Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
File:                     azT6U9HYTbq-aY1bvMrt8QnRV64.mft (raw, json)
Hash identifier:          ef6IqdUDlJY0X6U84sf+5HBQ2AJbpvQW8M9QyoiJkek=
Subject key identifier:   6E:CD:06:0B:52:D2:85:7B:93:D4:CE:B9:4B:75:BD:90:F5:1E:3E:7F
Authority key identifier: 6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE
Certificate issuer:       /CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae
Certificate serial:       01985569D99C62D7077A7F049A152072B282
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
Manifest number:          160B
Signing time:             Tue 29 Jul 2025 09:00:56 +0000
Manifest this update:     Tue 29 Jul 2025 09:00:56 +0000
Manifest next update:     Wed 30 Jul 2025 09:00:56 +0000
Files and hashes:         1: azT6U9HYTbq-aY1bvMrt8QnRV64.crl (hash: x2hpnbUuvQSsxvl3Dun+Nppr2zb5HY2loJxAp1lhMnI=)
                          2: yFAScqy1SZnNR2xfePl0FenNN0g.roa (hash: vURxboeBcUQDk9P166WC/cJAnLRENen5C6McIffi+y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 08:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:55:69:d9:9c:62:d7:07:7a:7f:04:9a:15:20:72:b2:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae
        Validity
            Not Before: Jul 29 09:00:56 2025 GMT
            Not After : Jul 30 09:00:56 2025 GMT
        Subject: CN=6ecd060b52d2857b93d4ceb94b75bd90f51e3e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:74:e7:4b:b4:a5:69:13:33:8d:5b:b8:78:78:
                    e2:3e:0f:9f:38:20:16:cd:47:75:eb:d0:99:14:36:
                    21:22:13:06:19:1f:1f:d1:1c:98:82:8d:75:c5:40:
                    de:f3:53:06:f3:f8:31:fc:7c:44:da:9f:55:79:ad:
                    dc:17:f5:8f:64:9c:45:90:53:49:82:59:5b:d6:33:
                    2e:c1:9d:80:7b:7a:49:03:e7:c4:bb:91:23:14:23:
                    04:84:8e:d9:9a:ec:1f:a6:d5:86:47:f9:ad:3a:1a:
                    2f:70:7a:c2:02:f4:15:bc:98:48:61:d0:60:01:68:
                    96:ba:b4:84:43:bf:5b:2d:ee:45:7f:92:d3:8c:ea:
                    e8:78:7d:a1:43:11:fb:fe:87:a6:ad:96:be:e4:45:
                    94:b7:82:b0:45:5d:cc:95:17:34:f1:cf:49:e9:7c:
                    87:58:ff:e0:07:bc:67:27:6f:1b:d2:4e:51:da:53:
                    bc:08:33:78:7d:88:f8:22:c1:64:ab:a7:02:78:06:
                    cc:33:0a:c7:96:b3:14:c2:29:b0:37:3c:96:9e:b2:
                    26:8a:d5:70:39:3d:02:32:55:bd:48:e9:50:e9:39:
                    3a:7c:64:67:6b:6f:ce:7c:fc:eb:d7:05:d9:ef:78:
                    53:b9:ba:3d:83:c2:d7:44:39:16:de:72:3a:c5:83:
                    62:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CD:06:0B:52:D2:85:7B:93:D4:CE:B9:4B:75:BD:90:F5:1E:3E:7F
            X509v3 Authority Key Identifier:
                keyid:6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:9b:90:15:b0:c7:ca:e7:d8:3f:fd:d2:23:05:f3:4e:a8:d8:
         6b:46:eb:3e:72:fa:24:05:02:ff:99:1b:8d:8e:49:27:51:32:
         b7:e2:cd:43:06:35:a6:f6:c3:22:99:d4:5c:ae:1e:1d:44:f5:
         e2:b5:c0:76:a3:27:74:96:cf:99:c7:4a:68:3c:e3:bd:a9:72:
         57:e0:64:ba:6d:31:84:a0:a5:f8:4e:3b:ff:7f:e1:58:93:39:
         bd:85:c3:a3:62:28:76:6b:6d:c0:6a:0b:98:e5:91:29:15:b9:
         95:fa:dd:d8:32:f3:4e:88:aa:62:c6:c8:57:ab:5d:43:f8:de:
         7c:49:ff:f1:7c:16:7f:83:78:e3:8b:4c:a5:f2:9e:55:54:4f:
         1f:c3:f3:ae:1a:f5:ad:34:3d:96:95:b3:41:9e:3d:bd:45:16:
         13:d2:f4:7a:8e:49:de:55:83:48:5c:65:f7:6f:65:1f:ae:57:
         4c:42:d6:88:d0:98:1c:36:9f:8e:c3:e4:c0:b7:ff:07:f1:e9:
         56:81:59:b1:bb:af:b8:ec:bd:59:ad:74:41:af:8b:6d:50:37:
         38:4a:ea:27:da:87:07:18:05:0f:d1:15:bf:14:c0:ee:5c:fa:
         14:4f:e6:9d:9a:d1:09:30:af:e9:67:95:b3:47:88:a0:47:39:
         f3:c3:71:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:51:24 2025 by rpki-client