Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
File:                     6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft (raw, json)
Hash identifier:          sdwvUlyesw3R+24w5Z1Qfn5+buOZZuYr8nXp2e0RcPk=
Subject key identifier:   C6:6F:26:76:6D:72:33:72:18:85:B8:28:A5:F1:EE:FB:70:3A:8D:DE
Authority key identifier: EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC
Certificate issuer:       /CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
Certificate serial:       0199356EFCC8BA46B25B6B105CA13D6BD02C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
Manifest number:          0D5C
Signing time:             Wed 10 Sep 2025 21:01:30 +0000
Manifest this update:     Wed 10 Sep 2025 21:01:30 +0000
Manifest next update:     Thu 11 Sep 2025 21:01:30 +0000
Files and hashes:         1: 6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl (hash: zV6h/ncCTqzpOgntS4iZKT9oQOFkYmwPqI83pWdjB9s=)
                          2: DXb8g5-PypIL6EwTwBa5JTnxBKo.roa (hash: tOPfESlkZC7S5BHJvSJ7lgd26XQAVlBllx5t/n2Rb7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:6e:fc:c8:ba:46:b2:5b:6b:10:5c:a1:3d:6b:d0:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
        Validity
            Not Before: Sep 10 21:01:30 2025 GMT
            Not After : Sep 11 21:01:30 2025 GMT
        Subject: CN=c66f26766d7233721885b828a5f1eefb703a8dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5b:72:ae:e7:b8:fd:c1:88:18:12:37:94:77:
                    91:c0:bd:6e:3e:3f:e6:3b:2e:f7:2a:a9:9c:b7:42:
                    00:2c:c7:43:3f:b9:a7:9b:19:79:4e:50:1a:9b:72:
                    e7:7d:24:79:10:74:c3:9b:2d:3f:56:40:74:26:97:
                    68:4b:d1:5c:17:05:34:5a:8e:78:e9:57:73:1f:56:
                    28:21:19:14:81:26:49:bd:a6:70:25:55:a4:ec:62:
                    54:26:cd:c9:f6:b3:ce:ab:30:64:03:a5:90:5f:68:
                    b7:b1:c6:86:73:a2:20:d4:9a:c4:e1:96:f8:78:a2:
                    c0:52:a3:03:42:b8:cf:09:8f:69:ca:e8:09:b9:7d:
                    10:1e:05:24:c5:ff:57:6c:0e:e6:32:cf:82:58:f7:
                    36:8f:8a:e5:cc:8a:d8:55:21:b6:a3:27:f9:89:f5:
                    78:8b:5b:99:8b:0b:23:38:24:b1:53:c3:39:ce:70:
                    44:e6:ce:67:6f:6b:71:aa:17:1f:d3:82:db:37:35:
                    e3:c2:15:21:b4:2d:8a:54:02:79:0f:bb:1b:be:c6:
                    7d:46:2e:99:76:1c:83:41:01:ba:de:bd:34:f4:7f:
                    2a:c7:91:83:a2:cf:0f:03:77:02:d2:b4:2d:65:c3:
                    fa:b0:77:7e:83:a0:49:3c:a9:d2:7c:de:56:b3:88:
                    36:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6F:26:76:6D:72:33:72:18:85:B8:28:A5:F1:EE:FB:70:3A:8D:DE
            X509v3 Authority Key Identifier:
                keyid:EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:e0:78:6f:47:8c:13:0c:71:2d:59:44:bc:66:fd:4b:d6:fb:
         4b:0e:ae:74:09:0b:ea:48:5a:64:33:f3:ba:88:b6:b5:54:91:
         d1:4d:50:54:19:70:32:e2:fa:12:d9:16:56:f6:0e:05:41:a9:
         3d:5f:81:6c:80:2a:80:15:03:6a:64:8b:36:43:29:bd:f7:27:
         ff:e6:c7:af:a5:8a:5d:d9:9a:19:24:f9:16:43:b8:9b:78:8a:
         48:cb:bd:34:2d:75:46:8d:f9:36:14:72:45:90:9b:38:6e:b4:
         73:b4:33:f9:5c:b1:10:ca:94:3c:03:4e:33:90:5a:ba:55:39:
         5b:2a:aa:f5:e8:7f:9c:5f:7d:b7:e6:83:0d:dc:07:85:a7:ac:
         6b:44:1a:51:28:17:81:86:b9:43:c4:30:6e:00:00:0e:37:b0:
         84:dc:a5:bf:84:d3:5b:5c:f3:05:9b:19:2f:4b:51:38:68:b7:
         a9:05:3d:5d:4b:09:60:87:ef:19:4c:62:96:6d:02:9b:5b:fa:
         d9:33:ce:27:bd:ff:ff:d3:e4:d5:9b:7f:e8:a9:90:c9:f3:24:
         2b:68:10:fe:35:68:f3:78:88:3d:45:cc:39:20:00:d7:ad:36:
         c3:b8:c6:fe:f7:0c:d3:0a:2d:26:0b:4e:c6:c0:fe:aa:49:bc:
         f3:88:2c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 04:31:35 2025 by rpki-client