:65:e1:ef:
         16:b5:52:a2:64:79:52:07:15:0f:12:73:ff:68:62:13:b6:f3:
         40:e5:fc:64:ae:2f:81:67:90:73:66:7d:08:65:7c:13:99:c7:
         a0:34:f8:fc:90:0c:38:9c:38:38:ef:ae:7a:2a:d5:03:38:89:
         c8:10:ae:b4:9c:0c:29:f1:0b:a2:66:6b:2b:ff:38:5e:41:fc:
         41:57:6c:51:ea:d2:67:aa:fb:c2:96:8b:f9:19:10:67:58:cc:
         33:5d:63:ad:de:67:d3:c7:6e:2c:49:7e:04:ab:55:4b:7f:6b:
         16:b9:f5:58:d7:54:c2:0d:b7:69:72:8c:14:cc:18:8e:d2:09:
         61:dc:31:77:e0:ab:0c:e7:b0:af:0c:a2:5a:e8:76:70:f7:07:
         d1:5c:c2:15:ec:81:67:78:c6:aa:50:2f:66:27:a0:b9:d9:90:
         cc:8c:4c:76:05:92:af:98:ea:c8:7a:47:6f:9c:31:70:18:2e:
         6e:52:6c:72:c5:31:2b:d5:a9:12:5c:a9:d2:e4:2d:c5:ca:5b:
         66:ba:ef:8b:7e:eb:c5:17:0f:4b:3e:e4:a0:23:0c:ce:6f:06:
         2d:a6:19:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:12 2025 by rpki-client