Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
File:                     6UqatkKm6a9PttCsgnGFTevQcHY.mft (raw, json)
Hash identifier:          V38BnQB1Qd8x0Hst/IssQMqRbuSn4hKSNgl9raxhnuk=
Subject key identifier:   5F:97:6C:4D:48:67:73:AA:0D:06:00:E7:FC:DE:20:B3:73:D0:33:DB
Authority key identifier: E9:4A:9A:B6:42:A6:E9:AF:4F:B6:D0:AC:82:71:85:4D:EB:D0:70:76
Certificate issuer:       /CN=e94a9ab642a6e9af4fb6d0ac8271854debd07076
Certificate serial:       0198D5BB8FCB91F1A80505CAFB2589A99215
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
Manifest number:          0CDD
Signing time:             Sat 23 Aug 2025 07:01:35 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:35 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:35 +0000
Files and hashes:         1: 6UqatkKm6a9PttCsgnGFTevQcHY.crl (hash: CqqTer+lLlwUUuG55vVP1+V59jJIymyX77hgA1VpOLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:8f:cb:91:f1:a8:05:05:ca:fb:25:89:a9:92:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94a9ab642a6e9af4fb6d0ac8271854debd07076
        Validity
            Not Before: Aug 23 07:01:35 2025 GMT
            Not After : Aug 24 07:01:35 2025 GMT
        Subject: CN=5f976c4d486773aa0d0600e7fcde20b373d033db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e6:ff:9b:00:ba:0f:85:56:e7:a1:8a:a5:77:
                    2c:3a:56:64:12:70:82:61:9c:96:f4:6d:92:ff:b3:
                    1e:a3:ea:a7:d6:18:6e:35:46:70:20:e6:48:3a:32:
                    66:7f:dd:ac:05:4a:80:65:ae:2a:47:25:26:47:40:
                    47:80:d6:f5:ee:84:b7:61:a9:ab:ed:a2:dd:02:35:
                    bb:c9:fd:dc:a0:e4:a6:b9:4a:c0:79:29:10:e2:fa:
                    15:09:cb:15:10:88:03:c1:4b:b9:1e:c0:b1:d5:a4:
                    76:10:7d:3e:56:67:9d:e0:db:c8:72:c3:93:05:6f:
                    a4:a8:c7:0f:56:25:25:8d:d4:f4:de:b5:78:35:10:
                    e5:45:76:4c:62:51:bc:ae:8d:13:e5:c1:27:1c:6b:
                    1b:83:0a:1f:8b:d9:11:11:16:88:21:c2:da:73:aa:
                    63:6d:bc:34:24:7b:bf:0c:28:3b:66:6d:69:b2:bc:
                    ad:a5:16:ce:a6:7f:36:b8:03:46:b9:c5:45:a9:e9:
                    d7:47:c4:08:5e:a1:c2:b0:fa:25:94:ae:53:77:7e:
                    41:1b:74:5f:34:ce:84:68:5a:ab:3f:d3:6e:b6:5c:
                    53:1d:12:86:0e:91:b1:51:14:ed:b3:4d:b4:3a:06:
                    40:8d:4a:12:90:ca:33:d7:9c:1c:84:b6:8a:77:7f:
                    ee:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:97:6C:4D:48:67:73:AA:0D:06:00:E7:FC:DE:20:B3:73:D0:33:DB
            X509v3 Authority Key Identifier:
