Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft
File:                     6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft (raw, json)
Hash identifier:          XLQSGnlryY4I+Esw4FBoK1XFxwSlsuKvbW0gm4nkf58=
Subject key identifier:   61:E4:9A:D7:5D:1C:81:98:5F:F8:43:B3:E3:5A:55:27:3C:F3:A4:9E
Authority key identifier: EB:E3:EF:83:B2:B4:C1:1E:07:05:5B:3F:7C:54:9B:50:62:46:C6:3E
Certificate issuer:       /CN=ebe3ef83b2b4c11e07055b3f7c549b506246c63e
Certificate serial:       01984AAF06308722C63F43850A0918622F2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft
Manifest number:          1600
Signing time:             Sun 27 Jul 2025 07:00:40 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:40 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:40 +0000
Files and hashes:         1: 6-Pvg7K0wR4HBVs_fFSbUGJGxj4.crl (hash: YlifrnSsbVWl3R32DU/hUlcuWHaUt5P/KNTjYc+JDrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:af:06:30:87:22:c6:3f:43:85:0a:09:18:62:2f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe3ef83b2b4c11e07055b3f7c549b506246c63e
        Validity
            Not Before: Jul 27 07:00:40 2025 GMT
            Not After : Jul 28 07:00:40 2025 GMT
        Subject: CN=61e49ad75d1c81985ff843b3e35a55273cf3a49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:75:75:17:a9:08:f1:c7:2d:15:6e:17:67:dd:
                    8a:0a:7e:f4:45:f4:f5:4b:07:a3:f0:f9:58:f5:8e:
                    57:bb:e7:aa:a0:42:8f:8f:91:41:05:ba:0d:b6:1e:
                    de:e3:23:77:98:04:36:72:f5:2d:0e:60:ea:f2:18:
                    77:83:1f:10:3f:67:2b:37:1f:3d:f6:87:ef:c2:f4:
                    36:b5:7b:98:28:a6:c7:c9:64:25:7d:80:b6:b5:a9:
                    7e:bb:51:0e:7c:10:dd:7a:3c:a4:d9:30:2c:54:84:
                    7f:39:6a:a5:b2:c2:25:b7:15:21:dd:99:0c:6b:2b:
                    ee:04:ae:09:c9:89:72:74:04:d2:cb:2b:3d:a1:a4:
                    4d:21:38:23:0f:ff:0c:66:f7:c1:6c:30:65:31:4e:
                    45:f4:bd:69:da:fa:c7:c4:3e:e2:63:15:5f:69:4b:
                    38:5d:4c:20:4c:a1:6d:9e:31:16:9a:34:67:bf:0b:
                    fb:e7:c8:2b:69:e8:fb:39:cd:8b:f6:74:5e:b8:ad:
                    78:00:86:ed:b3:56:62:2e:96:2b:38:3f:06:7c:70:
                    41:fb:b8:18:a7:57:fd:76:bb:67:34:eb:e9:82:2a:
                    58:79:0b:68:a1:74:73:57:1a:6c:ba:0d:f5:74:26:
                    e4:31:df:62:11:c8:78:d6:6e:61:63:1e:c9:f9:3f:
                    24:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E4:9A:D7:5D:1C:81:98:5F:F8:43:B3:E3:5A:55:27:3C:F3:A4:9E
            X509v3 Authority Key Identifier:
                keyid:EB:E3:EF:83:B2:B4:C1:1E:07:05:5B:3F:7C:54:9B:50:62:46:C6:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:cf:c1:2f:11:63:f6:a4:ba:f6:0f:33:31:dc:0c:0f:fb:16:
         8e:fc:a5:81:4b:dd:c7:b4:3c:c3:a5:51:12:22:df:30:f2:c2:
         ec:77:0a:09:0a:07:bc:c0:cc:1f:04:1e:08:a5:a9:6a:4c:09:
         3b:46:07:5a:f2:19:f4:47:13:fa:9e:52:f9:9b:43:f1:8a:90:
         b0:8c:15:a5:5e:9a:c7:4c:13:f7:85:93:15:c0:1e:5f:03:0a:
         df:bf:6a:d9:40:d8:53:af:39:99:b9:56:cf:a9:ab:36:9b:21:
         7f:8f:dc:4b:32:27:5c:2e:8a:b1:d6:99:d9:75:8a:9d:45:3f:
         9c:3f:01:ee:4b:6e:05:40:9b:0b:29:89:16:6b:e1:f7:a2:c7:
         09:6d:cb:42:e5:9b:b2:ef:24:f9:d3:b6:83:31:39:73:15:31:
         eb:12:21:d9:1e:2e:b0:44:15:ab:8d:4e:4e:02:40:48:ad:3e:
         55:f9:d7:2e:3b:b7:e5:4b:4c:30:24:7c:85:df:65:19:e6:3a:
         06:5e:55:cb:fb:e4:e0:b2:2a:a6:1a:90:4b:d7:18:ab:53:f4:
         eb:a0:8f:a8:b4:7e:a9:6c:74:79:94:e7:0f:bb:3b:70:ac:8b:
         92:25:e5:74:ca:52:1e:3e:1d:34:5c:df:45:12:7a:88:b6:11:
         84:9e:30:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:58:37 2025 by rpki-client