Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft
File:                     6rBQEXItJcEknmWLLK7MEYwp6CI.mft (raw, json)
Hash identifier:          3TsEJi4rvk5C8Sfw4exOCaD9lrR4hiFpm28QLUtE524=
Subject key identifier:   30:36:07:CB:C3:D7:1F:DF:10:2B:C0:84:63:84:E5:6A:6B:8C:68:F5
Authority key identifier: EA:B0:50:11:72:2D:25:C1:24:9E:65:8B:2C:AE:CC:11:8C:29:E8:22
Certificate issuer:       /CN=eab05011722d25c1249e658b2caecc118c29e822
Certificate serial:       0198D515C9E8B7CE460D885170E1DBF9FDCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6rBQEXItJcEknmWLLK7MEYwp6CI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft
Manifest number:          03C7
Signing time:             Sat 23 Aug 2025 04:00:31 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:31 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:31 +0000
Files and hashes:         1: 6rBQEXItJcEknmWLLK7MEYwp6CI.crl (hash: Kryucr4QUgRGAiH8o+zyFBp9Go0J6FMI/lnQtRPJKiY=)
                          2: CJPWpn8RP7gsAwpJK6rfiafLL0g.roa (hash: MSILC9AgMAOaApiwEtXOHau49IMY7PQIrPiC8xgTPYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6rBQEXItJcEknmWLLK7MEYwp6CI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:c9:e8:b7:ce:46:0d:88:51:70:e1:db:f9:fd:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eab05011722d25c1249e658b2caecc118c29e822
        Validity
            Not Before: Aug 23 04:00:31 2025 GMT
            Not After : Aug 24 04:00:31 2025 GMT
        Subject: CN=303607cbc3d71fdf102bc0846384e56a6b8c68f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f0:29:c6:34:6d:e4:25:54:f8:1e:e8:77:b8:
                    cd:ba:53:ca:76:d7:13:3b:31:ad:e8:4d:51:a3:49:
                    c6:34:e4:27:1a:cb:44:d3:6d:31:19:9f:23:63:c9:
                    09:be:4b:99:35:b4:23:f3:98:f2:91:30:ca:3d:42:
                    b4:b9:67:1a:90:5a:e1:89:74:98:63:09:87:6d:85:
                    3a:a8:13:f5:88:60:88:d9:51:9e:ea:aa:c5:bb:5d:
                    89:39:d4:ea:cc:86:d5:f3:8d:39:ae:e8:e9:32:fe:
                    6a:bf:2e:74:24:fd:6c:47:ef:7d:18:82:13:de:13:
                    97:f4:37:ce:cc:cd:5f:68:b0:ea:7b:e2:b7:49:bc:
                    27:68:23:f5:82:19:35:5c:16:60:38:36:30:5f:c3:
                    da:c5:ef:a9:a7:9f:7f:1e:9f:a6:8d:7c:7d:da:ea:
                    41:0f:6c:d6:f2:87:22:47:c3:22:fb:da:03:50:cb:
                    de:b7:45:07:ea:e4:cd:47:ba:ec:81:09:82:5f:b5:
                    9c:ef:ce:82:e9:08:f9:a8:38:1a:90:86:d4:fe:4b:
                    82:ee:b2:a3:85:2f:67:4e:17:7b:b0:cb:64:b8:02:
                    50:a9:b0:ab:26:30:3a:c0:48:3a:af:71:85:6a:34:
                    0a:8f:d5:4f:04:c4:bf:60:89:95:3d:9a:c2:9d:e3:
                    36:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:36:07:CB:C3:D7:1F:DF:10:2B:C0:84:63:84:E5:6A:6B:8C:68:F5
            X509v3 Authority Key Identifier:
                keyid:EA:B0:50:11:72:2D:25:C1:24:9E:65:8B:2C:AE:CC:11:8C:29:E8:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rBQEXItJcEknmWLLK7MEYwp6CI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:81:d5:09:83:2e:7c:c2:e9:43:d8:0a:1e:56:44:84:3c:16:
         a8:cf:82:f9:1c:0c:89:36:b3:2f:77:43:5e:4b:a2:2c:c8:12:
         32:92:c0:11:c6:50:52:54:2b:e7:51:b7:45:a2:3f:40:94:62:
         1f:b0:be:80:6e:bb:e9:36:d9:49:54:92:ad:cb:81:e6:c4:a4:
         76:b5:60:8b:74:77:33:f6:9b:53:df:0f:87:19:39:be:1e:aa:
         a9:c8:05:13:ad:d1:91:52:f4:32:cd:f2:bf:13:49:94:6d:2c:
         9b:1a:7d:e4:0c:5c:86:e7:7e:b7:5d:84:eb:31:99:cd:1e:54:
         b3:da:19:63:40:a3:7a:ef:e5:c4:8a:41:de:01:78:37:cc:91:
         c7:6a:d1:1a:07:69:5e:5c:a2:71:61:46:59:d2:fd:a8:8c:55:
         37:f8:bc:2d:25:3d:b7:2e:ab:77:0b:b1:33:c5:15:a8:f5:5f:
         3b:51:dc:bf:59:fb:12:e9:b0:61:b4:45:34:c6:8e:48:cd:40:
         69:f5:d4:6c:f1:e3:7e:53:81:78:38:90:a2:93:e4:2e:4a:f9:
         aa:8f:e8:3d:b2:45:62:05:df:ae:d7:d9:8a:ff:11:84:46:ac:
         76:c3:aa:eb:c5:d7:fc:f2:0b:ea:18:01:3c:b1:e3:01:e5:7e:
         c9:7b:3f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:29:00 2025 by rpki-client