Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
File:                     9vwoeVAOHrgIVXBc-ENeA2NRN94.mft (raw, json)
Hash identifier:          9F/d4h8HPnlAuEfyH+MIWVotqizlyucb03/Cq5fVIAA=
Subject key identifier:   C8:AA:C3:A2:83:83:0A:8C:8A:19:5D:53:76:B9:1E:D6:64:73:02:90
Authority key identifier: F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE
Certificate issuer:       /CN=f6fc2879500e1eb80855705cf8435e03635137de
Certificate serial:       0198D473BBBA0766C5B2C813032C9B7BA0B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
Manifest number:          069B
Signing time:             Sat 23 Aug 2025 01:03:31 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:31 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:31 +0000
Files and hashes:         1: 9vwoeVAOHrgIVXBc-ENeA2NRN94.crl (hash: nH9klwe+0Co+BJHDO2QObpfnEXAS0o7cuXbKW1hqj1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:bb:ba:07:66:c5:b2:c8:13:03:2c:9b:7b:a0:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6fc2879500e1eb80855705cf8435e03635137de
        Validity
            Not Before: Aug 23 01:03:31 2025 GMT
            Not After : Aug 24 01:03:31 2025 GMT
        Subject: CN=c8aac3a283830a8c8a195d5376b91ed664730290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7d:14:ce:4c:17:42:da:2b:4d:18:f2:02:f1:
                    c5:90:46:ed:17:93:0f:41:da:00:60:64:6e:f4:9b:
                    7b:0a:3a:b9:46:53:c4:55:8a:03:36:40:dc:4c:d9:
                    e1:8a:ca:aa:11:dd:16:c3:a9:33:cd:01:51:2f:c9:
                    d7:9b:a9:e3:e5:8a:0d:03:16:2e:b3:ec:45:2e:04:
                    05:18:00:e3:d2:df:12:b9:54:5e:1a:cd:56:ba:42:
                    b5:b6:a4:4a:33:a0:a3:67:fb:f9:b4:f5:4e:2d:ef:
                    71:87:34:14:07:20:7d:95:b2:80:36:ce:ff:b0:35:
                    cf:e7:fd:e2:6e:b2:d7:10:3a:65:9e:16:9d:9e:e4:
                    98:07:68:4f:62:92:1a:9d:79:70:44:ee:7b:a8:ba:
                    72:98:c8:95:a5:72:52:de:3a:e2:2d:ed:b1:2e:b1:
                    53:d9:95:22:a8:36:5d:2a:f7:62:0b:56:1a:e1:9c:
                    a5:0e:de:86:2b:3f:a9:86:21:60:f9:84:a5:6d:0d:
                    d2:e4:52:79:45:d9:fb:f1:a2:50:4c:09:75:4d:23:
                    d1:41:b0:6a:44:ee:8e:ad:38:81:67:8f:57:49:b9:
                    4a:10:92:00:64:25:a1:09:32:07:9f:3b:35:df:74:
                    a0:92:28:4c:17:2b:fb:de:db:91:35:26:b7:46:2e:
                    c4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AA:C3:A2:83:83:0A:8C:8A:19:5D:53:76:B9:1E:D6:64:73:02:90
            X509v3 Authority Key Identifier:
                keyid:F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:0d:9c:d0:66:2f:3e:16:b5:a1:c2:15:f5:f7:ef:b6:de:0a:
         64:9c:ef:b7:ab:a4:54:60:d2:fa:1e:56:73:ef:fc:7b:f4:5d:
         a2:df:16:97:79:cd:25:6d:d3:eb:2c:2a:11:a6:5d:c3:91:2f:
         ec:22:e6:14:07:fa:f0:88:3b:1a:a4:f0:b5:2f:cc:44:5b:34:
         e8:6a:03:cd:d9:7e:c6:e4:69:50:c6:34:45:fe:cb:a4:a2:b6:
         7e:2a:3b:43:ba:60:39:d5:3c:5a:75:2d:bd:2c:0e:00:d3:7e:
         3a:56:5b:03:3e:31:61:b9:d2:15:08:76:91:04:ff:2c:2b:7e:
         73:39:2f:39:6f:e0:f4:d5:63:82:46:80:fc:21:da:17:6a:aa:
         48:5c:6b:72:c3:e1:23:94:de:a2:07:ef:12:c4:d8:96:2a:2c:
         3a:f1:78:74:15:d7:96:47:f8:13:77:ea:a7:54:85:cc:29:5b:
         7e:4a:be:5f:32:a2:fd:78:71:96:f0:46:fe:1c:12:b8:80:1b:
         8a:36:b2:87:c0:7c:25:58:01:0a:dc:0c:3a:59:eb:7a:34:cb:
         ed:25:0c:29:20:9a:3b:b5:a1:33:c3:20:23:79:be:7a:42:a1:
         15:c5:22:1a:4a:4b:91:b8:7d:8c:c4:45:17:ed:ae:3d:75:bd:
         9f:b5:0d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:38 2025 by rpki-client