Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
File:                     6B0tzytpq9vWCUNkQBFank6hmgU.mft (raw, json)
Hash identifier:          wUhiN5NazH9hEXRtclIN4Epzsi5O6lnUhZz2IwJXZ/c=
Subject key identifier:   8E:08:CE:1D:A4:55:47:44:CD:68:FB:64:AD:C3:45:6C:D0:29:37:14
Authority key identifier: E8:1D:2D:CF:2B:69:AB:DB:D6:09:43:64:40:11:5A:9E:4E:A1:9A:05
Certificate issuer:       /CN=e81d2dcf2b69abdbd609436440115a9e4ea19a05
Certificate serial:       01984AAEA001D2910B3BAAF29DF560529C37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
Manifest number:          1604
Signing time:             Sun 27 Jul 2025 07:00:14 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:14 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:14 +0000
Files and hashes:         1: 6B0tzytpq9vWCUNkQBFank6hmgU.crl (hash: 4dCsiObnq56gjkxCeDrvFwabfuOE6IR7s7iBw6up4eE=)
                          2: rqSMK05KYSg_B0GzBcqvNHZV8BM.roa (hash: 7UiFO6ZTlzbJGR5qeW9I8KOwaVtEW4c742Prj97IAno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:ae:a0:01:d2:91:0b:3b:aa:f2:9d:f5:60:52:9c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81d2dcf2b69abdbd609436440115a9e4ea19a05
        Validity
            Not Before: Jul 27 07:00:14 2025 GMT
            Not After : Jul 28 07:00:14 2025 GMT
        Subject: CN=8e08ce1da4554744cd68fb64adc3456cd0293714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6c:f1:40:08:06:1e:92:06:7c:99:ef:48:10:
                    73:7b:eb:5f:d2:d8:82:cb:ae:50:f7:dd:b4:2c:97:
                    ee:32:68:51:f6:21:1c:12:3f:cd:d9:b0:44:bf:e2:
                    5a:2e:73:15:2d:b3:2f:18:2a:d6:c0:41:85:87:ff:
                    65:ef:00:e6:3c:8b:64:5a:75:65:ea:07:5c:e2:53:
                    2f:fe:5e:b7:4a:ba:a8:16:65:e1:5d:b0:9a:82:f4:
                    90:a3:f1:9f:2f:1e:c9:d7:c6:b9:3d:71:6f:10:9b:
                    5d:5f:16:84:27:84:be:6e:8a:94:9a:18:3c:23:f4:
                    e7:13:04:f9:96:27:c8:9e:3a:40:77:68:5a:e8:2b:
                    6d:ef:f2:e1:21:72:46:e0:8e:a6:23:51:25:1c:7c:
                    49:3d:39:de:6e:12:31:8d:2c:d4:69:1a:48:1d:81:
                    e2:61:67:e3:bb:06:91:64:da:5c:08:b3:7a:04:54:
                    f7:61:1e:c9:f4:0e:09:fc:1b:26:2a:3c:f6:99:65:
                    f1:3f:49:77:aa:85:4f:33:ea:03:67:4b:98:60:92:
                    3d:74:64:b6:e4:b3:fe:25:e8:c7:19:ee:fd:21:78:
                    41:d0:f1:80:78:b5:06:d4:00:4c:30:5b:8c:24:8f:
                    0f:7d:fa:63:93:22:20:98:29:ee:67:ee:02:c8:d4:
                    2a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:08:CE:1D:A4:55:47:44:CD:68:FB:64:AD:C3:45:6C:D0:29:37:14
            X509v3 Authority Key Identifier:
                keyid:E8:1D:2D:CF:2B:69:AB:DB:D6:09:43:64:40:11:5A:9E:4E:A1:9A:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:5c:49:59:30:74:9d:a0:b0:b3:c1:69:b9:ba:15:78:db:fe:
         2a:21:11:6a:c9:ab:66:73:ea:bc:70:15:38:2f:d8:bd:22:65:
         7f:cb:80:60:88:36:98:8f:cc:ff:9a:b1:eb:2e:c9:49:ef:5d:
         55:ff:f8:93:74:0f:a1:d4:86:a4:13:c7:24:f6:85:4d:8b:fe:
         93:20:91:ed:8a:9e:64:73:d2:11:fd:df:ef:3c:7b:1d:12:83:
         9a:f5:41:f9:31:a1:0c:79:97:d5:e7:10:6b:b8:98:b9:66:91:
         0e:5c:20:be:54:5e:ab:c7:a9:19:f1:13:b6:22:dc:55:3c:07:
         86:00:e5:ca:a0:91:38:e9:97:14:5c:ce:c5:bb:b7:40:07:2c:
         d9:42:7c:82:ab:fa:0b:3e:43:ce:ff:61:62:4f:31:67:7e:31:
         10:09:ab:1b:f9:b6:84:21:39:e8:14:2e:7a:52:28:e5:4e:8c:
         d2:1a:90:50:d9:7a:84:a0:62:c8:34:d4:f2:37:dc:fc:13:57:
         09:c7:0f:c7:b4:bc:86:30:7a:b0:96:f9:8e:63:c7:22:de:7e:
         20:26:05:a6:07:51:ad:eb:2c:cc:70:22:d7:3f:8a:08:94:bb:
         41:fd:2e:21:99:56:be:1f:c2:2f:d8:35:87:45:dd:03:54:8a:
         66:a4:ab:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:41:21 2025 by rpki-client