Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.mft
File:                     6wkUma3HabD7qf7TKEVDp0JcI1E.mft (raw, json)
Hash identifier:          Lv2ULPNGsCt+sfKecU3+AIKKXogQ902pCcTHJ+Y7dmw=
Subject key identifier:   8E:01:1B:85:1C:F4:52:09:9A:E5:51:02:5A:A8:FE:6E:D6:40:0C:63
Authority key identifier: EB:09:14:99:AD:C7:69:B0:FB:A9:FE:D3:28:45:43:A7:42:5C:23:51
Certificate issuer:       /CN=eb091499adc769b0fba9fed3284543a7425c2351
Certificate serial:       0198530E63F73DA96D2C9E8E863F6A09D67A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6wkUma3HabD7qf7TKEVDp0JcI1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.mft
Manifest number:          15F6
Signing time:             Mon 28 Jul 2025 22:01:48 +0000
Manifest this update:     Mon 28 Jul 2025 22:01:48 +0000
Manifest next update:     Tue 29 Jul 2025 22:01:48 +0000
Files and hashes:         1: 6wkUma3HabD7qf7TKEVDp0JcI1E.crl (hash: /2bdQLMhlESc5I9olH7orTfK64090hfzcN+W4N7xLg8=)
                          2: GAIwhqy9s--sK4fAUb5ZmX0AYwU.roa (hash: Ns47X0wI0O3MuVbdsHwm7ba7lckhv6ZFSEeB9gRrT7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6wkUma3HabD7qf7TKEVDp0JcI1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0e:63:f7:3d:a9:6d:2c:9e:8e:86:3f:6a:09:d6:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb091499adc769b0fba9fed3284543a7425c2351
        Validity
            Not Before: Jul 28 22:01:48 2025 GMT
            Not After : Jul 29 22:01:48 2025 GMT
        Subject: CN=8e011b851cf452099ae551025aa8fe6ed6400c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e1:74:7a:ab:c4:9c:f2:a5:23:9b:27:91:3e:
                    ea:31:eb:d5:7a:cc:d2:e8:e7:7f:9c:12:62:60:ef:
                    98:b1:47:43:82:42:39:3f:a1:bc:ac:e5:e2:45:2a:
                    09:6f:76:58:a2:4f:74:2d:be:5a:59:ba:12:7f:ae:
                    11:38:10:b6:81:e7:c4:82:5d:9e:d8:e7:47:28:13:
                    eb:09:0a:75:b1:ed:12:e3:99:3e:ef:46:64:07:7e:
                    36:8c:d8:ce:11:e9:a6:7f:b6:80:4e:01:4d:50:b8:
                    76:ff:db:98:7a:98:f5:e0:d4:ae:74:bd:22:39:2a:
                    31:1d:7d:83:60:a4:7e:d5:58:5e:be:d1:27:38:c7:
                    39:07:81:a4:25:8e:4e:86:d4:b9:76:dd:2e:c0:66:
                    9d:e0:ce:23:55:95:45:26:c1:c2:ee:97:90:d2:12:
                    cf:49:35:2e:25:16:8e:05:23:f1:35:57:a1:0f:c0:
                    d3:4c:63:15:fb:4d:dc:eb:9a:3d:c3:4f:c4:d0:21:
                    5c:00:ff:8e:66:54:be:d6:24:a3:a2:2d:62:17:8a:
                    d7:da:12:92:07:9a:9d:69:10:75:d0:93:3e:46:8f:
                    01:57:54:91:1c:60:34:8d:e2:a0:f4:3f:4e:1b:99:
                    40:95:cc:e4:33:22:13:97:3f:16:48:e2:2e:75:5f:
                    ee:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:01:1B:85:1C:F4:52:09:9A:E5:51:02:5A:A8:FE:6E:D6:40:0C:63
            X509v3 Authority Key Identifier:
                keyid:EB:09:14:99:AD:C7:69:B0:FB:A9:FE:D3:28:45:43:A7:42:5C:23:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6wkUma3HabD7qf7TKEVDp0JcI1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:3d:57:f5:4e:2a:7b:f3:8c:03:33:5c:dc:97:14:c9:2b:cd:
         2a:95:49:6c:14:66:50:78:40:b4:6e:e1:b5:11:4b:78:71:65:
         ec:4b:f6:bb:48:09:49:37:26:11:28:d7:83:e6:07:c5:66:8c:
         16:68:50:3e:30:ca:a9:24:67:7e:69:b2:ce:64:23:34:99:3b:
         87:8f:fe:1e:10:df:7d:a0:62:1c:18:00:41:9f:68:7e:79:fa:
         36:d6:45:55:74:79:55:a5:9f:8e:6c:7e:4a:dd:99:55:04:0e:
         c3:84:65:94:dd:c6:8c:a2:53:55:21:03:67:ff:a8:e7:f2:67:
         0f:6c:90:ec:88:9b:cc:51:84:6e:85:32:c4:87:53:c2:99:a1:
         02:ea:9a:2e:5f:28:29:b9:d4:e2:37:79:79:c7:de:07:6a:e2:
         d3:a1:6c:64:9b:92:63:fd:6d:d6:72:37:91:c4:65:c1:a0:d5:
         58:94:fb:6b:f8:86:08:8b:69:73:62:34:66:32:fd:b0:63:b2:
         1d:b0:86:e2:c8:e6:23:6a:22:99:85:3d:92:ee:e3:a2:be:14:
         ea:51:fa:c0:8b:04:52:8a:0b:ff:9f:d1:ed:c9:7b:10:00:96:
         09:4a:2e:08:05:95:46:83:7e:e9:4f:46:8b:d7:f9:4b:6d:a0:
         f9:cf:ab:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:50:34 2025 by rpki-client