Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft
File:                     6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft (raw, json)
Hash identifier:          umEGPVkaMixsNNJ2gzf4jDJJwOMFMD7emlnZq80vh/U=
Subject key identifier:   BB:FA:A6:CE:16:0D:BE:64:07:13:C3:48:39:85:20:D6:7E:29:6B:3B
Authority key identifier: EA:35:52:FC:45:A3:66:40:9B:9F:C7:BD:96:13:A5:9F:1F:E0:6E:4D
Certificate issuer:       /CN=ea3552fc45a366409b9fc7bd9613a59f1fe06e4d
Certificate serial:       0198D7A8A9C5ABD5025CF0A025461DB58A89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6jVS_EWjZkCbn8e9lhOlnx_gbk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft
Manifest number:          0A57
Signing time:             Sat 23 Aug 2025 16:00:11 +0000
Manifest this update:     Sat 23 Aug 2025 16:00:11 +0000
Manifest next update:     Sun 24 Aug 2025 16:00:11 +0000
Files and hashes:         1: 6jVS_EWjZkCbn8e9lhOlnx_gbk0.crl (hash: +zzAFvQeHfdAm27H09mimiK3eIYxO30u3ltRR7qBzOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6jVS_EWjZkCbn8e9lhOlnx_gbk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a8:a9:c5:ab:d5:02:5c:f0:a0:25:46:1d:b5:8a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea3552fc45a366409b9fc7bd9613a59f1fe06e4d
        Validity
            Not Before: Aug 23 16:00:11 2025 GMT
            Not After : Aug 24 16:00:11 2025 GMT
        Subject: CN=bbfaa6ce160dbe640713c348398520d67e296b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:18:26:f8:5a:5d:27:77:1f:7c:07:3d:0b:af:
                    a4:02:fb:25:16:c3:16:4b:1d:f8:5e:14:74:17:1b:
                    49:2e:65:40:85:ca:20:7f:0d:fd:e6:4d:45:84:4c:
                    05:74:0a:8a:2c:c8:8e:15:24:12:76:28:11:a0:20:
                    c0:2a:bd:d4:cf:1c:7b:3d:3c:35:d0:e8:3c:c8:44:
                    41:9f:8c:9f:e4:d6:fd:92:5e:97:04:c0:99:22:44:
                    05:aa:e8:89:c1:d2:e7:ca:51:8c:60:8e:bd:03:d8:
                    e8:98:a9:a8:d5:00:b0:ad:a9:26:c9:32:fc:6f:b5:
                    7f:20:24:c9:1a:a5:13:79:52:34:7d:26:9a:49:00:
                    ce:da:d7:00:f7:74:a2:ca:6d:71:81:22:aa:1f:da:
                    f7:b5:8d:b3:1e:de:88:dc:78:24:77:55:6e:10:0f:
                    29:15:69:aa:66:a3:95:86:7b:2f:7a:15:52:d4:de:
                    97:ca:a0:32:a3:f7:d6:bb:c1:2b:57:3b:df:6a:01:
                    73:cc:b9:8b:92:d0:65:32:81:5c:82:40:51:c1:f7:
                    91:5e:67:e9:94:6c:58:3b:4a:1f:72:f6:07:c7:ee:
                    de:ec:2b:52:80:8f:44:44:a2:af:f2:6e:a7:3a:c0:
                    c8:89:97:3a:d1:b4:61:96:50:1d:d2:d5:96:ae:44:
                    a4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FA:A6:CE:16:0D:BE:64:07:13:C3:48:39:85:20:D6:7E:29:6B:3B
            X509v3 Authority Key Identifier:
                keyid:EA:35:52:FC:45:A3:66:40:9B:9F:C7:BD:96:13:A5:9F:1F:E0:6E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jVS_EWjZkCbn8e9lhOlnx_gbk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:2b:1e:bf:ce:6f:e9:d9:6b:87:fc:89:ac:8a:93:cf:88:a9:
         ef:96:2c:cb:7f:04:4f:72:3c:ba:36:86:04:74:75:cb:8d:31:
         da:55:6a:ed:6f:db:b2:ef:d4:02:2e:de:1e:9a:50:bf:8a:44:
         d7:79:48:2f:27:44:39:0a:4b:fa:d4:a9:79:7a:00:7d:bc:50:
         9d:8d:3e:93:a0:29:b9:01:fb:b9:ed:86:63:aa:15:07:fe:18:
         49:8d:7d:44:29:af:e7:84:27:e8:1e:7d:c1:4c:de:ea:46:bf:
         b6:07:be:94:27:0d:41:6d:64:a5:48:59:77:b7:32:cb:2c:ee:
         66:37:d7:fd:c5:cb:5d:11:21:37:41:42:23:d3:5a:8e:f4:f2:
         44:64:2f:69:48:ed:af:1b:68:c9:69:46:ea:07:ea:d4:a7:e1:
         f6:91:e8:2c:7b:4c:07:d0:c0:b4:0e:79:9f:c4:8c:a3:01:9f:
         87:41:88:5b:ac:50:d9:64:9f:7d:32:77:73:4a:57:a3:fe:27:
         5a:6b:4e:bc:90:a8:d6:21:f4:2a:a9:b1:5d:b8:93:3f:6b:3d:
         d4:16:08:35:0b:8b:39:0e:86:6a:9f:5e:a0:d6:64:68:02:bf:
         e4:52:00:a2:87:67:0c:0d:0c:4a:8a:5c:6e:1f:11:3e:2b:b3:
         16:0f:ab:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:25:53 2025 by rpki-client