Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
File:                     6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft (raw, json)
Hash identifier:          vuqZtDXaBO9XA9f9lLmlPcoLI/JH4TNt7ljWPJ/z0pc=
Subject key identifier:   07:A5:7C:DA:30:66:91:99:AB:BB:1D:A3:C8:31:26:C8:65:CB:59:FD
Authority key identifier: E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4
Certificate issuer:       /CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4
Certificate serial:       01984965F5F5349A0051FB66A318B31E0519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
Manifest number:          0CE6
Signing time:             Sun 27 Jul 2025 01:01:15 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:15 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:15 +0000
Files and hashes:         1: 6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl (hash: JyVw4QbEvnGlnbV5uF55jvqpLRwTITuFMx1JT3shMRo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:f5:f5:34:9a:00:51:fb:66:a3:18:b3:1e:05:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4
        Validity
            Not Before: Jul 27 01:01:15 2025 GMT
            Not After : Jul 28 01:01:15 2025 GMT
        Subject: CN=07a57cda30669199abbb1da3c83126c865cb59fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6f:88:bc:5a:0a:a1:82:0a:c8:87:81:c3:dd:
                    11:1c:25:48:0d:95:42:cd:17:4a:54:94:3c:23:92:
                    11:93:9f:ee:f2:ed:d9:e2:49:a2:a2:1a:05:45:a2:
                    d7:b0:6f:fd:d6:e2:6a:3a:b0:d1:e1:2c:95:b6:6c:
                    87:3c:b2:7c:1e:23:5b:ba:88:0d:a5:f5:4e:c1:79:
                    17:c3:41:33:a9:68:ab:30:3b:ca:dd:a4:19:e6:bb:
                    45:d8:26:a5:2c:2e:0c:73:5e:32:bb:62:15:85:cd:
                    28:c0:3b:a2:db:79:8c:27:8a:17:0e:8b:d9:1f:ed:
                    cf:7a:f0:44:a6:cf:61:7b:4e:71:32:c3:84:8f:99:
                    b4:74:35:8f:9f:24:c5:0d:4c:2b:21:6c:91:26:00:
                    5e:7e:a2:a6:d4:55:4d:3a:4c:7f:46:cf:5a:70:b3:
                    59:ae:f5:84:93:56:74:b0:33:59:73:d9:6d:88:33:
                    7a:0e:07:69:4a:85:cc:32:7d:9e:2b:99:80:9f:36:
                    3c:73:12:ea:58:bc:0d:71:36:20:6b:81:20:20:47:
                    31:02:98:70:cc:82:f7:17:c4:c7:c7:4d:42:11:66:
                    0f:0c:93:8e:1f:5a:99:6e:2b:07:43:27:98:13:80:
                    09:e9:0a:d9:a4:36:79:b9:ab:cc:41:f6:4f:2e:5a:
                    7b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A5:7C:DA:30:66:91:99:AB:BB:1D:A3:C8:31:26:C8:65:CB:59:FD
            X509v3 Authority Key Identifier:
                keyid:E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:6e:10:77:5b:3e:6b:a2:9c:fa:b0:fe:b9:11:c3:c5:a9:97:
         cb:c9:0e:6e:c5:f0:52:70:b5:81:67:93:5e:c4:f5:c6:f3:54:
         71:ba:0e:64:84:01:27:91:83:6d:98:fe:1d:d5:83:fb:c0:60:
         71:f4:f3:4a:eb:ee:73:3a:1e:e2:d4:f0:16:ba:7e:ff:be:1e:
         eb:8b:5b:4b:33:24:77:e7:b7:94:7d:27:17:84:c8:26:fc:2d:
         4c:e6:72:7b:7d:e0:aa:18:7f:40:b2:81:d6:b2:8e:3f:45:dc:
         0d:c3:d1:32:b5:f0:c1:8f:4b:8d:64:e2:87:b8:4b:4f:98:db:
         0a:82:db:56:74:7d:1b:4d:cc:52:b2:2e:3c:b0:f8:0f:7b:46:
         c8:e6:12:3a:d5:39:d2:d5:bb:8c:61:d1:8b:64:81:69:7a:f9:
         cd:fc:65:3c:2d:bd:e5:0c:cf:9d:99:b7:ba:d2:40:9a:e1:74:
         9b:93:fa:b5:96:10:55:cc:fe:4b:49:06:d4:f4:dc:40:28:35:
         10:67:12:33:be:dd:62:7e:64:7b:b1:23:46:61:9c:e7:c7:f0:
         31:39:13:ba:92:fe:b8:d3:df:27:f0:1b:ba:76:c8:40:da:9f:
         51:a9:ed:88:97:2d:10:5f:06:4e:a5:4d:af:a0:bf:d4:c3:33:
         69:a4:3e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:27:02 2025 by rpki-client