                keyid:E9:4A:9A:B6:42:A6:E9:AF:4F:B6:D0:AC:82:71:85:4D:EB:D0:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b5:ac:56:2a:a6:49:09:7f:be:ff:b7:bf:2c:cc:eb:b0:44:
         ae:00:c8:cb:d3:a4:62:79:bf:d8:c2:8c:e8:4e:6f:07:37:00:
         7c:90:a7:7e:28:55:de:dc:a4:e9:bd:45:41:b9:92:c0:88:a6:
         11:ec:0e:86:18:e0:e4:36:57:9a:1f:f4:dd:28:57:c0:3a:1a:
         23:b4:06:59:a1:74:5f:d9:ad:c8:24:15:19:81:70:29:f5:49:
         7c:ad:24:a2:59:46:de:ad:b2:08:25:d0:83:ff:1a:58:b0:d8:
         d4:6d:45:99:55:d3:87:51:11:c6:8c:76:35:2e:87:23:fa:7b:
         f5:7f:58:f8:50:c5:2a:2e:e0:1e:5b:4e:a9:7b:62:39:18:94:
         21:ab:c1:f5:c4:4d:9d:1d:cf:cc:6f:76:36:30:27:7b:ff:53:
         66:b2:a3:21:4b:29:29:12:2c:c0:64:b4:12:dd:18:12:cf:82:
         6c:d7:8b:12:06:bf:98:5f:23:4e:bc:31:79:15:13:79:96:2d:
         f7:4d:91:b7:d6:35:54:6a:29:ce:95:03:e4:b1:0f:42:04:60:
         ba:70:69:42:e9:80:26:ec:22:0d:8d:9a:12:0d:56:ab:fe:3f:
         75:1b:e4:e9:84:96:30:d9:3f:76:d3:51:62:7e:08:01:df:ea:
         24:2b:dc:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu4/LkfGoBQXK+yWJqZIVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NGE5YWI2NDJhNmU5YWY0ZmI2ZDBhYzgyNzE4NTRkZWJk
MDcwNzYwHhcNMjUwODIzMDcwMTM1WhcNMjUwODI0MDcwMTM1WjAzMTEwLwYDVQQD
Eyg1Zjk3NmM0ZDQ4Njc3M2FhMGQwNjAwZTdmY2RlMjBiMzczZDAzM2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOb/mwC6D4VW56GKpXcsOlZkEnCC
YZyW9G2S/7Meo+qn1hhuNUZwIOZIOjJmf92sBUqAZa4qRyUmR0BHgNb17oS3Yamr
7aLdAjW7yf3coOSmuUrAeSkQ4voVCcsVEIgDwUu5HsCx1aR2EH0+Vmed4NvIcsOT
BW+kqMcPViUljdT03rV4NRDlRXZMYlG8ro0T5cEnHGsbgwofi9kRERaIIcLac6pj
bbw0JHu/DCg7Zm1psrytpRbOpn82uANGucVFqenXR8QIXqHCsPollK5Td35BG3Rf
NM6EaFqrP9NutlxTHRKGDpGxURTts020OgZAjUoSkMoz15wchLaKd3/uNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+XbE1IZ3OqDQYA5/zeILNz0DPbMB8GA1UdIwQY
MBaAFOlKmrZCpumvT7bQrIJxhU3r0HB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlVxYXRrS202YTlQdHRDc2duR0ZUZXZRY0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC81NDMzYTktYmNhMy00NWFjLWI2OWQt
MmIzOTg0NzY0M2I3LzEvNlVxYXRrS202YTlQdHRDc2duR0ZUZXZRY0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC81NDMzYTktYmNhMy00NWFjLWI2OWQtMmIzOTg0NzY0M2I3
LzEvNlVxYXRrS202YTlQdHRDc2duR0ZUZXZRY0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLWsViqm
SQl/vv+3vyzM67BErgDIy9OkYnm/2MKM6E5vBzcAfJCnfihV3tyk6b1FQbmSwIim
EewOhhjg5DZXmh/03ShXwDoaI7QGWaF0X9mtyCQVGYFwKfVJfK0kollG3q2yCCXQ
g/8aWLDY1G1FmVXTh1ERxox2NS6HI/p79X9Y+FDFKi7gHltOqXtiORiUIavB9cRN
nR3PzG92NjAne/9TZrKjIUspKRIswGS0Et0YEs+CbNeLEga/mF8jTrwxeRUTeZYt
902Rt9Y1VGopzpUD5LEPQgRgunBpQumAJuwiDY2aEg1Wq/4/dRvk6YSWMNk/dtNR
Yn4IAd/qJCvc+g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:50 2025 by rpki-client