Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File:                     6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier:          WTKUgw1jZRk3gfqqvYRxWmM4Eh9ik2eICTew3tU1jKQ=
Subject key identifier:   BE:35:E9:D0:84:1A:AE:2F:6C:46:B6:1B:94:D9:7C:28:5F:11:9D:1B
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer:       /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial:       019844761A5838C8AAA85C3C86F4CDCD1032
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number:          1614
Signing time:             Sat 26 Jul 2025 02:00:47 +0000
Manifest this update:     Sat 26 Jul 2025 02:00:47 +0000
Manifest next update:     Sun 27 Jul 2025 02:00:47 +0000
Files and hashes:         1: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: iFdz0o02txtAIc/zXtyb4eaXZdRnuNL5vQOxpR3sTm8=)
                          2: JeUrUwbFpGu8iDqDZmLLtLX07Uo.roa (hash: AF4y3k0K4M29JKvnm3WAi9rM2wiDZSTI7KiQY/+WwGQ=)
                          3: LMOHIG2uLaY6GZHZHZ2LuvxqzKM.roa (hash: 4NroWDI/8Q2pwsJ7z2O+ja04jrPKvPKyJQ0j1cEhZ+Q=)
                          4: oDuQtsfWsb20exJBO7QurYBeWk8.roa (hash: gEKk7yZspSpg2oEhPVCqnu3t/dgmJib8oW+i8A65aR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:76:1a:58:38:c8:aa:a8:5c:3c:86:f4:cd:cd:10:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
        Validity
            Not Before: Jul 26 02:00:47 2025 GMT
            Not After : Jul 27 02:00:47 2025 GMT
        Subject: CN=be35e9d0841aae2f6c46b61b94d97c285f119d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3e:c2:57:6a:2f:e7:5e:5f:ee:68:25:4c:5f:
                    b9:fe:6e:94:58:13:31:d5:57:37:67:de:2b:c5:4a:
                    d5:09:5d:a3:d7:5b:f3:2e:94:44:bd:f8:b4:e2:d5:
                    61:96:5d:32:fa:68:a5:95:68:45:9c:3c:86:aa:52:
                    8e:74:a2:40:c6:9a:8c:5e:2b:22:7b:bd:9a:20:b8:
                    a6:1d:08:ba:fd:4e:65:ec:21:39:04:36:7f:bd:ae:
                    72:03:45:9b:81:d7:9f:95:fa:62:32:72:40:85:1d:
                    e4:26:56:2d:8c:91:e5:7f:5e:b5:90:47:38:78:0d:
                    cc:4e:38:e2:e4:88:3d:fa:74:67:f1:84:e6:5e:6c:
                    17:30:36:c7:ee:fe:f1:76:42:61:f3:dd:cb:b1:44:
                    f9:f8:69:76:17:fe:33:16:3c:0a:0c:d5:ea:32:9e:
                    3e:b5:0e:09:2a:ed:87:32:4f:38:b3:7a:a4:38:49:
                    ed:2b:0a:e2:bb:05:0c:15:66:f1:99:12:90:2c:33:
                    7a:9c:43:ca:60:42:c8:9b:97:11:25:59:14:f4:41:
                    3a:a6:13:d8:4a:3b:b3:cc:e9:c7:5d:45:8f:27:5d:
                    f8:d8:2c:90:c7:e7:55:52:57:14:08:1e:c7:62:b7:
                    54:81:a4:ad:0d:d2:3d:af:64:66:b6:b6:5b:2e:75:
                    eb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:35:E9:D0:84:1A:AE:2F:6C:46:B6:1B:94:D9:7C:28:5F:11:9D:1B
            X509v3 Authority Key Identifier:
                keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ed:36:9d:38:c1:cc:f4:14:43:fd:3d:ce:8b:a9:1d:b6:02:
         68:8a:ba:2a:64:36:97:a3:6a:74:d7:d4:74:93:6c:44:13:f0:
         52:d3:83:8f:c1:06:9a:f4:84:05:7b:f8:3a:62:49:48:45:c8:
         56:06:ce:87:9e:7b:4b:9e:fe:cb:8e:d9:c5:16:e0:62:79:df:
         b2:cc:0b:5f:11:46:0d:fc:35:25:93:7f:fc:f1:d0:44:55:36:
         1a:68:cf:c1:bb:c7:1a:bd:fe:fa:fb:10:14:04:c0:52:06:39:
         a0:10:17:b7:2b:e3:39:22:d3:2f:8a:51:c8:a6:7f:62:05:4f:
         51:52:5c:60:5f:87:20:c8:e6:17:78:01:74:b0:0f:92:3d:02:
         7e:02:6c:6c:1a:1f:79:83:bc:c7:8d:42:32:84:25:5b:3d:40:
         c4:9c:e1:14:8c:66:62:16:df:04:d8:13:2f:02:64:14:4b:35:
         3d:b3:6d:16:3f:ef:28:a0:fe:19:a0:fd:d2:89:ba:3d:0e:e1:
         b4:f7:16:bb:2b:a8:cd:72:14:af:75:36:dc:0f:34:83:02:bc:
         b3:f1:13:40:e6:0a:6f:b9:69:d6:f7:ab:88:48:9d:1a:9e:f7:
         13:38:a2:54:5f:c1:e0:64:33:50:86:5f:1b:63:f9:31:9a:43:
         70:52:33:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:36:45 2025 by rpki-client