Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
File:                     6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft (raw, json)
Hash identifier:          Aqoe2ALOVwif3SlYHRZ+YCwv92XWw5wLF4278zn1+p4=
Subject key identifier:   25:DF:6C:96:EB:90:B3:C3:4C:5B:2C:C8:F2:98:D8:18:86:5C:DF:D3
Authority key identifier: EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC
Certificate issuer:       /CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
Certificate serial:       019849D37AF13FE885B6592428E52F95FC5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
Manifest number:          0CE2
Signing time:             Sun 27 Jul 2025 03:00:53 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:53 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:53 +0000
Files and hashes:         1: 6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl (hash: Q/VY7cpe2ZitnPiLsFY5knp+kNPx9DTWrPyDbsAn/FE=)
                          2: DXb8g5-PypIL6EwTwBa5JTnxBKo.roa (hash: tOPfESlkZC7S5BHJvSJ7lgd26XQAVlBllx5t/n2Rb7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:7a:f1:3f:e8:85:b6:59:24:28:e5:2f:95:fc:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
        Validity
            Not Before: Jul 27 03:00:53 2025 GMT
            Not After : Jul 28 03:00:53 2025 GMT
        Subject: CN=25df6c96eb90b3c34c5b2cc8f298d818865cdfd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:42:66:9c:db:5d:ed:89:30:1d:24:cf:ff:6d:
                    2e:c0:7d:d9:cb:c0:06:71:7d:d5:10:84:92:b5:dc:
                    b4:0c:84:5a:3d:dd:56:c1:22:0f:b0:7f:e7:68:ca:
                    fb:1d:eb:45:ed:83:57:b5:aa:a6:1a:ff:b7:13:4f:
                    5b:4f:4a:a7:d1:09:6b:9b:24:70:4b:a8:1f:b5:a3:
                    f8:60:26:2f:fb:e6:87:a6:e4:66:bd:a3:86:05:ac:
                    0b:30:32:82:80:a9:44:82:06:80:f1:b2:7c:ff:f0:
                    c2:1d:b1:21:d7:97:21:05:93:42:ce:6f:06:ce:4b:
                    b8:49:96:4f:66:15:4c:d2:4a:2e:76:61:ff:e4:38:
                    c4:af:ab:9c:2f:78:b0:07:f9:17:37:3f:e7:28:e0:
                    40:31:92:df:3b:4f:3b:26:ac:ae:7b:7d:e8:61:fd:
                    5f:f0:57:24:39:24:d4:27:ba:d5:81:50:2d:9a:37:
                    62:dd:2e:d2:a4:5d:20:6e:14:6f:99:5b:44:58:d8:
                    9a:aa:4a:be:e7:93:e8:45:a5:46:e5:be:73:16:5f:
                    8c:e6:44:85:c7:d9:b8:86:4e:28:00:6c:94:fe:f7:
                    d8:2f:f6:8d:35:59:e9:be:ed:84:4f:92:d9:66:66:
                    82:d3:e6:a2:9e:50:22:67:0e:a4:10:59:db:93:e1:
                    22:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DF:6C:96:EB:90:B3:C3:4C:5B:2C:C8:F2:98:D8:18:86:5C:DF:D3
            X509v3 Authority Key Identifier:
                keyid:EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:22:bd:5d:4e:43:a0:45:a9:fb:6f:c3:ae:1b:23:fb:e0:8a:
         04:8a:de:26:e5:df:e1:fd:75:b3:50:5b:2c:c7:d4:fe:63:14:
         87:6f:f3:d4:0f:4e:3b:16:07:ba:8f:c6:ff:de:a6:79:8e:cf:
         c6:c1:2a:a2:d9:0f:ff:25:a0:e1:43:65:00:7c:51:2d:ad:0a:
         98:bb:ab:fd:11:c7:27:42:5d:29:ad:17:f6:2f:72:9e:5d:69:
         64:c7:4f:b2:e2:a2:74:99:5e:60:07:a9:81:ee:38:bc:e9:2e:
         20:5e:4d:9d:ca:5b:23:2b:5d:d4:de:4c:2d:a8:1e:e5:be:a6:
         6a:d2:d3:90:16:7e:28:cc:79:7e:ba:b0:a2:40:7e:5d:35:b2:
         76:85:54:3c:bb:f3:63:61:9b:52:ba:ba:bd:16:ba:9b:c6:63:
         45:cf:a0:a4:ea:b9:3f:4e:59:c1:9c:27:70:4b:4e:ee:1a:a6:
         34:db:47:80:c1:57:1b:4f:db:7b:24:a1:32:3b:37:58:81:e4:
         a9:98:d8:c4:81:d5:c3:88:86:55:a7:45:81:03:72:d5:8a:36:
         fa:1a:13:39:8a:b3:82:83:d9:46:b9:39:9f:cb:47:b1:ff:e9:
         7e:5b:4b:65:2c:ea:8f:3c:a6:49:f7:3a:47:0d:ff:ac:44:09:
         53:17:7f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:45:28 2025 by rpki-client