Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
File:                     6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft (raw, json)
Hash identifier:          EIYnXGI3SoQTWt0gxXfygdDvuT0c8XmONF4ib/xtXqA=
Subject key identifier:   7C:7A:84:44:97:65:49:41:26:27:5B:8E:13:3B:A7:D1:80:D7:8E:56
Authority key identifier: E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72
Certificate issuer:       /CN=e8d672fa60aee4c273a11507f49b584dc552c472
Certificate serial:       0198D54DDA64C1F76F186C47DA461D4F2BD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
Manifest number:          0592
Signing time:             Sat 23 Aug 2025 05:01:45 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:45 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:45 +0000
Files and hashes:         1: 6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl (hash: r9VhafQGWYDP3K7ozqrx3jfFtOEfQgd0daMftNH0sO4=)
                          2: CRKNGf_xuZYF0kNapyVmFyPmlEw.roa (hash: No5hma8g70yPMrFd8Y5GeYsaZ5JGY9aPRg048GjHko8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:da:64:c1:f7:6f:18:6c:47:da:46:1d:4f:2b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8d672fa60aee4c273a11507f49b584dc552c472
        Validity
            Not Before: Aug 23 05:01:45 2025 GMT
            Not After : Aug 24 05:01:45 2025 GMT
        Subject: CN=7c7a84449765494126275b8e133ba7d180d78e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:72:d7:1a:83:e8:cd:73:62:03:e9:9d:a1:f6:
                    9e:c3:b4:67:e9:a9:ff:ec:ac:23:b7:b8:6d:b1:0d:
                    90:ec:5c:4f:7f:df:53:c8:fc:b7:87:a3:f5:59:11:
                    1f:b2:ea:77:71:16:31:9e:31:ab:0b:72:e7:50:3b:
                    a4:13:bc:9a:ef:1e:69:39:35:e2:97:9b:a2:71:c8:
                    ba:e9:74:16:39:12:1d:42:98:15:d4:79:5b:c2:e7:
                    e3:87:da:6b:c9:20:b9:94:0e:dd:1e:0b:57:01:ae:
                    73:22:95:ad:10:c7:16:a2:50:19:47:22:97:4c:1f:
                    c3:96:0f:ac:df:19:83:ff:21:3c:48:0f:8b:17:1c:
                    dd:79:82:6f:1d:49:a7:22:90:fd:0a:48:0e:74:8a:
                    f6:6c:a9:ef:26:5f:ea:a4:14:1c:e4:d3:fc:a8:5f:
                    2b:79:18:52:a1:b5:43:fb:15:d4:7a:76:a1:18:0d:
                    fe:78:e3:08:1f:37:e5:fb:91:1a:67:78:58:ed:b0:
                    d9:46:f4:cd:06:0d:ef:2b:c8:37:76:c2:68:c7:01:
                    fb:31:59:a6:11:92:f6:71:59:9b:ce:c9:9a:7e:3d:
                    70:a4:85:26:cb:f0:1c:60:ac:89:db:c4:a7:ff:d3:
                    f3:01:4b:ab:dc:93:9b:ac:96:9d:08:dc:76:6f:e5:
                    88:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7A:84:44:97:65:49:41:26:27:5B:8E:13:3B:A7:D1:80:D7:8E:56
            X509v3 Authority Key Identifier:
                keyid:E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:5c:3e:ed:5c:6a:5f:c6:80:30:7c:47:25:84:c6:2c:4c:3c:
         eb:5a:21:1c:da:eb:d4:0e:1d:27:74:55:b8:44:4e:cd:95:c6:
         e0:a1:22:77:99:62:60:5d:88:03:a0:c3:2c:02:ef:49:69:cf:
         b6:c9:44:c1:d9:cd:72:f3:c8:9f:6a:06:49:8e:3c:cb:71:89:
         4e:43:1b:51:65:9b:9d:95:13:91:ac:bd:8d:3f:90:b7:5c:ca:
         ef:2d:36:88:3b:3e:16:74:d0:83:8c:79:0a:6b:c2:bf:c2:5d:
         fe:d8:f4:f7:c3:bf:e4:12:02:be:b7:04:a2:87:50:b9:a5:83:
         b8:64:21:13:a7:b1:a6:34:b8:77:d6:e2:5e:d1:2b:13:04:cd:
         ea:df:59:2d:c0:fc:6f:ba:4e:8b:06:a4:96:c4:31:7e:89:7b:
         68:fd:b7:95:ec:66:3d:84:94:57:c9:78:d1:da:5f:d4:08:63:
         59:36:61:d6:08:d2:99:79:34:67:20:9e:f2:62:59:5c:92:e3:
         29:35:a2:06:a4:2e:5c:5d:a1:74:ac:8b:d9:1d:bc:bf:e7:15:
         70:fa:1c:d4:e3:42:d0:25:1f:2b:58:27:ab:4c:5e:91:fa:9b:
         61:b0:9b:e8:fe:c8:20:93:60:1d:86:36:e4:37:b3:fd:ea:97:
         d5:f5:22:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:40 2025 by rpki-client