Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
File:                     6EKkZljB0BusjUOWHGtJ54jjzMM.mft (raw, json)
Hash identifier:          ML6QIYGDuFxKSpsGo3srYp5vciDCFLMXcQd65RGM4Lg=
Subject key identifier:   20:EC:C9:A3:39:91:8B:20:A2:0C:AE:C4:97:02:90:8D:54:5B:E1:E8
Authority key identifier: E8:42:A4:66:58:C1:D0:1B:AC:8D:43:96:1C:6B:49:E7:88:E3:CC:C3
Certificate issuer:       /CN=e842a46658c1d01bac8d43961c6b49e788e3ccc3
Certificate serial:       019848F710ABC6397D6395D05E1E27C081A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
Manifest number:          1604
Signing time:             Sat 26 Jul 2025 23:00:07 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:07 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:07 +0000
Files and hashes:         1: 6EKkZljB0BusjUOWHGtJ54jjzMM.crl (hash: 1uzDnLJ2EukZMpWKHOAOLlO+gbLS5lfa/WRKhHHBaag=)
                          2: xANWJIQxy5Izrn9gOyePr5tbhgY.roa (hash: BAFdEGijvRbR7pMhm3hhAYe67gFmqJkY0ASzrXKygw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:10:ab:c6:39:7d:63:95:d0:5e:1e:27:c0:81:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e842a46658c1d01bac8d43961c6b49e788e3ccc3
        Validity
            Not Before: Jul 26 23:00:07 2025 GMT
            Not After : Jul 27 23:00:07 2025 GMT
        Subject: CN=20ecc9a339918b20a20caec49702908d545be1e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f0:c3:3b:5c:a0:cd:d1:cd:dd:63:e4:47:a1:
                    a9:e5:33:57:8e:a7:7f:5f:67:1c:40:e6:c2:a0:f4:
                    9a:b3:aa:af:5f:c7:04:6a:47:2f:99:47:97:8b:ef:
                    01:7b:98:c0:15:3b:c7:16:cb:76:d0:af:87:89:0c:
                    db:55:fd:d4:51:88:44:a7:8b:65:a6:45:b5:41:50:
                    9a:12:60:a3:ec:6d:9f:1c:c4:1b:fc:3c:7d:65:13:
                    71:6d:fb:98:72:7d:4d:b4:f4:46:73:d9:b8:76:9d:
                    e0:94:c9:bd:5e:a1:31:ff:2e:de:91:6f:a6:8e:54:
                    e2:31:85:cf:be:5a:7d:a3:d4:03:53:31:33:d4:c5:
                    87:64:2f:cd:b4:16:d2:51:85:89:81:c2:6f:a3:83:
                    05:13:9c:42:5a:b2:e9:9e:f3:a5:a0:f9:b2:98:f4:
                    e8:9b:da:89:b2:6c:9d:0c:f3:63:d9:af:c8:2b:74:
                    af:96:eb:d0:ae:7b:87:aa:97:7d:99:e1:cb:65:c8:
                    80:49:7a:7b:5e:ad:b6:0e:b8:12:57:57:e4:0e:4a:
                    ca:f9:61:87:3a:07:93:f7:d7:0d:1e:2e:99:30:60:
                    10:54:15:e1:c7:22:95:dd:7e:a9:79:e3:3a:21:04:
                    4a:71:38:fc:66:f0:d5:2d:13:14:16:49:2d:21:af:
                    fb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EC:C9:A3:39:91:8B:20:A2:0C:AE:C4:97:02:90:8D:54:5B:E1:E8
            X509v3 Authority Key Identifier:
                keyid:E8:42:A4:66:58:C1:D0:1B:AC:8D:43:96:1C:6B:49:E7:88:E3:CC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:38:98:70:ba:6d:29:8a:df:37:21:e2:64:7b:61:dc:03:cd:
         9f:b2:a1:df:f8:9d:d5:88:d1:69:b7:be:0d:b1:35:ed:09:50:
         59:b0:b9:93:06:29:69:f4:e4:83:d1:81:a5:94:d5:47:40:17:
         7c:6c:0b:e5:f7:bc:a3:be:b0:c0:3c:f3:b8:5e:d5:1b:21:7f:
         97:ed:ac:bd:5f:62:44:26:8a:6b:97:13:1c:23:c1:db:16:df:
         11:5a:60:92:0f:74:69:3f:fa:6e:02:b8:fe:36:b6:94:b1:6c:
         f6:18:c4:54:89:5c:86:b2:86:13:9e:66:95:7d:4d:f2:54:3d:
         fd:e2:68:4c:44:23:f5:94:b5:1b:b1:d3:f2:ca:da:af:39:3b:
         02:0e:f3:99:24:f0:03:47:29:1d:9e:02:58:51:ad:58:39:70:
         75:7c:8a:0a:5d:df:20:8f:69:78:e8:6c:65:a7:0d:6e:a0:e6:
         4a:76:0e:53:0e:41:d2:d2:25:17:32:d5:bb:ce:f7:40:e2:a0:
         47:8d:81:e6:7f:98:c7:e9:93:95:48:4d:54:ef:e5:03:42:11:
         a4:dc:3f:2a:18:77:6b:1d:5b:2c:4e:9d:20:be:75:f6:6d:6a:
         bb:a0:ab:39:d7:da:7e:b6:a3:34:b5:13:9f:bf:68:56:52:c0:
         e5:79:be:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:42:27 2025 by rpki-client