Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
File:                     6MSDt1wtsc-f9OlMeg_fDbAADwA.mft (raw, json)
Hash identifier:          JIBuQVg7xUOQrQqELUdt1zEBmDrnHh9BnsX78jOXqfw=
Subject key identifier:   9C:C5:E0:52:91:13:DB:56:61:D3:DF:1F:52:7A:7A:A0:93:14:51:A4
Authority key identifier: E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00
Certificate issuer:       /CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
Certificate serial:       0198D5165EA7C3A5B4E18560FAFB2FC420E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
Manifest number:          1185
Signing time:             Sat 23 Aug 2025 04:01:09 +0000
Manifest this update:     Sat 23 Aug 2025 04:01:09 +0000
Manifest next update:     Sun 24 Aug 2025 04:01:09 +0000
Files and hashes:         1: 6MSDt1wtsc-f9OlMeg_fDbAADwA.crl (hash: mcoAnqH7qGXEcbKYwa8GXXaOWxyM4S9oOgyoqD4e1bc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:5e:a7:c3:a5:b4:e1:85:60:fa:fb:2f:c4:20:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
        Validity
            Not Before: Aug 23 04:01:09 2025 GMT
            Not After : Aug 24 04:01:09 2025 GMT
        Subject: CN=9cc5e0529113db5661d3df1f527a7aa0931451a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:63:1f:4f:99:62:6b:06:03:6e:4c:61:eb:84:
                    e3:0f:7e:55:11:e3:4f:22:d7:27:22:45:9e:89:d4:
                    38:38:a1:f0:ea:44:d8:26:5d:e9:91:53:d2:b2:b2:
                    c6:66:fb:9e:59:02:4b:33:55:57:38:5e:a4:0f:5a:
                    74:97:83:7a:dc:e3:c7:6f:e6:84:5a:24:b8:c2:f2:
                    db:cb:1e:fe:ee:76:c0:a3:b3:c1:96:3d:3d:19:77:
                    00:6b:f3:57:07:8c:d4:8a:da:93:1b:fd:ed:02:0d:
                    50:ad:ce:9e:1e:3a:60:c3:fd:34:7e:be:d2:38:4f:
                    69:a9:95:e0:84:f7:46:1f:ca:6a:1e:b4:b7:6d:fc:
                    7b:1a:46:6e:2d:f4:48:91:3e:06:d8:a6:d8:e8:84:
                    e2:b3:f9:38:c5:89:de:0e:e3:10:e5:c3:4b:39:4c:
                    f2:7f:71:f2:cb:b4:e5:91:43:b7:8f:c0:46:b5:96:
                    1f:cb:12:6e:ba:98:ba:d0:c5:9a:3a:9d:1f:e0:2d:
                    a2:cd:3d:0e:02:b3:84:bd:21:d3:41:f6:ee:c2:2b:
                    0b:50:3e:70:54:cd:99:69:05:3d:63:92:eb:5e:60:
                    e1:39:08:33:b4:8d:ba:f6:f4:53:a0:9f:d2:5b:77:
                    12:2b:f6:75:2c:c2:9a:16:d6:80:b4:f3:37:5f:1c:
                    90:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C5:E0:52:91:13:DB:56:61:D3:DF:1F:52:7A:7A:A0:93:14:51:A4
            X509v3 Authority Key Identifier:
                keyid:E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:9e:b6:da:2a:be:17:0f:b1:db:ef:fd:c8:e6:94:64:89:55:
         d2:46:54:8f:b0:f2:f9:df:aa:c5:2e:b4:0f:56:6a:fd:82:d2:
         a8:c4:75:04:e2:a7:cc:b4:cb:59:6f:27:db:a4:b6:49:54:56:
         5e:a3:ed:b7:fd:4c:70:85:08:a3:1d:2e:57:44:33:d7:8d:bf:
         66:a7:86:c7:60:e8:19:0e:b0:4a:64:9c:5a:93:c5:5e:f9:a2:
         b5:c7:0f:9c:db:f4:bb:13:a6:7a:44:1a:a6:31:49:9c:7a:ca:
         a1:1a:de:55:29:11:9d:ab:6c:89:09:5b:6b:f4:96:17:45:ca:
         20:15:2e:36:9f:54:ad:4f:96:99:26:f7:95:68:97:37:80:3c:
         95:fd:90:1e:73:d6:5d:12:ed:6f:ce:91:9b:ff:fe:10:57:bf:
         b7:22:e5:77:21:c6:79:35:18:66:95:16:31:0c:6d:3a:1f:c2:
         a4:d2:e5:45:5d:cb:c7:0e:33:c2:96:a4:f8:c2:10:11:b9:b0:
         b6:f9:09:82:16:86:51:fa:00:61:85:7b:08:47:ae:f5:bb:67:
         f0:91:0a:1b:b0:c0:3b:95:19:9f:bc:c8:78:38:08:3e:81:76:
         f4:2e:d6:42:b7:b4:f7:77:79:1b:f4:25:d4:0d:03:65:61:e4:
         70:35:5a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:45 2025 by rpki-client