Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.mft
File:                     6P36cUAM43C3X3N3gEhXTkYnQxs.mft (raw, json)
Hash identifier:          IulJ8mmH7oAryQuziRoDz03ZM5Jo4c/rCga6dNE1OuQ=
Subject key identifier:   E3:DF:EF:16:1C:AF:13:87:1C:E1:AC:6B:B7:D3:5E:89:07:70:07:58
Authority key identifier: E8:FD:FA:71:40:0C:E3:70:B7:5F:73:77:80:48:57:4E:46:27:43:1B
Certificate issuer:       /CN=e8fdfa71400ce370b75f73778048574e4627431b
Certificate serial:       019853441300E83A2C2330C62F84CD0059AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6P36cUAM43C3X3N3gEhXTkYnQxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.mft
Manifest number:          02A4
Signing time:             Mon 28 Jul 2025 23:00:26 +0000
Manifest this update:     Mon 28 Jul 2025 23:00:26 +0000
Manifest next update:     Tue 29 Jul 2025 23:00:26 +0000
Files and hashes:         1: 6P36cUAM43C3X3N3gEhXTkYnQxs.crl (hash: zoND4sBBODz1G5s1nEF7s39/kG9Xv1AHhRbSr1BGVTA=)
                          2: SFK2b_vmIkLWDU_i-BkLji71FEk.roa (hash: P/e3nZJRHwq7a4VZvWLqRGgl5JZQml0sLv8iElODBF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6P36cUAM43C3X3N3gEhXTkYnQxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:44:13:00:e8:3a:2c:23:30:c6:2f:84:cd:00:59:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8fdfa71400ce370b75f73778048574e4627431b
        Validity
            Not Before: Jul 28 23:00:26 2025 GMT
            Not After : Jul 29 23:00:26 2025 GMT
        Subject: CN=e3dfef161caf13871ce1ac6bb7d35e8907700758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:09:3f:b7:3b:cf:81:2f:63:a3:f7:9d:65:1b:
                    e2:7d:2b:5d:39:e3:99:03:ca:2f:1a:db:18:63:6f:
                    6f:99:3c:d1:e8:a9:2d:cb:9d:99:cc:0f:01:cd:6b:
                    2f:4e:ff:78:53:3a:c3:a8:87:1f:cb:f8:26:2a:0e:
                    a3:7f:b7:b9:50:27:cf:69:f2:b0:7a:b9:76:f7:f2:
                    f0:79:5f:0a:cb:45:c8:3e:e7:b5:d2:4f:ea:81:b9:
                    9c:1a:d7:6c:2a:61:21:36:dd:c8:a1:29:cd:a0:a1:
                    75:8b:f5:df:a2:af:e9:89:78:fb:e8:ea:83:85:83:
                    36:0d:f7:37:72:49:5a:bd:74:5f:1e:9e:13:a2:c6:
                    08:f7:4d:94:9f:1b:2c:e0:52:f5:3a:ac:c1:45:b8:
                    3a:74:2f:cc:88:d2:c6:16:78:e9:0b:ab:86:a9:55:
                    cc:4c:1c:2b:9b:ef:c5:f9:a2:f7:b6:0b:ab:ae:16:
                    05:0d:71:8d:5b:38:71:3c:66:b9:0a:13:2b:ee:88:
                    ce:e0:68:62:c0:09:11:d1:da:77:9e:2f:85:fb:6a:
                    3a:16:bb:07:0e:6b:f2:1e:6c:24:9d:c3:7c:e3:4a:
                    50:34:62:ac:d1:18:7a:2c:a1:4d:3f:fe:e4:69:5d:
                    a2:31:a6:d1:e6:d8:14:c2:50:82:49:d7:70:48:33:
                    c8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DF:EF:16:1C:AF:13:87:1C:E1:AC:6B:B7:D3:5E:89:07:70:07:58
            X509v3 Authority Key Identifier:
                keyid:E8:FD:FA:71:40:0C:E3:70:B7:5F:73:77:80:48:57:4E:46:27:43:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6P36cUAM43C3X3N3gEhXTkYnQxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:79:30:17:0b:34:cb:be:de:7e:6d:71:d5:e2:64:4e:b7:fd:
         cd:2c:35:eb:50:03:c3:27:d4:2d:19:b1:e6:ce:69:6b:72:57:
         1a:27:b6:ae:22:9e:5e:ae:60:88:a4:f4:ff:17:63:ad:83:a2:
         c6:e3:ea:c5:4c:bb:80:ec:30:3c:da:e9:90:d6:08:85:8f:f7:
         0e:73:a3:20:97:e5:d8:09:39:e1:b3:cd:1d:de:40:42:0d:7b:
         69:3d:a5:71:54:15:ad:b3:47:85:d6:bf:f0:34:55:94:f2:28:
         71:34:82:de:f5:98:94:56:bf:08:d5:c3:ee:92:a0:84:35:04:
         14:76:ae:41:87:5e:6e:8b:1e:18:d6:a0:8c:46:07:a6:d4:ef:
         e5:66:7a:3e:3f:01:1c:79:2a:52:02:b7:bb:0c:8a:da:24:7e:
         60:19:cd:50:69:d6:8f:6d:61:6d:6e:07:25:d7:7e:60:a4:c3:
         bd:2b:46:e0:72:3f:03:3b:0d:f7:c8:76:0f:7d:43:b2:4d:74:
         eb:67:b6:28:36:9c:96:d6:cf:6c:fb:62:71:4b:f6:f7:46:5d:
         c1:32:d6:c9:95:b9:18:86:89:07:31:9e:52:32:a1:5c:cb:06:
         b1:14:b5:54:49:6f:e4:e0:30:3e:e6:95:ed:76:d7:e2:c2:3f:
         bc:0d:03:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:56:19 2025 by rpki-client