Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
File:                     6xUL-GuHz4n8RJBgZfaXKwawnqg.mft (raw, json)
Hash identifier:          QTw2RgF7UL8/BG3qJsSLeXkCR/c+wMQ0LHz8K0JFWJg=
Subject key identifier:   45:C3:1E:67:12:DD:44:EE:CF:F6:E6:8B:DE:31:AF:15:A4:CF:F6:DA
Authority key identifier: EB:15:0B:F8:6B:87:CF:89:FC:44:90:60:65:F6:97:2B:06:B0:9E:A8
Certificate issuer:       /CN=eb150bf86b87cf89fc44906065f6972b06b09ea8
Certificate serial:       0198D47267C4CC0E083DFCF585F3023BC374
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 01:02:04 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:04 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:04 +0000
Files and hashes:         1: 6xUL-GuHz4n8RJBgZfaXKwawnqg.crl (hash: LlY4U7q3jHTd7ZcjXf9nO9C+sLdOwSwuay6Lauz9MeE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:67:c4:cc:0e:08:3d:fc:f5:85:f3:02:3b:c3:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb150bf86b87cf89fc44906065f6972b06b09ea8
        Validity
            Not Before: Aug 23 01:02:04 2025 GMT
            Not After : Aug 24 01:02:04 2025 GMT
        Subject: CN=45c31e6712dd44eecff6e68bde31af15a4cff6da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:e3:13:b6:25:cc:51:27:85:e7:c9:28:88:
                    31:9d:ee:ea:93:f6:69:8e:dc:c4:50:f4:bf:29:58:
                    c9:65:77:2d:56:89:6d:74:e7:c7:72:05:08:e9:de:
                    28:38:fe:c8:6e:99:ff:3a:7a:ba:f0:70:bd:7e:46:
                    22:72:4f:81:ce:5b:d6:5f:f0:ab:d7:db:18:d5:7d:
                    51:a5:89:f9:ed:27:3e:b1:d2:97:18:34:46:8f:44:
                    91:f2:27:f3:8f:f1:c7:12:2d:63:c9:b4:a1:01:9b:
                    81:14:47:72:fc:f8:0d:15:bc:f3:7d:9e:b9:56:b7:
                    57:5e:a2:42:b2:3b:53:83:b1:f5:88:6f:23:ea:8c:
                    06:60:43:ea:1a:3f:79:d9:d8:69:de:68:80:ec:49:
                    16:13:25:e0:4d:fe:e0:84:cc:ae:2b:63:a7:97:f9:
                    f2:bc:14:06:11:67:9f:a6:0c:37:ce:31:ee:e9:b9:
                    01:10:38:0e:6a:93:a1:0b:78:0b:7e:b7:85:a2:51:
                    c7:90:f4:98:29:74:a9:42:25:fa:0b:86:97:52:46:
                    47:3c:60:0f:49:8f:5b:4c:fe:97:26:6e:e0:25:a4:
                    81:f5:72:02:04:55:3f:ba:a2:be:3b:7d:40:61:33:
                    d7:bc:b7:b6:d2:92:3b:f7:de:a6:39:03:c3:b6:e1:
                    81:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C3:1E:67:12:DD:44:EE:CF:F6:E6:8B:DE:31:AF:15:A4:CF:F6:DA
            X509v3 Authority Key Identifier:
                keyid:EB:15:0B:F8:6B:87:CF:89:FC:44:90:60:65:F6:97:2B:06:B0:9E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:0d:07:16:4b:f4:f1:b6:4e:cd:99:61:18:84:45:85:8d:b8:
         c9:bf:ac:87:f9:57:72:9e:0a:5d:00:55:8b:ef:20:a4:3c:e7:
         1b:08:e8:b9:29:c0:56:6d:9b:32:3f:f7:f7:57:ff:61:c6:97:
         98:82:e6:c9:c2:e0:2f:a6:bb:df:bd:3f:4f:a6:14:ce:6a:6c:
         11:4e:b6:3e:38:7b:e1:b9:24:d1:b3:0d:f0:9c:56:cb:6e:de:
         7f:0d:81:ea:20:ae:72:3b:02:b9:92:9a:44:e9:b5:44:e2:82:
         eb:3d:23:62:68:08:46:2e:1f:a9:58:11:ae:5c:dc:ac:21:b6:
         ec:29:23:22:b1:37:47:56:5a:a7:5f:8f:85:c8:cc:80:9e:2d:
         4f:44:e6:e8:38:d4:20:67:b2:cf:03:21:60:92:38:cd:93:ae:
         08:2f:eb:97:12:df:4b:4d:de:e1:3b:77:f9:98:5f:ce:12:7e:
         8e:14:5d:04:7d:4a:bc:60:86:58:4c:dd:59:43:f9:a3:7a:16:
         df:5c:ce:1b:52:5b:71:71:84:c2:43:34:c1:3d:0c:ab:92:2b:
         c3:cc:37:1d:38:3a:b6:99:08:d9:ef:2a:69:02:03:0c:4f:7d:
         9e:2a:50:e7:4a:12:67:1c:4b:42:d3:f1:73:db:9d:c6:ea:7f:
         25:fa:4a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:30 2025 by rpki-client