Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
File:                     6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft (raw, json)
Hash identifier:          u/i7W9cID59DyO1RpJKWK13sWkjQJAN3CaPHmsPF7/w=
Subject key identifier:   A9:00:ED:CA:4C:7A:C9:72:29:B1:34:65:37:62:00:8B:74:9D:12:AF
Authority key identifier: E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
Certificate issuer:       /CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Certificate serial:       0198447601D552359ECB18075C8FD57F843A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
Manifest number:          06BD
Signing time:             Sat 26 Jul 2025 02:00:41 +0000
Manifest this update:     Sat 26 Jul 2025 02:00:41 +0000
Manifest next update:     Sun 27 Jul 2025 02:00:41 +0000
Files and hashes:         1: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl (hash: RuGuhSf6KGT8GrX40yNQBhxdCGW2c2HCOlBOPWEHx+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:76:01:d5:52:35:9e:cb:18:07:5c:8f:d5:7f:84:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
        Validity
            Not Before: Jul 26 02:00:41 2025 GMT
            Not After : Jul 27 02:00:41 2025 GMT
        Subject: CN=a900edca4c7ac97229b134653762008b749d12af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:29:6a:4f:ca:90:76:d8:85:a0:03:1a:40:8e:
                    9c:69:4d:d1:1a:9d:d1:33:27:35:16:1f:2c:06:20:
                    c7:de:b1:a9:52:bd:f2:4f:18:76:08:02:8b:7a:e3:
                    18:2f:65:42:be:63:57:1e:ff:5e:8d:42:3d:cf:0d:
                    c0:e2:52:a3:31:48:dd:9d:dd:ae:fb:a1:0c:d8:fb:
                    88:8e:e1:54:20:0c:3f:73:66:e0:f9:31:e8:ba:9f:
                    22:71:3c:ae:74:7b:11:3d:f5:29:0e:28:6c:ab:95:
                    2f:e9:57:f6:6e:d0:64:c4:1f:d8:92:f5:f9:58:bf:
                    f2:80:05:ec:8d:0e:0e:84:84:dc:9b:5b:c5:6d:07:
                    a2:b4:93:e8:02:d5:a8:b7:68:cb:2d:ec:e1:5a:ac:
                    61:6e:30:60:9f:38:b1:0f:38:07:17:36:9c:e9:d2:
                    ed:f1:33:58:69:56:3e:d8:5a:3c:e1:08:f9:2b:ad:
                    ae:59:68:51:60:a3:a1:86:18:18:2e:d3:08:7b:f9:
                    f0:c2:9e:10:32:e4:af:0f:a0:73:f2:b3:69:79:f7:
                    fb:83:ee:38:d2:e0:be:ec:5a:99:dd:99:65:e8:7a:
                    8d:1f:6e:c3:df:d2:01:8a:6e:a1:bb:80:85:b6:d2:
                    34:46:d1:de:b4:ca:55:c8:24:93:bf:b0:a2:00:ff:
                    a1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:00:ED:CA:4C:7A:C9:72:29:B1:34:65:37:62:00:8B:74:9D:12:AF
            X509v3 Authority Key Identifier:
