Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
File:                     6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft (raw, json)
Hash identifier:          SJBu70xVQpLvTPtSEJWA8qg+JgA+ZKpRmDypIl5xwd8=
Subject key identifier:   D9:7C:22:D6:24:99:30:AE:05:98:2F:71:61:9E:77:1B:F6:59:FE:72
Authority key identifier: EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
Certificate issuer:       /CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Certificate serial:       0198D66062F252C94E134C34F9A7E015634C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 10:01:37 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:37 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:37 +0000
Files and hashes:         1: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl (hash: nWx9sFkLA00CxkB9ZwiQhOqEYm7WB+Ut8TTotd7XzEQ=)
                          2: zLngmWEw_D0Bxeb-kcPWwP9gp_U.roa (hash: Sf54rTElSlunUVvFtUXJDy0FrQ/XeLhMeCRG3/nN1oE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:62:f2:52:c9:4e:13:4c:34:f9:a7:e0:15:63:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea51769ce8672c56d1652bf90a5aefca819b488a
        Validity
            Not Before: Aug 23 10:01:37 2025 GMT
            Not After : Aug 24 10:01:37 2025 GMT
        Subject: CN=d97c22d6249930ae05982f71619e771bf659fe72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4e:4a:05:48:65:71:99:1c:c5:97:9c:2e:1b:
                    77:b7:5f:f0:ac:09:0a:d6:f5:67:e6:d9:90:0a:3e:
                    55:74:d5:81:1d:9f:99:48:8a:06:02:1f:e7:9c:0f:
                    ba:38:ad:cb:2a:ee:6b:9f:ef:84:64:f8:f3:0c:48:
                    12:ab:a7:8e:75:f8:4c:3e:86:d6:4b:0a:b7:51:30:
                    64:d2:0a:20:f9:ad:ab:cf:af:ac:06:d2:b6:ec:34:
                    df:8a:51:7d:32:ff:4c:8e:30:69:69:c0:40:30:53:
                    9c:ca:ad:58:ca:25:1c:e6:67:ed:43:c0:5e:20:97:
                    cc:00:91:09:51:fa:d1:7d:2d:36:54:4c:b4:5a:65:
                    7a:ae:65:ef:6c:8e:24:f7:03:08:47:5f:3e:de:36:
                    f8:87:bb:ff:ee:eb:ad:3a:97:60:74:f5:37:fd:61:
                    f6:1a:03:77:bb:44:13:65:4c:cc:ed:f3:1c:67:47:
                    24:ec:d8:78:fd:bb:ef:ad:b5:b4:ec:2b:74:4e:12:
                    e1:df:e7:d7:b8:41:14:ca:30:3b:6a:20:7a:d6:3a:
                    29:d4:2c:be:c7:f9:00:aa:23:57:aa:24:fc:ac:35:
                    52:e2:20:0a:b9:9f:ef:6f:e3:f5:b2:f9:c3:f5:bd:
                    d0:96:d6:f7:07:b0:b1:d9:84:2e:a5:c3:3f:71:81:
                    e4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7C:22:D6:24:99:30:AE:05:98:2F:71:61:9E:77:1B:F6:59:FE:72
            X509v3 Authority Key Identifier:
                keyid:EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:0a:2b:e3:95:24:03:99:6d:90:86:d0:a2:8e:06:27:da:81:
         95:d6:7c:c8:ab:4e:9c:4d:9d:2e:56:09:4f:cc:91:a0:24:ac:
         7a:f2:84:f1:00:2d:52:9f:0b:95:06:71:d5:e8:f9:ad:68:47:
         9b:f5:0b:3d:db:11:aa:45:54:d2:bf:88:e2:ed:38:22:25:f3:
         62:41:00:a8:12:cb:00:f2:78:23:99:6f:50:c5:7c:82:28:2b:
         e2:c9:2c:06:72:0b:4e:23:c5:d3:71:1d:9c:97:55:43:34:42:
         04:68:c4:15:ed:94:9c:9f:2a:17:95:21:51:e5:02:e1:2a:e5:
         0b:70:97:5b:7b:48:39:09:4a:1e:5d:9d:a7:fc:46:2f:20:28:
         8e:e1:66:27:8e:b5:b6:49:66:65:7c:18:85:1c:c9:8c:63:42:
         91:22:82:f5:e0:68:e8:c9:27:b5:d1:82:2a:af:a0:10:31:9b:
         48:99:66:dc:7f:ff:f7:4e:0f:52:fd:85:10:1d:17:cf:a7:cb:
         90:df:51:c2:c9:fc:9d:e1:66:19:3f:fd:9b:f8:0e:c8:63:ba:
         e7:a7:57:0d:8a:2c:7b:89:4a:45:0a:ad:94:01:ec:a3:40:7f:
         fe:99:11:ad:86:f4:74:6c:67:04:ad:d0:62:47:1a:5b:f8:7b:
         e4:8b:c3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:04:31 2025 by rpki-client