Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.mft
File:                     6eybY31F3ICc9SE_ZXpjWpDjFx4.mft (raw, json)
Hash identifier:          IgufYkTvgKcI11hFORe/aX2SxNNeXhRgqcLw0kVA/PQ=
Subject key identifier:   50:B4:D0:93:63:DA:6A:C1:1B:8E:CD:E0:9F:DB:8F:3E:28:C8:3E:50
Authority key identifier: E9:EC:9B:63:7D:45:DC:80:9C:F5:21:3F:65:7A:63:5A:90:E3:17:1E
Certificate issuer:       /CN=e9ec9b637d45dc809cf5213f657a635a90e3171e
Certificate serial:       0198D5BC4D735F691D778BAE5FC188792EB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6eybY31F3ICc9SE_ZXpjWpDjFx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.mft
Manifest number:          0A5D
Signing time:             Sat 23 Aug 2025 07:02:24 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:24 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:24 +0000
Files and hashes:         1: 6eybY31F3ICc9SE_ZXpjWpDjFx4.crl (hash: 6IEa9dwnGHHfQKW561TKdqPUQB8ZqmaN35UCUwC1cDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6eybY31F3ICc9SE_ZXpjWpDjFx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:4d:73:5f:69:1d:77:8b:ae:5f:c1:88:79:2e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9ec9b637d45dc809cf5213f657a635a90e3171e
        Validity
            Not Before: Aug 23 07:02:24 2025 GMT
            Not After : Aug 24 07:02:24 2025 GMT
        Subject: CN=50b4d09363da6ac11b8ecde09fdb8f3e28c83e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5c:78:58:d6:44:79:19:e2:98:d3:2f:bc:88:
                    91:db:9d:dd:d1:c3:4f:88:e6:8d:68:f6:5e:8c:98:
                    88:84:95:21:e9:cd:67:73:79:61:1d:a0:54:58:df:
                    62:eb:3d:66:1b:61:10:28:2e:ce:38:90:08:63:d2:
                    0e:84:a7:1c:22:18:36:93:e5:86:d5:f1:14:54:70:
                    aa:92:e5:88:6d:2b:4e:0a:39:d9:70:d2:3e:13:17:
                    30:3d:10:e6:ee:74:b7:8c:a4:af:ea:1c:6a:ef:ee:
                    e4:59:e0:32:43:cb:62:47:9e:e8:59:cb:ba:66:b0:
                    d5:68:97:3b:b0:4d:ce:f1:f0:5e:28:df:7e:0f:da:
                    1a:42:38:4f:1b:c3:2d:71:1d:9d:e8:0f:21:73:76:
                    af:f7:45:e9:18:50:5c:c7:88:98:ec:16:bd:ae:e2:
                    0e:d5:ff:15:1b:f9:d1:f7:42:17:ac:35:a9:03:c2:
                    0b:83:44:c9:06:a9:78:e2:79:21:c5:2b:a1:32:19:
                    c6:3c:90:c4:10:05:51:e6:2c:11:85:a8:0a:ac:8c:
                    dd:c8:24:ae:ca:b4:88:a6:db:a2:c3:0a:c2:c5:77:
                    a6:c6:1d:42:de:56:92:ac:44:1c:26:c6:9c:40:f2:
                    7d:09:2b:b1:da:61:b5:8c:d4:03:5d:ff:f6:55:39:
                    fc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B4:D0:93:63:DA:6A:C1:1B:8E:CD:E0:9F:DB:8F:3E:28:C8:3E:50
            X509v3 Authority Key Identifier:
                keyid:E9:EC:9B:63:7D:45:DC:80:9C:F5:21:3F:65:7A:63:5A:90:E3:17:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eybY31F3ICc9SE_ZXpjWpDjFx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d6:9c:c4:c1:1c:15:c3:dc:d2:b7:63:b1:ad:83:d3:e7:6b:
         66:21:88:92:6c:5e:f2:7f:78:d6:a2:da:cc:11:c1:06:5c:ed:
         b7:39:4d:08:85:36:1a:ba:28:a4:78:0c:74:37:99:cc:71:22:
         63:1d:2a:7f:a6:b0:b5:46:77:17:af:e1:10:35:47:93:cc:be:
         ea:c5:10:3f:20:32:44:9a:81:0e:18:4b:64:18:1f:fd:d4:09:
         70:f2:a8:9d:77:89:42:da:f8:77:ba:e6:8b:83:a9:2a:01:66:
         b3:c8:91:ad:76:91:4c:f7:5b:ff:38:1e:b9:4f:0f:ef:b5:93:
         a9:99:3e:17:4f:df:dd:5e:ba:4c:6b:d0:00:b2:0f:9c:94:ad:
         78:42:04:b5:b8:c2:93:fc:a6:65:02:c7:80:fe:72:12:52:e5:
         a8:ce:e1:44:3e:9e:01:42:79:e3:54:51:cd:a0:f1:21:8b:80:
         7b:dd:5a:9e:f4:1b:39:f1:28:38:f7:d0:f7:73:9c:1b:de:b8:
         72:ea:e8:98:1e:0c:eb:fb:3a:9e:3a:6f:67:3c:92:b8:0d:75:
         2a:38:84:6c:19:48:62:06:84:65:d9:cb:7f:65:f0:97:63:da:
         7a:97:f9:93:fe:30:96:1e:bd:33:89:1e:9a:b4:4c:3f:66:cf:
         5d:09:f0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:13 2025 by rpki-client