Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
File:                     6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft (raw, json)
Hash identifier:          0/udHDXI8u8rIlX72OEtOk5iVri9LpcDUY9dolqeQos=
Subject key identifier:   FD:2F:A9:7C:CE:92:13:26:03:76:A1:BC:95:1B:87:00:F3:5D:AE:18
Authority key identifier: EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9
Certificate issuer:       /CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
Certificate serial:       01984965E35E1B352E51E7D0020152AFE50D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
Manifest number:          15FF
Signing time:             Sun 27 Jul 2025 01:01:10 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:10 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:10 +0000
Files and hashes:         1: 6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl (hash: SnMmwqJ/5t9FBFcTF9HsPzKRfOSzHH8dy8rJjzqmUl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:e3:5e:1b:35:2e:51:e7:d0:02:01:52:af:e5:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
        Validity
            Not Before: Jul 27 01:01:10 2025 GMT
            Not After : Jul 28 01:01:10 2025 GMT
        Subject: CN=fd2fa97cce9213260376a1bc951b8700f35dae18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1e:3e:38:b0:de:51:fc:bc:a9:c1:fe:18:a3:
                    97:34:f2:4e:ae:d9:3e:4d:f7:5e:63:4e:60:a2:8f:
                    73:a0:78:28:c7:75:b3:04:9e:fc:40:aa:0c:99:dd:
                    9a:4a:fd:c1:74:b4:c1:54:c7:7e:82:0a:44:36:98:
                    ba:33:35:03:30:47:d7:9d:12:ab:b8:05:31:76:58:
                    e9:81:c1:f6:e6:85:28:d7:5e:47:57:4e:5e:9c:e6:
                    93:e5:c7:39:61:21:e3:b5:72:ec:fd:d9:f5:c4:19:
                    99:38:5a:91:08:94:6d:95:4e:fd:cd:68:b8:33:6e:
                    bb:20:51:91:b7:3a:1e:ea:8a:9e:8d:32:91:32:f4:
                    e0:e1:a1:44:e3:d4:16:13:0d:90:dc:53:8a:e2:5a:
                    be:02:3e:6e:6c:5d:97:c4:2e:04:b9:80:06:2d:0a:
                    e6:98:57:0e:15:b8:b2:e5:53:61:ec:35:67:0f:1d:
                    b0:6a:58:96:86:a8:da:65:96:82:15:88:60:3c:88:
                    5a:de:68:5a:11:35:00:b7:b0:f6:75:a3:d8:68:a5:
                    da:a0:a1:b0:c4:27:d2:a1:ac:9d:54:c8:8d:82:4f:
                    31:68:2f:55:8f:9c:b3:75:57:8b:b6:48:0f:62:c2:
                    6c:f6:e8:26:48:8c:2d:1b:f5:95:bf:fb:3c:99:04:
                    43:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:2F:A9:7C:CE:92:13:26:03:76:A1:BC:95:1B:87:00:F3:5D:AE:18
            X509v3 Authority Key Identifier:
                keyid:EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:16:03:a3:70:32:b6:8d:1e:99:84:7f:50:f3:b0:30:0d:d7:
         8a:06:6b:20:b5:c0:9e:21:94:1e:34:af:5e:37:bd:0b:b8:ae:
         9c:ed:d6:f6:88:30:ea:4c:79:3c:c9:65:52:ce:82:a0:da:18:
         6b:9b:05:a3:8f:be:c6:aa:79:74:bf:a4:32:54:14:51:95:c9:
         eb:3c:4a:89:5a:32:38:60:78:22:43:d8:24:9c:9d:dd:33:61:
         0d:49:8d:cb:fc:8f:28:87:e4:98:e9:61:4b:95:b4:48:2c:b3:
         43:aa:a7:ae:b9:8b:62:f4:a5:dd:fb:27:70:4e:f0:8d:92:80:
         5e:4f:43:29:0b:27:f1:c0:e2:ad:08:4a:aa:d2:65:ca:35:75:
         f2:a4:e0:de:58:59:fa:bd:53:e1:66:3b:d5:89:cb:c6:81:98:
         75:d1:81:f7:62:98:99:6f:4e:61:da:cb:73:5e:e3:39:1a:b6:
         c9:5e:82:f4:e2:a7:e1:4d:45:c7:61:5d:c0:02:19:68:30:95:
         d7:0a:2e:11:eb:4a:4b:69:45:78:f0:2c:10:31:fb:78:0c:81:
         ac:b1:9d:c0:34:15:78:a5:a7:4f:1b:3e:83:46:1b:09:27:25:
         84:1b:56:ca:04:10:b3:26:2b:39:21:d5:f1:3a:a1:48:1c:38:
         b7:db:0b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:24:17 2025 by rpki-client