                keyid:E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:3b:b4:ad:a4:b4:9c:09:b1:7a:39:36:8f:dd:39:fa:71:8f:
         ed:57:e6:cc:e7:c1:7d:85:ed:f3:9d:74:76:f0:8f:4e:7a:57:
         d5:c1:86:43:25:8e:90:ea:a3:dd:37:65:61:60:a3:2f:9f:b7:
         40:89:b2:ea:a6:8a:c1:ef:8f:84:02:63:00:e1:d2:2b:76:ad:
         a8:b0:44:3f:03:4d:89:6f:6d:ce:7e:a7:c2:7b:e7:f9:25:4c:
         0d:32:0b:85:37:06:0c:12:10:b4:30:b6:f0:c9:d4:53:9d:ca:
         57:d8:22:b7:ab:8a:a2:33:72:4e:86:c9:c3:83:cc:d5:f4:60:
         48:b1:b1:d2:16:50:68:64:80:9b:56:20:18:b4:fe:2d:7a:b8:
         5c:d6:a8:a1:6a:4a:81:1f:a4:2a:9e:2e:e0:37:27:d5:6f:f4:
         a2:e1:40:c7:db:1e:22:21:ac:d1:85:79:2a:da:b7:7e:d9:f5:
         bc:13:6e:2b:4f:c5:cb:17:f1:a0:5e:3a:c2:38:52:6f:20:71:
         37:d8:15:d1:67:22:41:83:57:dc:33:7a:39:94:40:c2:a9:ac:
         38:ba:ca:a2:20:8d:f7:1b:bd:aa:2e:9d:68:d5:1e:cd:91:a6:
         0e:1d:6f:2f:ec:b1:ac:3c:7a:87:92:99:34:ae:79:55:dd:e4:
         b0:73:ad:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhEdgHVUjWeyxgHXI/Vf4Q6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzJhNmMyZWJlYTQ2NDEzMDcyZjkwZGQ1MjZkNzhmMTEw
MmY0ZjIwHhcNMjUwNzI2MDIwMDQxWhcNMjUwNzI3MDIwMDQxWjAzMTEwLwYDVQQD
EyhhOTAwZWRjYTRjN2FjOTcyMjliMTM0NjUzNzYyMDA4Yjc0OWQxMmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtilqT8qQdtiFoAMaQI6caU3RGp3R
Myc1Fh8sBiDH3rGpUr3yTxh2CAKLeuMYL2VCvmNXHv9ejUI9zw3A4lKjMUjdnd2u
+6EM2PuIjuFUIAw/c2bg+THoup8icTyudHsRPfUpDihsq5Uv6Vf2btBkxB/YkvX5
WL/ygAXsjQ4OhITcm1vFbQeitJPoAtWot2jLLezhWqxhbjBgnzixDzgHFzac6dLt
8TNYaVY+2Fo84Qj5K62uWWhRYKOhhhgYLtMIe/nwwp4QMuSvD6Bz8rNpeff7g+44
0uC+7FqZ3Zll6HqNH27D39IBim6hu4CFttI0RtHetMpVyCSTv7CiAP+hcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkA7cpMeslyKbE0ZTdiAIt0nRKvMB8GA1UdIwQY
MBaAFOlypsLr6kZBMHL5DdUm148RAvTyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhLbXd1dnFSa0V3Y3ZrTjFTYlhqeEVDOVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iNzYyOGQtNDI2Yy00ODg5LWEwMGMt
NGY5NzRjOTc3OTQ1LzEvNlhLbXd1dnFSa0V3Y3ZrTjFTYlhqeEVDOVBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9iNzYyOGQtNDI2Yy00ODg5LWEwMGMtNGY5NzRjOTc3OTQ1
LzEvNlhLbXd1dnFSa0V3Y3ZrTjFTYlhqeEVDOVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzu0raS0
nAmxejk2j905+nGP7VfmzOfBfYXt8510dvCPTnpX1cGGQyWOkOqj3TdlYWCjL5+3
QImy6qaKwe+PhAJjAOHSK3atqLBEPwNNiW9tzn6nwnvn+SVMDTILhTcGDBIQtDC2
8MnUU53KV9git6uKojNyTobJw4PM1fRgSLGx0hZQaGSAm1YgGLT+LXq4XNaooWpK
gR+kKp4u4Dcn1W/0ouFAx9seIiGs0YV5Ktq3ftn1vBNuK0/FyxfxoF46wjhSbyBx
N9gV0WciQYNX3DN6OZRAwqmsOLrKoiCN9xu9qi6daNUezZGmDh1vL+yxrDx6h5KZ
NK55Vd3ksHOtCA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:56:39 2025 by rpki-client