Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
File:                     n6eFncOdRzYULPHiKcisS-YjuQM.mft (raw, json)
Hash identifier:          u8S2o2vEtcLoKuOVTHgHv4UGYuMJSkEA3KjXrPuzw1U=
Subject key identifier:   CA:18:E4:42:8B:1B:A2:72:0E:39:D7:9C:5C:12:10:8D:B3:29:3B:E3
Authority key identifier: 9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03
Certificate issuer:       /CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
Certificate serial:       0198D65FA035F9D52926E609268FC4707B25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
Manifest number:          12E6
Signing time:             Sat 23 Aug 2025 10:00:47 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:47 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:47 +0000
Files and hashes:         1: n6eFncOdRzYULPHiKcisS-YjuQM.crl (hash: CarD2ba1Nl90DcVKg5022RDd4C61B9a2oU0FLmqY34g=)
                          2: ntwiuM95uFBi26vUIqSDj4sApAM.roa (hash: O4PdrlvcDhug5zKVlwkRZGJ/JkjzqqLTd2w+uWOsXH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:a0:35:f9:d5:29:26:e6:09:26:8f:c4:70:7b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
        Validity
            Not Before: Aug 23 10:00:47 2025 GMT
            Not After : Aug 24 10:00:47 2025 GMT
        Subject: CN=ca18e4428b1ba2720e39d79c5c12108db3293be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:40:56:2c:68:1f:61:cf:bf:e4:10:66:8c:a5:
                    a6:04:d1:dc:e0:0b:00:6f:be:31:25:3b:10:4e:c1:
                    f1:30:52:8d:19:c2:b3:5c:a1:a2:31:1c:b2:37:1e:
                    2b:52:08:e3:64:42:0d:f4:65:12:23:2b:eb:57:47:
                    a1:1f:67:e7:b8:1b:8d:20:e1:61:2f:a4:6e:9f:72:
                    7f:21:fd:2e:48:ab:77:75:ce:e6:4b:8f:1b:47:cb:
                    43:4d:c2:bb:32:4d:79:15:73:49:79:ed:18:f2:2d:
                    50:18:b2:0b:e9:ab:a2:dc:08:c2:0f:6f:05:d1:bf:
                    9d:53:c0:68:3f:f8:2f:7e:47:57:04:b1:92:d2:08:
                    4b:96:f5:39:af:d5:89:fc:ef:f8:f3:03:bc:1c:15:
                    6a:0f:eb:c1:0a:3a:c4:86:db:f9:97:81:94:d5:12:
                    23:69:0d:c5:e0:70:bd:a4:be:e3:ec:70:e1:22:a4:
                    e1:30:71:2a:84:bc:1b:e3:b2:8b:1b:f8:7c:47:7e:
                    4e:73:86:11:e3:38:72:74:2b:2b:15:46:c8:8e:0a:
                    c3:43:b8:3a:8a:8f:dd:c1:12:40:f0:25:ee:cb:f9:
                    49:db:af:6f:a8:3c:0a:44:da:a4:b4:91:77:28:3c:
                    ee:16:aa:65:db:8c:64:9c:89:45:32:fe:a5:b9:b5:
                    62:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:18:E4:42:8B:1B:A2:72:0E:39:D7:9C:5C:12:10:8D:B3:29:3B:E3
            X509v3 Authority Key Identifier:
                keyid:9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:45:a4:6e:8e:4b:43:42:a4:79:79:6f:a1:93:54:d9:be:2e:
         83:2c:81:39:be:d6:a8:d3:c7:0c:20:b9:1b:41:18:ad:04:c7:
         d0:ce:9b:ed:a1:43:be:03:b1:a8:1c:3a:b1:fa:3e:cb:e0:45:
         93:4b:3e:8a:34:81:6d:44:a5:00:b5:8b:07:2f:3f:cf:d6:7e:
         d7:f9:9c:75:b6:62:9f:0a:8e:9a:bd:f3:84:10:45:81:45:f4:
         32:e7:23:0a:ef:27:1f:5c:6c:fd:95:be:1f:2e:3e:78:89:50:
         cf:c2:fd:6f:21:49:e5:41:5f:50:fc:39:47:da:03:02:7e:66:
         80:a5:49:ba:98:ff:12:2b:e0:ac:6c:4c:93:4e:d6:4a:12:fa:
         ef:69:ec:b9:af:28:8a:d0:13:b5:6b:b8:fe:3c:a5:db:de:a7:
         cf:4f:a4:81:51:2a:d7:81:6a:36:ce:07:7d:86:12:68:1d:74:
         67:27:ed:d4:a3:ad:89:c3:8c:e8:c1:f0:b8:c6:2a:73:c7:91:
         c7:fb:82:fa:7a:84:65:cf:83:ce:6d:0f:d5:56:56:0f:07:86:
         5a:9a:03:4f:f7:7d:8e:3c:e3:6f:32:cd:f0:01:b0:08:07:a4:
         34:f6:90:57:3a:3b:fb:a6:d9:20:e4:76:e8:e3:20:c3:39:9a:
         2b:36:c4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:39 2025 by rpki-client