Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.mft
File:                     6t-ABI0gMuwiQ2Snc_6B0j-pFOA.mft (raw, json)
Hash identifier:          +VINZXz6axa+SoXzAwmps6ZvR+CqP+1491jo77UDQHs=
Subject key identifier:   1C:B7:56:E1:27:C8:23:E7:FC:9C:18:2D:A2:D3:AC:C9:A6:62:2B:19
Authority key identifier: EA:DF:80:04:8D:20:32:EC:22:43:64:A7:73:FE:81:D2:3F:A9:14:E0
Certificate issuer:       /CN=eadf80048d2032ec224364a773fe81d23fa914e0
Certificate serial:       01984BC1FED48A29ADE48DFAB0A834DC0D01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.mft
Manifest number:          1600
Signing time:             Sun 27 Jul 2025 12:01:01 +0000
Manifest this update:     Sun 27 Jul 2025 12:01:01 +0000
Manifest next update:     Mon 28 Jul 2025 12:01:01 +0000
Files and hashes:         1: 4SEG_Ka9SsxVgfqJ8rFxskdB8YM.roa (hash: miw1wyF1xISaDKZpbc8ZdU1Lhb432CZTgpXO4KMVEZA=)
                          2: 6t-ABI0gMuwiQ2Snc_6B0j-pFOA.crl (hash: h+Nyrg7SwOfpNJwSh9QtIBh5NH3P8LJsCmA09YDW02M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:c1:fe:d4:8a:29:ad:e4:8d:fa:b0:a8:34:dc:0d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eadf80048d2032ec224364a773fe81d23fa914e0
        Validity
            Not Before: Jul 27 12:01:01 2025 GMT
            Not After : Jul 28 12:01:01 2025 GMT
        Subject: CN=1cb756e127c823e7fc9c182da2d3acc9a6622b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:39:ba:77:cf:7f:ea:ec:5c:44:30:f7:4f:19:
                    de:e6:e9:53:62:56:b6:da:9b:ac:ad:a7:d7:16:75:
                    56:ce:c6:61:f7:c0:68:23:38:a5:36:d7:2f:7c:db:
                    e9:cd:f5:ce:74:f2:6d:e5:b7:09:3c:a1:26:fc:75:
                    74:c5:80:57:77:60:b3:42:d7:65:72:30:65:88:2f:
                    e3:2d:2b:cf:56:fe:d4:cc:0c:e8:39:3e:5e:df:3f:
                    22:7f:4a:d4:f3:09:5a:e3:6b:de:c8:9a:6a:ed:ff:
                    58:1a:95:05:1b:77:4a:8c:99:ea:07:52:62:47:4f:
                    e1:b3:49:71:2e:d9:62:7c:b0:6a:5b:07:8e:aa:b7:
                    26:97:a4:04:db:92:46:54:05:81:e8:fc:de:8b:d6:
                    d0:20:cf:a7:5e:2b:f8:04:c1:a1:43:8b:75:3c:08:
                    3e:ea:1a:01:d9:83:6d:88:f2:85:5e:62:65:9c:13:
                    0f:30:9b:41:69:3e:7d:01:f2:ab:b3:82:61:df:cf:
                    ca:66:8e:be:23:ef:49:bb:8d:83:74:6d:9f:05:c5:
                    8f:bf:1c:b1:1d:87:42:ba:b7:d3:f3:b1:9e:ce:85:
                    40:fe:ac:54:1d:df:c6:51:65:b9:7c:2a:ae:72:aa:
                    ba:36:f0:62:d8:24:f1:bd:5b:5a:76:a9:04:6b:cc:
                    54:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B7:56:E1:27:C8:23:E7:FC:9C:18:2D:A2:D3:AC:C9:A6:62:2B:19
            X509v3 Authority Key Identifier:
                keyid:EA:DF:80:04:8D:20:32:EC:22:43:64:A7:73:FE:81:D2:3F:A9:14:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b7:21:5d:7a:28:62:44:07:09:15:2e:61:60:f5:0b:2f:2d:
         73:e7:c1:bc:a4:7d:3a:ed:82:bd:c0:78:f2:30:d2:54:15:6b:
         1f:ce:f9:72:31:ad:78:f3:d3:44:4a:86:aa:b2:ff:46:68:d7:
         75:15:59:06:31:11:d7:52:48:f0:64:7b:49:d0:a0:5c:7a:4d:
         ad:67:65:04:41:46:a4:9d:a1:97:0e:92:72:8a:08:f2:cf:1e:
         ca:06:f5:50:ef:7a:6d:cb:68:79:27:bd:1e:d1:77:60:32:84:
         8a:53:e1:8f:49:13:08:6f:43:99:83:92:d7:14:a4:9a:e5:f0:
         ac:b2:1b:ea:97:75:b1:6f:45:4a:1e:88:52:35:27:82:93:fe:
         a8:8c:be:e6:75:0b:0b:fd:06:f4:ce:75:da:5c:a0:bf:9a:93:
         b8:5a:bf:ca:ad:46:e5:e3:49:06:b3:91:9d:f2:fe:4b:09:b7:
         a4:73:5a:db:1c:98:62:7c:fe:05:75:48:9a:f7:53:21:22:7f:
         a4:3c:7d:d3:a2:83:88:f6:7f:31:ac:80:b4:13:b3:7a:00:ef:
         51:ec:57:7e:00:7e:32:60:86:b5:18:87:d4:aa:a5:1c:48:75:
         5d:12:24:ea:5b:82:2a:5a:1c:18:19:21:36:b5:07:e5:52:f8:
         e6:08:f8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:24:15 2025 by rpki-client