Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft
File:                     6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft (raw, json)
Hash identifier:          vzORQfSLpv1TNC4iZv16PTNagilTe0vJilMP0PQCplI=
Subject key identifier:   34:F5:22:AF:0B:D1:75:28:F9:5A:5A:46:AE:51:3D:64:72:CE:B0:15
Authority key identifier: E9:96:D2:CB:39:47:78:7F:15:E1:9B:AC:B1:E3:36:9C:19:F3:EC:94
Certificate issuer:       /CN=e996d2cb3947787f15e19bacb1e3369c19f3ec94
Certificate serial:       0198530CCEDD4E3393D1BC617C50570203EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft
Manifest number:          0677
Signing time:             Mon 28 Jul 2025 22:00:04 +0000
Manifest this update:     Mon 28 Jul 2025 22:00:04 +0000
Manifest next update:     Tue 29 Jul 2025 22:00:04 +0000
Files and hashes:         1: 6ZbSyzlHeH8V4ZusseM2nBnz7JQ.crl (hash: MDcSHaltJG7edacCk0iIp/Ae77PIZqLA/HNH/bfTR60=)
                          2: q6-9G3aCT5ZgGlkvHjIFz5bA04g.roa (hash: cfokvWEVeqwKPxGczy1eXytgUST2AAuJ7ts04BX5rq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0c:ce:dd:4e:33:93:d1:bc:61:7c:50:57:02:03:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e996d2cb3947787f15e19bacb1e3369c19f3ec94
        Validity
            Not Before: Jul 28 22:00:04 2025 GMT
            Not After : Jul 29 22:00:04 2025 GMT
        Subject: CN=34f522af0bd17528f95a5a46ae513d6472ceb015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:aa:32:3f:f3:57:00:99:f5:76:49:5b:e8:88:
                    90:f2:f8:02:a9:39:f8:60:fa:e5:fe:c7:7a:83:40:
                    46:ea:63:e6:e4:f8:b1:fe:57:3f:dc:11:4c:b4:4e:
                    35:7d:f9:ae:4a:a6:7f:7f:5a:6d:54:ba:b7:26:1e:
                    d8:ba:53:4a:8d:89:9c:ae:44:63:d3:18:51:c0:a2:
                    6b:80:53:65:96:66:a9:1c:40:f1:9b:58:09:c7:7e:
                    b5:2d:21:e0:0f:61:30:49:a9:5a:4b:0a:e0:40:0f:
                    88:0c:ac:01:5c:e9:84:bf:37:ef:3a:31:5b:a8:ed:
                    4e:c9:27:13:a6:71:72:df:8f:8c:24:f2:79:a8:e8:
                    27:1c:2d:d0:6c:8f:c6:a1:21:f2:ef:c8:99:55:f2:
                    e5:65:7a:64:7b:88:e7:16:06:44:d1:ac:d3:92:6e:
                    af:44:1e:37:ba:32:6b:39:09:eb:71:c2:43:a9:be:
                    4c:d4:9d:a7:c5:fc:32:7f:d8:98:46:71:46:59:0a:
                    b8:0b:38:2a:c3:97:99:c1:e8:97:79:dc:ec:6e:af:
                    f1:58:a8:2e:a7:a1:b1:3d:cc:66:54:7e:6b:ab:70:
                    dc:b4:d5:13:db:b4:d8:e9:a9:d9:ab:06:56:0b:20:
                    61:63:cc:2b:7f:29:87:6a:30:f2:8d:3a:bd:62:25:
                    b4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F5:22:AF:0B:D1:75:28:F9:5A:5A:46:AE:51:3D:64:72:CE:B0:15
            X509v3 Authority Key Identifier:
                keyid:E9:96:D2:CB:39:47:78:7F:15:E1:9B:AC:B1:E3:36:9C:19:F3:EC:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b4:07:0e:44:8b:2a:f2:62:79:b3:3b:d6:76:9a:1a:1b:93:
         1f:c3:80:16:48:e2:0a:b7:84:3e:69:ae:cf:d4:51:f4:00:40:
         b6:8d:c5:6f:9c:a6:99:bf:36:ba:ce:50:5f:dd:95:b8:ec:1a:
         73:fa:1c:a6:15:48:7b:73:de:77:11:cc:47:25:00:bc:3b:e7:
         fa:ee:ce:90:09:69:73:c3:a2:c7:a9:6b:b3:35:4d:27:b2:15:
         51:26:92:7c:03:21:5d:41:b0:e0:47:49:ba:08:d5:e6:8e:f7:
         8f:b3:fb:ca:7f:8d:8d:2a:a7:51:94:4a:56:38:c9:4b:a8:98:
         45:93:7a:2f:e2:f8:de:53:22:df:5a:f1:48:a8:c3:e6:9a:2b:
         12:b7:d6:14:ee:7b:3c:92:af:b3:20:bd:c9:c0:11:95:6f:6e:
         5f:10:36:b9:11:21:0c:9e:cc:c0:a3:66:75:51:08:9c:76:87:
         0b:bc:4d:c7:fa:41:31:4d:a8:a0:74:f0:ee:67:df:f3:0e:d4:
         b7:d3:79:16:62:7f:ce:e1:09:29:23:8f:89:81:99:e8:85:7e:
         c8:87:9f:4a:e2:59:ce:53:16:aa:54:30:db:89:60:e5:dd:08:
         25:b1:c8:b5:9a:8e:91:07:5f:f8:78:36:01:01:ce:c9:51:d2:
         37:b9:b5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:01:09 2025 by rpki-client