Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
File:                     6po2KjoeqNaaLSY__8GA2rWjgck.mft (raw, json)
Hash identifier:          XPk0EDmng3DnfHwdCCziStOR+t12OHNfCC2rBd+5qF4=
Subject key identifier:   C2:B1:27:E1:F7:C6:C9:38:AA:AD:CD:0F:9F:AB:7E:D6:52:D5:DA:99
Authority key identifier: EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9
Certificate issuer:       /CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
Certificate serial:       0198D4E01D3CA94AED9F5889A547D3F3DC96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
Manifest number:          0A3C
Signing time:             Sat 23 Aug 2025 03:01:53 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:53 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:53 +0000
Files and hashes:         1: 6po2KjoeqNaaLSY__8GA2rWjgck.crl (hash: OcjQep/R7EIcamNAHiIPg1Sr1VRxAxKIqKKh9PCwZqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:1d:3c:a9:4a:ed:9f:58:89:a5:47:d3:f3:dc:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
        Validity
            Not Before: Aug 23 03:01:53 2025 GMT
            Not After : Aug 24 03:01:53 2025 GMT
        Subject: CN=c2b127e1f7c6c938aaadcd0f9fab7ed652d5da99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ef:21:85:63:b6:62:4a:6d:96:56:b9:a9:43:
                    e3:36:2a:67:c0:c0:45:28:18:94:48:80:c4:fd:fe:
                    eb:4c:d1:59:2e:aa:85:c9:88:b9:69:e3:81:48:ff:
                    98:bb:f6:48:ac:f9:c5:f6:ec:e1:c5:4c:03:e8:cf:
                    ee:10:0e:ea:96:a7:50:0e:76:b3:20:d2:8a:58:73:
                    3c:a0:e5:14:a6:2d:47:34:09:50:2f:11:22:9c:8d:
                    ad:da:0d:e4:e5:59:67:d9:06:91:49:5e:66:92:28:
                    b3:54:eb:0b:76:2b:08:92:a4:eb:6b:de:7d:4a:63:
                    2e:2c:64:21:2a:46:af:21:92:56:bb:fb:41:66:3e:
                    86:ef:17:80:1f:af:13:cd:d8:1b:ec:8d:ff:04:97:
                    39:3e:e8:e7:bf:f8:79:b9:66:3f:f7:49:cf:f3:df:
                    0d:56:8a:0c:df:3b:8d:d8:11:34:f3:16:1a:de:cb:
                    23:42:00:5f:dd:92:4d:2c:a6:1c:57:31:34:36:5d:
                    e2:39:75:2d:9f:83:7e:b4:b3:43:c6:d0:47:6e:dd:
                    52:54:37:44:20:3d:4d:c7:46:47:8d:8c:b5:05:ec:
                    61:2a:68:76:c5:c4:02:fb:4f:f2:6c:c4:45:cc:a1:
                    81:2e:0d:cd:f2:10:c8:9c:2a:e1:85:74:e7:07:d5:
                    4a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B1:27:E1:F7:C6:C9:38:AA:AD:CD:0F:9F:AB:7E:D6:52:D5:DA:99
            X509v3 Authority Key Identifier:
                keyid:EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:5e:09:e2:6f:e0:8b:aa:27:b4:a7:af:1c:aa:22:25:24:54:
         8f:88:37:13:e8:f9:a8:e8:6b:f9:5f:d1:df:43:07:6a:2a:c9:
         83:01:12:07:6a:87:f9:42:bc:b0:2b:f9:78:b9:06:1c:b1:6b:
         8a:20:33:62:ca:78:c1:e8:07:5f:23:07:54:8d:2b:19:63:67:
         62:e0:f2:d3:70:d8:b6:d7:d9:ce:88:bd:5e:74:8f:bc:7c:0b:
         17:6a:80:02:e9:96:bd:17:02:dd:12:83:82:8c:31:1b:0b:8d:
         4f:9f:85:92:c8:c6:a0:ea:ed:33:09:a6:df:5c:eb:2c:2f:95:
         05:ff:31:26:b8:80:3d:f0:97:05:86:d4:df:47:35:a4:8e:7e:
         8f:9f:66:5b:76:bd:8a:e2:83:ec:c1:86:f3:5f:de:32:c3:18:
         a3:f0:cf:fa:be:a7:62:ac:2d:3c:81:ef:7f:a9:96:18:60:65:
         14:cb:3d:93:e2:b8:9b:94:95:d6:5b:64:b8:4d:d2:19:49:f1:
         32:aa:8e:8e:1b:18:b7:c2:e8:a9:c8:72:df:40:61:ec:4b:76:
         b2:35:78:52:a7:11:22:5f:4f:65:f4:2c:f1:2c:7e:04:bc:9f:
         65:57:58:3c:11:ab:2f:b8:48:ca:a1:1b:74:05:b8:69:ce:b6:
         6d:f9:f5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:33 2025 by rpki-client