Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft
File:                     6sw7q9U8RM12FFr4fUI3Axfo0ME.mft (raw, json)
Hash identifier:          GIvmiPQPQ5VQOss1oJ6BMXQi0cjw/WnfKjctzUrtpFo=
Subject key identifier:   B8:2A:A7:4B:77:85:F5:03:3F:C4:85:F9:C3:82:4A:39:A2:44:5C:0E
Authority key identifier: EA:CC:3B:AB:D5:3C:44:CD:76:14:5A:F8:7D:42:37:03:17:E8:D0:C1
Certificate issuer:       /CN=eacc3babd53c44cd76145af87d42370317e8d0c1
Certificate serial:       0198D6CD3960B63B5A616F08D3EA7BE4E758
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6sw7q9U8RM12FFr4fUI3Axfo0ME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft
Manifest number:          0D97
Signing time:             Sat 23 Aug 2025 12:00:30 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:30 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:30 +0000
Files and hashes:         1: 6sw7q9U8RM12FFr4fUI3Axfo0ME.crl (hash: S3G8ploMgj1E39TGA6Fl4hXDQBuCMoRBVqA7YsCrAx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6sw7q9U8RM12FFr4fUI3Axfo0ME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:39:60:b6:3b:5a:61:6f:08:d3:ea:7b:e4:e7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eacc3babd53c44cd76145af87d42370317e8d0c1
        Validity
            Not Before: Aug 23 12:00:30 2025 GMT
            Not After : Aug 24 12:00:30 2025 GMT
        Subject: CN=b82aa74b7785f5033fc485f9c3824a39a2445c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1a:9f:5a:54:aa:6f:76:44:70:9f:32:83:8e:
                    8a:b7:0b:e6:8a:71:8c:4c:6a:6e:98:3a:6b:36:16:
                    2f:44:dd:dd:d1:7e:a0:0b:45:fb:82:24:9a:7f:ae:
                    f0:cf:78:9e:4e:dd:7c:80:40:52:a6:c7:e7:54:e3:
                    3d:cd:0a:bb:de:f9:32:25:99:46:1e:c9:e0:1e:9d:
                    2f:15:41:3f:46:3a:9c:87:89:c5:cd:05:da:00:61:
                    70:91:f5:50:ba:22:d8:9f:86:35:57:e4:7e:f1:ad:
                    57:04:1c:64:fa:67:84:6e:11:14:05:3f:96:ab:8b:
                    5c:f8:3a:bf:98:46:28:a7:57:4c:04:5f:6d:90:c5:
                    e8:a9:3b:f5:d7:de:7b:7a:8d:92:5a:42:8a:7b:b8:
                    5e:11:bb:16:cf:2a:3d:d3:1b:2c:eb:a4:00:d5:9d:
                    71:22:bf:9c:08:55:6a:52:19:c0:e8:0a:e9:ad:23:
                    dc:5a:e7:8d:fd:72:cc:13:a8:20:7b:f6:35:9b:60:
                    0d:c4:1b:20:e1:1f:7f:e1:f5:b5:0b:5b:cf:47:cc:
                    3f:7f:25:a9:04:64:5c:d2:f2:fe:7b:b0:ec:bf:6e:
                    07:f4:7c:63:19:9e:b4:a9:64:07:2c:a2:03:d0:1b:
                    d6:83:7e:53:dc:c8:f8:e3:df:1e:03:8a:c4:fa:a8:
                    81:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2A:A7:4B:77:85:F5:03:3F:C4:85:F9:C3:82:4A:39:A2:44:5C:0E
            X509v3 Authority Key Identifier:
                keyid:EA:CC:3B:AB:D5:3C:44:CD:76:14:5A:F8:7D:42:37:03:17:E8:D0:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sw7q9U8RM12FFr4fUI3Axfo0ME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:77:ff:f3:34:d0:10:9e:7f:db:76:56:15:be:0e:b5:ae:9b:
         bb:86:32:6f:46:95:b9:8a:56:f2:47:04:1b:a6:c0:42:4f:a1:
         04:2c:60:0f:6b:9d:dd:74:e6:8a:8a:97:d6:a6:cb:61:79:58:
         da:d3:82:91:fa:26:f8:67:cb:90:74:49:27:fb:75:ba:bc:a3:
         6b:12:23:df:84:89:f3:e3:0d:a6:21:84:a3:5b:c1:8e:97:15:
         b8:41:69:ee:4b:1d:ee:c3:f7:cd:66:08:fe:06:c9:03:86:2a:
         97:3d:b3:16:25:b3:d4:2f:89:5a:0a:ec:44:73:da:8d:35:aa:
         74:e7:23:84:f2:b1:cb:0a:4d:d0:29:d6:2c:29:17:91:02:ce:
         fe:bc:8d:1b:ec:e3:8e:51:07:56:34:84:1e:8c:ef:fe:c6:ee:
         5c:30:a5:6f:71:d3:f1:54:72:96:39:3e:61:26:98:a4:41:15:
         46:42:c1:57:ef:b3:ea:83:ea:15:3e:ad:76:74:92:e7:7f:92:
         80:83:78:0c:00:6a:0c:1b:48:c5:85:70:a2:a3:75:28:19:bf:
         bf:f9:cd:95:bd:9c:ee:ed:c7:33:f6:0e:84:20:1e:18:53:fe:
         38:89:34:38:cc:e5:14:84:34:b3:94:33:92:24:5d:aa:00:0f:
         75:b1:87:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:23:56 2025 by rpki-client