Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft
File:                     c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft (raw, json)
Hash identifier:          MOoNpVyec8vP8bcRTLtWZmMyNrLh1kS3cXNWJ/PjjYU=
Subject key identifier:   37:51:60:2E:9C:E7:A3:B2:88:5E:45:9C:39:03:9B:62:36:8A:5C:4E
Authority key identifier: 73:AB:E1:5F:6C:54:09:2B:10:3D:4A:C0:86:44:46:9A:7B:1E:6F:E4
Certificate issuer:       /CN=73abe15f6c54092b103d4ac08644469a7b1e6fe4
Certificate serial:       0198D5BB9B30986C5FB476F35AAD28D33228
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c6vhX2xUCSsQPUrAhkRGmnseb-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft
Manifest number:          15D5
Signing time:             Sat 23 Aug 2025 07:01:38 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:38 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:38 +0000
Files and hashes:         1: c6vhX2xUCSsQPUrAhkRGmnseb-Q.crl (hash: QO/BfRiHlvPIg3BDeCSX5JlgklblUNOa5ScJYtfRMNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c6vhX2xUCSsQPUrAhkRGmnseb-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:9b:30:98:6c:5f:b4:76:f3:5a:ad:28:d3:32:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73abe15f6c54092b103d4ac08644469a7b1e6fe4
        Validity
            Not Before: Aug 23 07:01:38 2025 GMT
            Not After : Aug 24 07:01:38 2025 GMT
        Subject: CN=3751602e9ce7a3b2885e459c39039b62368a5c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8a:43:ba:bf:93:b8:e9:ae:be:eb:6d:bd:57:
                    cf:6e:00:45:be:bb:49:a0:47:70:ce:2e:3a:be:da:
                    40:62:a3:38:52:4d:d3:a3:38:10:f3:6c:65:60:92:
                    27:20:23:6c:cf:42:d6:ed:51:ef:90:13:e8:07:1b:
                    0a:31:b9:32:0a:73:fd:a9:45:71:e8:a3:10:3c:55:
                    d0:a3:d3:8f:e5:b2:36:22:ae:69:d4:55:2f:c8:d4:
                    88:66:e7:2e:71:45:f8:e1:62:f4:7e:d6:b7:a0:34:
                    d1:93:72:75:84:16:bf:d6:5e:ac:f6:a6:36:79:83:
                    52:ff:9c:84:6d:d5:2b:d5:76:1d:7d:fd:ce:b6:d9:
                    38:b8:84:51:f3:f7:15:ad:65:a0:47:d4:c6:58:e6:
                    df:a5:4f:45:32:ba:c8:23:cb:ae:49:41:12:c6:3d:
                    c5:d1:34:85:4e:45:d5:d9:c3:44:a4:b5:2c:34:1b:
                    0d:16:73:7e:f2:d6:1d:7d:4b:b2:c1:dd:97:5c:99:
                    26:19:c3:96:58:97:08:9b:3a:62:fe:7c:65:02:10:
                    5f:23:79:a8:29:a4:df:f8:d0:b4:d9:3d:9e:64:65:
                    69:60:70:ab:27:12:22:cf:f5:a4:67:f3:92:85:73:
                    73:83:8c:8b:65:e6:0b:4d:24:6f:64:e4:7f:b1:f1:
                    3c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:51:60:2E:9C:E7:A3:B2:88:5E:45:9C:39:03:9B:62:36:8A:5C:4E
            X509v3 Authority Key Identifier:
                keyid:73:AB:E1:5F:6C:54:09:2B:10:3D:4A:C0:86:44:46:9A:7B:1E:6F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6vhX2xUCSsQPUrAhkRGmnseb-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:3a:ec:5e:c8:8f:78:d9:d3:77:40:a6:7b:4b:98:53:75:ec:
         62:80:cd:74:e0:3b:fc:10:fc:21:89:6e:00:ab:0d:12:3b:85:
         29:3b:5a:dc:4f:0c:b7:0c:d1:7f:8c:4f:c9:ee:41:ac:6e:77:
         98:58:a4:40:af:a4:3e:45:70:27:f1:21:f3:9e:31:c1:15:42:
         4c:ad:60:44:b5:f5:6f:88:20:9c:03:9b:4f:f8:e6:18:d2:ab:
         8c:be:47:19:3d:3c:62:3c:b8:03:a1:67:f8:a9:0c:ec:fe:0f:
         69:72:7d:6f:2e:b1:48:21:16:c3:41:2b:69:18:80:4e:c2:bb:
         5c:dd:0d:9f:cd:46:ca:c8:91:8c:8a:30:61:cb:2f:cf:09:30:
         c5:c8:18:43:39:38:20:81:fc:7c:de:95:9d:96:40:9c:02:1a:
         8f:f9:6c:ac:5c:74:9c:cf:24:a3:a8:d8:41:4b:89:5a:c1:33:
         9f:94:09:59:71:81:df:68:50:d2:56:69:1b:11:73:19:7b:ff:
         15:51:85:e9:4c:bc:ba:88:e9:d8:c2:96:f5:79:9e:30:01:42:
         c1:40:ff:40:1b:26:49:1c:a9:f0:51:75:54:33:e2:2e:5b:f2:
         bf:0a:90:d3:26:2e:5c:e1:e1:16:12:37:87:b9:11:f0:74:10:
         d8:15:88:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:59 2025 by rpki-client