Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft
File:                     6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft (raw, json)
Hash identifier:          IZ2hLk29gg3mKs6l6eM2T0X05cBMDflY9IYTsVBqcMc=
Subject key identifier:   E7:B8:6F:3A:0B:F6:88:86:DD:82:CD:DE:88:14:C7:04:1A:A7:2A:31
Authority key identifier: E8:33:46:1E:9D:2B:DA:FC:C2:9A:D9:18:9F:B0:AC:F1:F3:39:60:A9
Certificate issuer:       /CN=e833461e9d2bdafcc29ad9189fb0acf1f33960a9
Certificate serial:       01984B543EE02EC52A51F8DF1032DAF2B466
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft
Manifest number:          1529
Signing time:             Sun 27 Jul 2025 10:01:08 +0000
Manifest this update:     Sun 27 Jul 2025 10:01:08 +0000
Manifest next update:     Mon 28 Jul 2025 10:01:08 +0000
Files and hashes:         1: 6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl (hash: o6StFtHIB6hQP8RlsvqujQXbGMtVjwHI8aITKYR7SpQ=)
                          2: bmfTB7QP2sQIDpnYEEuqlN4ftmM.roa (hash: vARwTHDByRNch/FCMqW59p/LzP0CiF5frUcfc8ikvnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 09:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:54:3e:e0:2e:c5:2a:51:f8:df:10:32:da:f2:b4:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e833461e9d2bdafcc29ad9189fb0acf1f33960a9
        Validity
            Not Before: Jul 27 10:01:08 2025 GMT
            Not After : Jul 28 10:01:08 2025 GMT
        Subject: CN=e7b86f3a0bf68886dd82cdde8814c7041aa72a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d5:4b:2a:98:05:fe:1d:22:48:5d:b0:d3:93:
                    46:57:4a:75:53:d8:b7:31:4f:68:83:73:7a:ee:a3:
                    f2:3d:b0:78:1d:11:86:b0:3f:da:b9:33:58:95:8e:
                    dc:44:3e:25:fc:89:4f:48:6e:7a:2b:29:59:dc:e7:
                    7a:66:99:66:4b:ab:b2:92:9c:58:9c:0e:29:aa:83:
                    ba:52:3e:3d:d2:a3:a9:e6:b6:73:e4:bb:41:6e:98:
                    a2:7e:20:a0:a9:7e:cd:4c:f8:4a:23:fb:bb:b8:bf:
                    3e:04:cd:49:0f:ab:c9:a1:66:57:c2:6a:7a:74:57:
                    b3:ed:73:11:f0:3f:d2:6d:88:da:5e:fc:45:39:5a:
                    ac:ba:37:5a:a2:2e:0e:d0:91:f8:e8:94:c5:30:4a:
                    22:27:dd:cc:f5:67:ec:22:33:15:72:64:05:84:95:
                    71:57:ae:4e:e3:74:18:ee:53:77:9f:bd:65:f8:70:
                    d3:05:32:c3:ef:c0:e6:dd:bb:9b:9f:13:fb:fc:12:
                    eb:69:65:b0:92:9e:e1:e4:43:ef:f8:ca:99:61:1c:
                    21:6c:e9:62:0c:75:d8:ff:7c:01:ba:57:32:4c:1b:
                    fb:4e:35:21:ce:65:aa:37:f4:c9:cc:31:0f:db:e5:
                    74:f1:6d:3d:14:81:69:14:65:46:46:6c:b9:1b:55:
                    d5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B8:6F:3A:0B:F6:88:86:DD:82:CD:DE:88:14:C7:04:1A:A7:2A:31
            X509v3 Authority Key Identifier:
                keyid:E8:33:46:1E:9D:2B:DA:FC:C2:9A:D9:18:9F:B0:AC:F1:F3:39:60:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:dd:56:90:c6:8e:74:3d:7e:b2:ff:9f:fc:95:c8:51:16:32:
         47:37:ad:c5:74:ec:33:ab:44:a7:59:de:80:6c:c4:78:44:5b:
         a8:01:75:02:df:12:a5:66:26:0b:be:ee:9a:7a:7d:2f:79:c8:
         ca:fb:c3:8c:7d:b6:b9:2b:38:a7:03:64:56:1a:bd:b2:09:69:
         44:2b:2b:af:f3:87:64:a5:89:a3:68:a3:71:2d:05:b8:d6:05:
         58:1d:bb:c1:1c:04:b3:4d:28:24:32:4b:c4:c9:b2:ff:62:b5:
         e7:50:fa:ee:0a:79:9e:35:8d:92:10:e0:65:4f:f4:d9:bd:8a:
         f6:43:b7:90:0f:32:c0:9e:f1:3a:c6:fb:ab:cc:9e:56:23:e6:
         cf:1f:c2:47:92:92:6d:09:48:d4:83:47:b6:68:e6:73:f6:75:
         3d:54:ac:62:2f:57:bc:84:09:b1:19:cf:77:8b:4a:35:9a:e7:
         04:f1:eb:22:ec:e2:1e:f3:a5:2e:eb:fa:9d:15:b9:8d:62:ef:
         b1:8d:2e:0f:0f:e1:0e:a4:ad:2c:4a:b6:0d:ad:54:f5:0b:f7:
         7a:e7:1d:25:87:da:b9:3d:f2:c6:94:86:f1:a8:a0:ab:41:01:
         7a:07:65:52:61:e5:9a:20:53:46:6a:a7:39:6b:fe:c7:68:15:
         8d:ba:09:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:16:52 2025 by rpki-client