Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
File:                     6vlt8xs_QE31t345nOeTcbT0REM.mft (raw, json)
Hash identifier:          9eYaZU9gE5dSDfDsZ52Etk1nkv7E/U60ExzkBrbKK/c=
Subject key identifier:   89:A7:94:57:FD:98:69:C3:F3:CB:9B:5B:F9:A0:F2:C0:FA:0F:0F:66
Authority key identifier: EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43
Certificate issuer:       /CN=eaf96df31b3f404df5b77e399ce79371b4f44443
Certificate serial:       0198D7733D722361CC287CC428ADDA1C2FDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
Manifest number:          03EE
Signing time:             Sat 23 Aug 2025 15:01:50 +0000
Manifest this update:     Sat 23 Aug 2025 15:01:50 +0000
Manifest next update:     Sun 24 Aug 2025 15:01:50 +0000
Files and hashes:         1: 6vlt8xs_QE31t345nOeTcbT0REM.crl (hash: IIGXTXY4+onO7vM9AzSOJgBWAZc+P04/e41883px1cg=)
                          2: zku7rL4ehWHvRZK1RwrAb6MT-1c.roa (hash: nNwzvzSXO21Gwoc000T5O5APuYh4t3vWkKVJ9XFGR80=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:73:3d:72:23:61:cc:28:7c:c4:28:ad:da:1c:2f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaf96df31b3f404df5b77e399ce79371b4f44443
        Validity
            Not Before: Aug 23 15:01:50 2025 GMT
            Not After : Aug 24 15:01:50 2025 GMT
        Subject: CN=89a79457fd9869c3f3cb9b5bf9a0f2c0fa0f0f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:25:20:ce:ff:51:2b:a6:c4:b9:77:57:1c:d7:
                    88:9e:25:d6:90:3d:b9:43:ac:b9:25:f1:4a:e9:5e:
                    c7:d5:a2:e7:85:c5:4d:20:52:1c:2f:99:44:30:76:
                    3a:1f:95:d7:b8:47:f7:c7:5f:3a:7a:4f:66:af:c5:
                    55:9a:4b:ef:17:0c:9d:63:64:d5:ef:e6:37:26:4e:
                    5b:0c:93:bf:93:6c:a0:c6:f0:d2:e6:14:98:34:56:
                    d1:07:c2:8e:a4:88:a4:a9:c3:f3:20:1d:0d:fd:a7:
                    1a:3b:8b:a4:59:62:a4:2e:b8:10:80:7e:be:5c:e0:
                    42:5d:30:07:ac:e6:f3:6c:e1:06:06:16:95:f8:46:
                    71:ad:6b:e4:f6:80:4c:40:e7:e4:04:2f:28:96:9e:
                    43:47:98:36:96:08:ae:60:5e:9e:1c:b9:a7:82:8e:
                    2b:df:25:ee:84:f1:a3:e7:33:87:bb:74:61:58:ab:
                    f8:18:b9:b4:22:d8:30:ff:da:e6:3e:b6:9d:61:c2:
                    de:c2:2e:54:14:bd:a0:4d:62:78:c7:86:b5:a6:80:
                    70:d6:f9:59:a5:51:b2:bb:c2:40:d9:6c:2c:82:e2:
                    a9:c8:27:fa:9c:e3:42:dc:cc:d2:93:45:c0:18:69:
                    89:dc:e9:33:45:5c:b7:1e:56:e3:bb:c7:6b:8e:b2:
                    e7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A7:94:57:FD:98:69:C3:F3:CB:9B:5B:F9:A0:F2:C0:FA:0F:0F:66
            X509v3 Authority Key Identifier:
                keyid:EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:0b:8d:cc:d7:47:fe:16:f8:4d:9a:9b:83:3a:9a:27:b7:75:
         da:71:2a:18:6e:5b:da:ba:44:14:2d:6e:8b:d1:47:91:54:a5:
         62:58:34:e1:22:f0:d2:80:86:8b:7d:5d:28:16:b8:fb:3d:81:
         87:47:60:7d:f8:6a:60:0c:94:55:e3:cf:dd:e2:bd:75:de:8d:
         e5:26:2a:30:46:02:6e:ec:f4:06:34:35:f3:f8:fc:48:19:01:
         54:c3:03:59:ca:f7:00:0b:f9:d7:0b:1c:12:d6:ab:c1:78:17:
         36:56:46:f4:f1:2d:a3:96:c5:35:25:23:c7:66:ff:84:e9:4e:
         a4:ea:38:11:3e:b0:cf:75:be:6c:2b:eb:41:2c:27:2c:e4:1a:
         1d:6f:b8:9a:cc:56:24:1f:b5:d8:03:99:07:a1:5c:42:b3:3d:
         5c:cb:6c:2c:0f:99:9a:8e:17:6e:eb:6f:62:fa:a2:e9:c8:d4:
         bf:13:ea:ea:84:74:54:24:3d:b2:29:b1:64:2f:7c:4f:00:7e:
         0b:5b:65:6f:d0:1e:ba:be:39:15:8a:58:6c:18:7c:fe:83:e5:
         42:80:05:63:3d:2a:5b:3b:94:da:9c:d7:a7:1f:c3:d4:26:1e:
         4f:b2:2e:9a:9c:06:ce:b8:fb:c6:96:ca:e2:e6:9d:f9:bc:72:
         74:3f:28:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:14:35 2025 by rpki-client