Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
File:                     S6TRDarjyS2n0u6XO3SMsflJIuk.mft (raw, json)
Hash identifier:          fWrL5NQr7KP5Mk6L9daAWPK9XdX2LopvO5UZOpJPPus=
Subject key identifier:   EB:70:27:28:70:A3:FB:DC:AE:92:AF:AB:88:51:EC:FC:60:25:28:ED
Authority key identifier: 4B:A4:D1:0D:AA:E3:C9:2D:A7:D2:EE:97:3B:74:8C:B1:F9:49:22:E9
Certificate issuer:       /CN=4ba4d10daae3c92da7d2ee973b748cb1f94922e9
Certificate serial:       019854FB4B0A9981DFE3106EC4E7E32558E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
Manifest number:          09AB
Signing time:             Tue 29 Jul 2025 07:00:11 +0000
Manifest this update:     Tue 29 Jul 2025 07:00:11 +0000
Manifest next update:     Wed 30 Jul 2025 07:00:11 +0000
Files and hashes:         1: S6TRDarjyS2n0u6XO3SMsflJIuk.crl (hash: jfSX2F3N1kj//EJUNE5w7scBD4qdVmP3mgy5A7ynlOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:54:fb:4b:0a:99:81:df:e3:10:6e:c4:e7:e3:25:58:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba4d10daae3c92da7d2ee973b748cb1f94922e9
        Validity
            Not Before: Jul 29 07:00:11 2025 GMT
            Not After : Jul 30 07:00:11 2025 GMT
        Subject: CN=eb70272870a3fbdcae92afab8851ecfc602528ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:88:34:11:2a:03:5a:bd:ef:e8:43:da:93:bd:
                    fc:fe:31:a6:b3:e3:30:7f:aa:e2:cf:c3:44:71:72:
                    d7:60:ae:5e:50:12:d8:d3:3f:42:6a:a9:be:eb:82:
                    23:3f:c4:19:89:e6:4c:82:f9:2b:0d:30:81:a3:c6:
                    46:c6:26:a8:f8:83:be:8d:19:b1:53:74:6f:7c:4d:
                    35:93:cc:a2:2c:f4:b5:02:86:0e:55:f7:b4:83:10:
                    da:3b:15:84:0f:47:26:a8:6b:4a:72:57:13:f6:0c:
                    38:af:f7:6c:df:20:9d:1f:03:61:74:c9:9e:e9:b8:
                    a6:a1:c0:8d:7c:f2:66:9f:47:64:7a:d0:a1:e0:46:
                    37:78:e9:53:9d:a6:27:7f:ac:af:e5:e0:ac:3c:5b:
                    df:39:7f:fb:66:a9:b7:4a:05:ab:f3:35:cf:f4:a0:
                    f9:6a:bd:80:2a:43:07:31:e7:4c:f0:88:b6:46:4c:
                    58:3a:46:5c:f9:69:07:04:b5:7f:be:60:8f:2a:f7:
                    b5:37:8f:bb:da:7c:7a:bf:36:49:49:42:2f:9a:67:
                    9c:46:53:97:8c:a2:52:ed:fd:6a:c9:54:75:0d:9c:
                    ab:3a:6c:d9:5a:73:c4:5e:5d:e9:1c:f1:b2:b0:8e:
                    a2:9c:ff:97:ec:ae:0c:5a:7a:c5:02:d0:67:53:30:
                    17:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:70:27:28:70:A3:FB:DC:AE:92:AF:AB:88:51:EC:FC:60:25:28:ED
            X509v3 Authority Key Identifier:
                keyid:4B:A4:D1:0D:AA:E3:C9:2D:A7:D2:EE:97:3B:74:8C:B1:F9:49:22:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:65:df:fd:d1:69:b9:09:9c:ff:0b:cc:e3:ad:52:d7:0c:0b:
         47:44:79:a0:da:8b:24:f4:e4:50:97:7a:ee:17:10:7c:d7:74:
         48:3f:b5:bc:31:4a:4e:8d:88:7c:77:a2:d5:7b:a6:f4:97:80:
         22:23:14:06:1a:a7:18:ae:58:bf:1f:aa:cc:ee:dc:16:f6:bb:
         7d:ca:8b:b8:bb:f7:6f:da:7e:49:0d:5c:c1:73:cd:91:42:13:
         d0:af:46:a2:0a:df:fe:9f:67:b9:81:b1:09:db:7b:b1:94:40:
         66:3b:12:42:b1:24:2e:df:98:b5:fd:f9:cc:47:45:a7:7f:8d:
         6d:f5:9a:59:b0:0e:61:25:e2:5e:32:bb:0b:e9:29:1d:51:21:
         31:44:86:dc:cd:b9:4c:cc:83:57:88:6f:4d:a3:21:5e:05:64:
         c4:7a:85:9a:9b:88:d6:ed:26:57:f0:5d:32:8c:40:d6:83:eb:
         d0:55:4e:6b:f3:2c:63:34:fd:20:9f:70:b8:02:c3:a4:cc:b5:
         c6:b1:7f:d5:0a:8f:58:0c:64:6f:75:5e:ea:16:49:b1:2a:3b:
         e0:06:73:01:1e:b7:26:e8:99:29:54:39:ae:58:b6:87:a4:f1:
         3d:f2:2c:21:df:da:b3:95:9b:54:02:07:16:20:5c:9b:4a:3e:
         15:64:f2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:48:35 2025 by rpki-client