Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.mft
File:                     6W3gIbqO3QcU7TEgxJhy6jzOioY.mft (raw, json)
Hash identifier:          qVor7/6JJkx1cM3uqKoExeaxI6Qx37KSF7IqCG5VWcU=
Subject key identifier:   4B:95:60:0C:93:D0:2B:88:0F:BB:76:0D:34:BC:14:61:C4:C9:78:D2
Authority key identifier: E9:6D:E0:21:BA:8E:DD:07:14:ED:31:20:C4:98:72:EA:3C:CE:8A:86
Certificate issuer:       /CN=e96de021ba8edd0714ed3120c49872ea3cce8a86
Certificate serial:       0198D8BDA3AE1A467D0E3FACD5E2F0908BBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6W3gIbqO3QcU7TEgxJhy6jzOioY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 21:02:43 +0000
Manifest this update:     Sat 23 Aug 2025 21:02:43 +0000
Manifest next update:     Sun 24 Aug 2025 21:02:43 +0000
Files and hashes:         1: 6W3gIbqO3QcU7TEgxJhy6jzOioY.crl (hash: 8r4BNoILo9PGGAARrrr5lwhJWFD2tVJXn3CbvuWLYu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6W3gIbqO3QcU7TEgxJhy6jzOioY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:bd:a3:ae:1a:46:7d:0e:3f:ac:d5:e2:f0:90:8b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96de021ba8edd0714ed3120c49872ea3cce8a86
        Validity
            Not Before: Aug 23 21:02:43 2025 GMT
            Not After : Aug 24 21:02:43 2025 GMT
        Subject: CN=4b95600c93d02b880fbb760d34bc1461c4c978d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:51:b7:de:6b:fb:33:3c:32:bd:b1:15:0b:67:
                    c0:30:a8:85:f7:4d:7e:54:01:68:1b:e8:19:a4:42:
                    66:16:24:8d:47:0f:3b:e9:1f:da:76:16:a4:8e:0c:
                    69:51:bb:7f:c4:de:d2:72:ee:28:0d:4f:fd:8c:1d:
                    0d:ec:3f:c5:be:f4:34:87:e6:43:b5:66:ad:31:6c:
                    46:b0:d1:38:36:e7:d8:ea:b8:9e:5f:a0:8c:25:19:
                    ff:a1:d2:9b:7e:4c:c3:3d:58:ba:9d:17:bb:5e:1b:
                    16:0d:0a:4c:ed:bf:0e:ac:e2:0c:70:16:bb:a7:cf:
                    ec:62:42:97:b0:e5:1c:8d:49:ca:2f:f9:ef:00:fd:
                    7a:66:57:e3:8b:92:4c:49:63:3d:ac:31:b0:91:91:
                    73:b6:42:83:0c:b7:8f:b6:31:c8:a1:97:32:7b:5d:
                    41:b0:ee:41:7f:d4:13:bf:46:47:d4:00:07:50:e8:
                    d4:48:f0:70:3c:c5:bb:5f:db:21:c0:5c:f7:54:46:
                    d4:2a:47:d6:df:b4:43:df:e1:b9:68:32:a7:7e:54:
                    ed:35:22:0f:f6:a3:73:74:c5:9d:db:9d:cb:8b:75:
                    c7:01:3c:e5:28:38:0d:57:2e:82:b0:38:63:65:75:
                    f6:7b:65:be:02:e8:5c:91:d5:5d:77:c6:fc:21:66:
                    d3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:95:60:0C:93:D0:2B:88:0F:BB:76:0D:34:BC:14:61:C4:C9:78:D2
            X509v3 Authority Key Identifier:
                keyid:E9:6D:E0:21:BA:8E:DD:07:14:ED:31:20:C4:98:72:EA:3C:CE:8A:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W3gIbqO3QcU7TEgxJhy6jzOioY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ba:75:2b:e9:f2:b7:6c:1c:06:8c:9f:ca:27:13:0f:0b:90:
         16:2c:0a:b1:e5:f9:80:25:6e:4f:3e:c1:70:38:e1:20:62:38:
         50:34:66:9d:f9:ea:8f:57:1e:fc:3d:43:9a:6e:38:13:ed:a9:
         58:ee:a8:7a:7b:fa:c8:7b:64:ba:bc:8d:a5:7b:73:82:b4:65:
         55:3d:fc:cc:ff:52:2f:30:a0:4a:e2:4b:85:1c:3d:c8:4b:fe:
         c8:2c:28:4f:fb:8b:8e:84:a8:fe:a7:d8:06:6c:6a:7a:06:83:
         cd:7c:e7:4e:67:e7:4e:c7:82:74:54:8e:93:b9:24:a0:3b:2d:
         98:05:5c:7c:2b:05:d2:45:2f:96:b7:c9:6e:1e:4e:68:3c:4b:
         b0:9c:a0:0c:1e:7b:2b:39:21:93:4f:03:80:2a:d1:fa:1d:93:
         10:6a:74:b0:58:65:b6:46:c6:35:87:1c:53:d2:97:15:9d:d9:
         d8:b0:df:a6:0e:2c:94:4e:94:88:85:73:c8:d4:7a:00:55:b8:
         1f:6c:cf:ff:82:f6:2a:a3:a3:24:dc:71:f0:fa:ce:75:4f:a7:
         ac:15:18:fc:da:33:b7:54:14:b4:1c:57:18:f0:fa:53:70:38:
         95:97:b9:42:72:ed:fc:11:cd:a6:0c:40:42:16:0d:77:ad:2e:
         94:b1:3b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:16:21 2025 by rpki-client