Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft
File:                     6ILCYEFZvDDAW58M9unYNhAuqUs.mft (raw, json)
Hash identifier:          TCYbzDKxEfl2U3Sn2Gk3jHw77wy0jXMPYbymjpjS7uM=
Subject key identifier:   A4:81:E9:18:34:80:13:0E:35:89:CA:A4:4E:1A:55:6C:75:92:D0:DB
Authority key identifier: E8:82:C2:60:41:59:BC:30:C0:5B:9F:0C:F6:E9:D8:36:10:2E:A9:4B
Certificate issuer:       /CN=e882c2604159bc30c05b9f0cf6e9d836102ea94b
Certificate serial:       0198D47268B2373CAB96E713B326BDDCBDA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ILCYEFZvDDAW58M9unYNhAuqUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft
Manifest number:          130B
Signing time:             Sat 23 Aug 2025 01:02:04 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:04 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:04 +0000
Files and hashes:         1: 6ILCYEFZvDDAW58M9unYNhAuqUs.crl (hash: wsdOJcjRrUpULas+5Sinx7HTNBZ/jRuTvrfQsESCS4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ILCYEFZvDDAW58M9unYNhAuqUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:68:b2:37:3c:ab:96:e7:13:b3:26:bd:dc:bd:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e882c2604159bc30c05b9f0cf6e9d836102ea94b
        Validity
            Not Before: Aug 23 01:02:04 2025 GMT
            Not After : Aug 24 01:02:04 2025 GMT
        Subject: CN=a481e9183480130e3589caa44e1a556c7592d0db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cf:67:8d:b8:8e:48:d7:85:58:1a:df:c2:64:
                    81:64:03:fd:f4:a1:9d:5b:97:61:41:60:21:df:eb:
                    7c:db:6e:7d:d7:38:d7:21:1b:32:01:d6:ac:05:40:
                    ff:40:25:a8:9b:b5:4e:ad:07:46:82:a7:92:ec:cc:
                    b5:a1:b0:98:84:1a:77:a0:88:43:2b:b2:a8:dd:52:
                    c9:ca:d5:77:28:b9:7e:19:5a:cf:d9:8f:e9:b2:76:
                    27:9f:55:00:c6:ba:0d:ce:e0:24:ab:bb:d4:fc:56:
                    cf:b1:c0:94:35:cb:42:f0:fb:d0:8e:14:bf:a1:28:
                    17:1a:26:c5:d0:b4:74:fc:80:4f:d0:78:83:2b:75:
                    34:34:8e:9f:0e:77:e6:9e:9f:d9:f6:8b:fa:17:aa:
                    b0:15:90:f1:57:d9:89:3c:dd:83:54:82:37:21:8b:
                    63:0a:49:2d:67:69:f0:28:49:03:9d:cc:ce:f3:40:
                    f5:2f:26:98:df:22:d8:29:ec:29:e0:45:c7:e0:13:
                    b8:6a:98:60:6b:a2:76:65:cd:a3:6f:35:97:5f:88:
                    4e:77:ea:cc:f9:d3:5c:80:61:30:8c:3c:90:29:85:
                    e1:69:25:c1:c3:a3:72:11:34:cd:7e:39:96:73:9b:
                    a7:8a:7b:8a:6c:d3:8e:a0:61:f5:e4:4c:25:e8:43:
                    78:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:81:E9:18:34:80:13:0E:35:89:CA:A4:4E:1A:55:6C:75:92:D0:DB
            X509v3 Authority Key Identifier:
                keyid:E8:82:C2:60:41:59:BC:30:C0:5B:9F:0C:F6:E9:D8:36:10:2E:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ILCYEFZvDDAW58M9unYNhAuqUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:8d:12:4c:44:f1:43:60:44:18:05:9e:b6:34:04:c3:00:89:
         9b:32:29:be:bc:bc:2e:6e:ca:f5:92:7b:4f:44:c0:b4:30:cd:
         17:da:54:31:45:7e:1f:73:ff:ec:5a:36:34:f7:8a:2a:4b:21:
         42:20:f2:fd:9e:f0:b8:b7:33:00:de:3d:62:c5:30:6f:4a:6e:
         6e:29:d5:82:cf:18:2e:db:69:33:d5:a0:67:a7:9c:f9:af:36:
         37:1a:c0:ae:bf:c0:4a:af:a6:1c:71:ad:00:b4:5f:fc:1f:c7:
         ea:97:c9:92:2f:91:75:01:0b:ec:e8:7a:fc:0f:48:c7:22:a7:
         3b:1f:ef:bf:dd:3f:24:bd:18:95:1d:2f:7c:b2:d3:71:be:18:
         86:6f:45:98:67:2e:79:8e:45:f6:56:d2:ae:b0:65:b3:08:22:
         2b:fc:7e:f0:65:f0:11:06:7a:c9:df:87:32:57:1f:bc:b8:44:
         bd:b5:70:44:67:15:8b:fb:89:54:83:ca:23:9b:85:99:94:ba:
         89:15:8a:de:1b:c5:36:5e:d3:d9:54:e9:57:c9:f9:aa:85:e3:
         13:57:11:f7:c8:82:aa:ec:66:5f:49:4b:f9:29:c8:45:79:b4:
         9b:0d:c9:5d:eb:1c:c6:33:ce:6c:49:7c:ee:55:1f:c6:ab:e0:
         48:e5:e3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:33 2025 by rpki-client