Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.mft
File:                     6Vv1iCFn0VKIW0akbDYJbscsEOg.mft (raw, json)
Hash identifier:          xOFcIxad96OwvLDUbhKNjq0o46rCQVNJs3qDFf+mmdk=
Subject key identifier:   C9:9F:52:89:B9:67:0E:AC:F2:F7:18:70:5B:13:01:89:29:07:84:5E
Authority key identifier: E9:5B:F5:88:21:67:D1:52:88:5B:46:A4:6C:36:09:6E:C7:2C:10:E8
Certificate issuer:       /CN=e95bf5882167d152885b46a46c36096ec72c10e8
Certificate serial:       0198D54DDB03BA9740459C75FF8C011D17C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Vv1iCFn0VKIW0akbDYJbscsEOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.mft
Manifest number:          42
Signing time:             Sat 23 Aug 2025 05:01:45 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:45 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:45 +0000
Files and hashes:         1: 6Vv1iCFn0VKIW0akbDYJbscsEOg.crl (hash: at6+K2H2n4Sxw1jrpdha1jamo7Rqm8CoVm9YASLedGM=)
                          2: ecPi4F9FvpvnnyN08rNPNOwyAw0.roa (hash: gVC4oBRFhWQMZYBIpFGSJSlbUZiFGdF6+OMg3NAk+j8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Vv1iCFn0VKIW0akbDYJbscsEOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:db:03:ba:97:40:45:9c:75:ff:8c:01:1d:17:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e95bf5882167d152885b46a46c36096ec72c10e8
        Validity
            Not Before: Aug 23 05:01:45 2025 GMT
            Not After : Aug 24 05:01:45 2025 GMT
        Subject: CN=c99f5289b9670eacf2f718705b1301892907845e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:85:fa:ec:a1:71:c0:c8:b6:3d:8b:96:1c:64:
                    13:a3:c3:7e:7e:c9:5c:f5:27:e6:82:50:a7:01:ea:
                    28:ac:15:6c:d2:4e:5d:7a:e8:82:a8:5e:87:e6:15:
                    a8:0e:72:b7:4e:f1:48:63:ec:53:0e:f1:a2:88:c7:
                    ab:ed:15:a5:c9:4f:d6:2a:51:03:c5:47:d8:59:4d:
                    56:63:09:a2:fd:30:9c:e0:3c:88:7e:00:1b:56:1e:
                    15:02:7e:16:33:b5:1b:6b:cf:15:1e:b8:11:0e:63:
                    5e:b5:66:ce:58:eb:1a:97:52:3f:61:af:e7:06:73:
                    bc:40:4d:e4:8c:15:ae:b4:40:7c:2f:ea:ec:f2:62:
                    82:61:19:e5:5a:0c:b0:0a:20:bf:35:6a:54:1e:4b:
                    5d:c8:fe:ce:a4:32:09:16:87:52:83:b4:ce:6b:9a:
                    3e:82:c5:07:d9:23:56:d4:9a:68:77:71:2e:04:6c:
                    30:57:4e:55:1d:74:9a:fa:0e:02:13:d8:3f:73:22:
                    ac:4c:94:f5:18:87:15:92:02:3d:23:7b:b9:b9:56:
                    18:d9:f7:d2:29:47:c2:62:90:86:a3:19:eb:07:8c:
                    f2:4d:96:49:e6:69:42:ff:60:aa:89:04:db:6d:aa:
                    c9:6f:d7:96:e3:ff:7c:12:76:e9:a5:db:eb:c1:47:
                    45:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9F:52:89:B9:67:0E:AC:F2:F7:18:70:5B:13:01:89:29:07:84:5E
            X509v3 Authority Key Identifier:
                keyid:E9:5B:F5:88:21:67:D1:52:88:5B:46:A4:6C:36:09:6E:C7:2C:10:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Vv1iCFn0VKIW0akbDYJbscsEOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:8a:c4:4e:ef:66:8d:49:ef:23:e6:03:0d:b9:52:d1:7c:39:
         82:33:b3:4d:c3:ea:37:41:df:18:62:88:07:87:3c:7f:f7:f5:
         f3:ce:cc:9f:f4:9f:34:d3:2f:c4:61:ef:95:aa:46:5f:6e:6f:
         68:f9:e2:07:10:c5:a1:1f:38:a8:b1:5d:75:a1:df:68:ba:6a:
         32:49:2f:03:8d:cf:4f:e4:55:e5:10:b9:73:6f:04:fe:46:37:
         87:9e:8d:57:c5:1e:cc:ea:08:ef:06:84:eb:5e:63:fc:76:d8:
         56:4c:fb:09:fa:85:e3:f5:e7:ba:26:1b:f8:71:3e:d9:5f:4f:
         ef:57:d5:e9:82:c1:30:6f:ac:ae:e3:29:c5:28:b4:68:75:74:
         a5:55:61:9d:b9:6a:7c:f9:83:3b:7f:1d:7e:77:44:b1:29:21:
         a4:2d:3c:b7:18:b9:35:da:fa:09:a5:72:68:55:0f:0e:32:9f:
         4f:e7:17:7c:3c:7d:5c:55:ac:53:ec:81:4a:d2:91:b9:d7:31:
         a8:d4:da:97:42:e5:7e:f6:00:aa:d0:3f:b8:d9:2b:24:a2:6e:
         3c:8d:dc:3e:8d:bb:6b:ee:ef:d2:c3:b7:ab:e3:9d:a3:35:fb:
         ef:00:0f:58:f1:28:8c:62:b3:cb:2d:fa:b8:8f:81:f2:89:6d:
         eb:36:23:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:41 2025 by rpki-client