Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
File:                     a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft (raw, json)
Hash identifier:          uRuV7jNFoKEkX0VFFnwTE4iwo3W8WNRStTpbiLLqjR4=
Subject key identifier:   00:E9:73:55:EF:24:1D:3F:15:55:E3:69:38:3D:5C:FF:AF:6D:74:40
Authority key identifier: 6B:B0:CB:2A:E4:6D:23:82:58:1F:E8:B7:47:E3:31:B4:68:24:F4:1E
Certificate issuer:       /CN=6bb0cb2ae46d2382581fe8b747e331b46824f41e
Certificate serial:       0198D660D7231645C318611DBC0DEE895EAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 10:02:07 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:07 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:07 +0000
Files and hashes:         1: a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl (hash: 7qNkaF8SXbw+B6oGKqW9VTQUmc0HbgIuD/UenmHAFVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:d7:23:16:45:c3:18:61:1d:bc:0d:ee:89:5e:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bb0cb2ae46d2382581fe8b747e331b46824f41e
        Validity
            Not Before: Aug 23 10:02:07 2025 GMT
            Not After : Aug 24 10:02:07 2025 GMT
        Subject: CN=00e97355ef241d3f1555e369383d5cffaf6d7440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:89:89:98:5b:b1:1c:a5:c7:16:fc:4b:cd:c5:
                    b3:d5:7d:33:6d:83:20:c6:bf:71:3b:c2:cf:d7:1c:
                    8f:05:a8:7f:09:90:a7:ef:ac:ed:d1:54:f4:0d:e1:
                    db:2b:34:e2:bc:b6:23:57:74:18:63:d5:7a:e1:df:
                    29:0c:f3:97:13:3f:8a:76:fe:3f:a7:b7:ff:d6:9e:
                    8a:11:15:7b:11:54:fb:cd:11:18:00:e2:fa:6a:6e:
                    b4:dd:cd:d6:30:26:8d:75:2a:6c:34:fc:70:83:0d:
                    43:5f:55:ff:92:2a:72:9e:d5:d8:82:54:f3:13:1f:
                    88:ff:23:85:46:ae:69:60:ee:da:25:ec:fc:64:c9:
                    bf:84:72:8f:1d:b1:f6:b4:20:ff:1b:a5:b8:1d:13:
                    c3:dd:66:af:d0:20:37:6f:20:11:10:8d:1b:3d:ea:
                    49:ca:56:d0:03:b5:d1:0a:d0:72:a9:e8:57:9a:1d:
                    68:9a:53:c9:6a:f0:1f:53:13:2a:92:be:9e:ce:1a:
                    5b:a6:2e:13:da:00:aa:eb:d3:37:38:1d:d2:2b:4e:
                    ad:a5:24:41:9f:a0:c4:a3:5d:cd:c9:ba:f7:b6:3c:
                    48:2c:35:93:c3:c9:bb:12:1e:b8:65:bf:ee:ac:73:
                    87:5f:4e:11:60:ae:fe:ae:c9:ea:43:89:64:66:7c:
                    42:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E9:73:55:EF:24:1D:3F:15:55:E3:69:38:3D:5C:FF:AF:6D:74:40
            X509v3 Authority Key Identifier:
                keyid:6B:B0:CB:2A:E4:6D:23:82:58:1F:E8:B7:47:E3:31:B4:68:24:F4:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c7:a7:4b:03:e9:e0:a7:09:10:b1:3f:55:9a:0d:2c:e9:0e:
         ff:a5:d8:2d:d3:87:98:38:b5:10:ce:cf:40:98:19:1a:a7:1e:
         62:a6:8c:3a:07:b6:17:07:6e:62:6b:a0:13:8c:7f:9e:cd:3d:
         98:db:e2:fb:0e:7b:f3:39:9d:01:98:09:84:f0:b2:2e:d1:97:
         28:be:f9:6e:b4:eb:af:99:6f:03:86:e6:ef:71:22:c5:f3:6a:
         e9:e0:c2:5c:a0:57:82:ca:42:55:9b:9b:9e:21:0e:df:f0:4f:
         6c:72:84:f1:47:f7:2e:f0:72:90:20:86:6e:35:a5:0f:a9:66:
         09:f8:13:dd:f7:c6:a8:68:81:92:37:69:f1:7e:ae:18:a1:e7:
         a2:2f:be:6d:5b:c0:47:59:93:02:5c:c5:69:fa:ed:14:85:06:
         47:a0:4a:b6:f8:1c:c1:97:e2:42:ae:ef:db:4f:fc:3c:f0:a1:
         1e:a8:6a:b1:e9:93:7d:21:57:4d:9f:c5:e5:f1:ef:89:2e:54:
         00:9a:12:50:b1:ad:79:cf:e0:bf:cc:f3:43:68:20:0d:7d:01:
         87:94:64:ab:64:f2:23:3b:b4:3b:24:60:5b:4c:49:9a:19:1c:
         39:c6:3f:b5:f0:14:c3:25:42:59:71:3f:11:b7:84:c7:72:e3:
         51:55:77:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:31 2025 by rpki-client