Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
File:                     6fxsgWY89vzpLoPl1mKLwOtqlNI.mft (raw, json)
Hash identifier:          tMDGGWXfveyOUcSo6qnppJOoBcA0YGSranAFQiuJusI=
Subject key identifier:   74:27:ED:21:0E:FE:0E:BF:34:74:52:67:AD:DC:1B:3D:B8:7A:19:B7
Authority key identifier: E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2
Certificate issuer:       /CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2
Certificate serial:       0198D5F159752ACABD413A89CDAEC32D7BC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
Manifest number:          03D5
Signing time:             Sat 23 Aug 2025 08:00:20 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:20 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:20 +0000
Files and hashes:         1: 6fxsgWY89vzpLoPl1mKLwOtqlNI.crl (hash: 1bdSbeXnrDgmfBClcMkiRG1Yik/fmIvG6xvkvdHpPRQ=)
                          2: hiFOlTDCg2a8NEVG384am3Bu0NI.roa (hash: QsAcrNKEK47Yz8Letal9hjURM1pVKMmWpzSetDZsOkE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:59:75:2a:ca:bd:41:3a:89:cd:ae:c3:2d:7b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2
        Validity
            Not Before: Aug 23 08:00:20 2025 GMT
            Not After : Aug 24 08:00:20 2025 GMT
        Subject: CN=7427ed210efe0ebf34745267addc1b3db87a19b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:85:6c:68:13:08:1b:73:d1:f2:35:2b:6d:a1:
                    ec:e1:ef:e7:b1:72:3a:aa:56:fc:39:db:c5:5e:96:
                    6d:52:10:88:19:e9:70:77:69:bc:33:e1:45:22:cf:
                    e6:09:e3:8b:10:17:9b:41:ab:31:cf:00:df:ca:67:
                    f4:88:db:63:e8:b1:4a:11:47:d1:07:9c:3b:03:e1:
                    d8:64:00:9b:39:92:2c:a9:33:84:85:08:45:e4:9f:
                    56:d6:f7:f0:e7:37:5c:ed:37:41:27:e1:97:7e:d9:
                    63:2e:c4:f1:81:42:cb:d0:99:69:34:22:36:ec:91:
                    a4:34:6e:bb:7d:da:2f:83:b5:3f:99:24:8c:a9:55:
                    0c:0e:0d:07:1b:a7:7d:9a:09:c1:0a:79:af:5e:3b:
                    8d:d7:cf:3d:a7:41:de:37:19:9d:21:73:16:4d:50:
                    db:c0:90:4f:10:e6:69:f6:94:13:f8:75:4b:7c:60:
                    2f:c8:9e:5e:5d:84:43:53:4e:73:5c:4a:f3:b0:04:
                    ba:95:f1:ab:67:21:20:a8:7e:2d:74:ee:5d:83:17:
                    bc:1f:c1:ef:53:fa:46:ab:9c:0f:fc:03:6b:7e:3f:
                    24:17:09:93:22:18:b7:80:95:46:5e:f3:90:50:a4:
                    79:67:83:30:1a:dc:b1:84:19:c3:a0:b5:13:87:2c:
                    02:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:27:ED:21:0E:FE:0E:BF:34:74:52:67:AD:DC:1B:3D:B8:7A:19:B7
            X509v3 Authority Key Identifier:
                keyid:E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:97:71:3c:9c:17:14:ed:49:5e:93:0c:91:f6:3c:33:cd:68:
         6f:b6:d0:2c:da:33:b8:90:7e:40:08:ff:36:fd:3a:b0:26:4a:
         17:60:48:6a:7d:b5:7a:51:a9:74:e7:b2:d5:97:9d:7c:87:29:
         41:ac:82:f0:09:b0:e3:6c:ec:f2:41:54:9b:a6:0e:e3:47:af:
         b8:ed:4f:cd:b1:41:ac:12:56:ec:66:c2:b1:8c:07:ff:a4:5c:
         6f:7c:d1:48:9d:2f:59:21:1c:de:ef:ed:4d:ed:86:ed:ec:ff:
         39:64:7c:89:3f:c7:6d:61:aa:97:79:ed:12:f7:8d:5d:8c:1b:
         3e:2d:b3:08:55:03:b4:25:1e:14:a4:65:0b:9b:fb:9b:85:ce:
         20:cf:c8:99:66:c4:29:89:2d:82:6f:d2:03:ff:47:26:67:4d:
         65:fc:76:f3:54:b4:24:b9:3b:21:4f:42:e2:87:df:a3:1b:4b:
         df:0b:89:f9:9a:d7:d8:18:5d:ed:97:ac:42:20:fe:52:e2:0a:
         4c:5c:aa:05:f9:60:bc:0a:c7:0d:25:22:28:38:42:d8:dd:c1:
         6f:6e:57:fd:09:b2:a2:f6:85:b3:f8:cb:c6:75:c9:54:1a:8d:
         f6:73:d0:4a:71:4d:c5:94:8e:ba:e9:0e:54:6c:8e:6f:54:07:
         3f:a9:95:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:36 2025 by rpki-client