Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
File:                     6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft (raw, json)
Hash identifier:          DOpyoKkC/NZldK7iTjRsVgS2LWlx5CsVi56H1ogglQM=
Subject key identifier:   36:BB:CF:5B:60:68:C3:3E:27:49:71:F0:6B:E0:36:A2:F6:AA:DF:52
Authority key identifier: E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD
Certificate issuer:       /CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
Certificate serial:       019921B0E96A97C595C178D08963F6280D8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
Manifest number:          0CC8
Signing time:             Sun 07 Sep 2025 01:01:06 +0000
Manifest this update:     Sun 07 Sep 2025 01:01:06 +0000
Manifest next update:     Mon 08 Sep 2025 01:01:06 +0000
Files and hashes:         1: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl (hash: E/Pp5zEhwQi+aG61DXhQxw4NTgom971oayBCs00rcOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b0:e9:6a:97:c5:95:c1:78:d0:89:63:f6:28:0d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
        Validity
            Not Before: Sep  7 01:01:06 2025 GMT
            Not After : Sep  8 01:01:06 2025 GMT
        Subject: CN=36bbcf5b6068c33e274971f06be036a2f6aadf52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d6:42:af:cf:e8:a6:30:c7:f8:ba:d6:ce:52:
                    6c:03:bf:d0:b9:67:de:53:99:58:19:37:3b:32:03:
                    c7:d0:b9:75:d4:b5:71:be:8e:0d:d6:8e:65:67:b1:
                    29:7d:ea:a4:06:6b:89:36:53:21:3b:ca:02:e4:a6:
                    ef:28:f6:6b:31:79:c1:34:8e:04:79:7b:ad:fa:9a:
                    c4:a6:39:d4:6e:23:5a:ca:d3:a7:f8:94:60:04:4b:
                    4b:cd:78:3b:b7:87:c6:f9:68:d1:c1:3a:e3:36:15:
                    09:dc:30:a3:0a:0e:7e:b0:cf:64:d4:3a:2b:69:c1:
                    d5:46:5d:da:67:f9:9f:ef:1b:1e:1e:b9:ef:35:fe:
                    2f:44:7c:63:f8:ef:91:a8:75:80:be:36:b2:0b:6c:
                    7a:70:28:3d:40:b6:38:23:5e:92:79:4c:db:97:ed:
                    6f:9e:d0:ea:a6:a8:2b:87:8e:71:4a:3b:92:b8:cb:
                    89:be:5f:a5:80:2d:ca:49:12:0d:b7:6c:51:8b:ae:
                    a7:3b:86:97:85:93:4c:03:fb:47:5b:e3:e8:a0:ce:
                    9c:31:08:31:8c:ad:64:f8:42:26:7d:c7:b0:50:72:
                    2e:e3:a5:08:53:5c:e0:2e:d7:d4:27:96:93:63:a7:
                    36:38:98:a3:28:3b:10:52:66:14:66:f2:cf:d9:54:
                    12:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BB:CF:5B:60:68:C3:3E:27:49:71:F0:6B:E0:36:A2:F6:AA:DF:52
            X509v3 Authority Key Identifier:
                keyid:E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:a0:8a:91:93:a7:c2:68:45:f5:a5:54:5e:58:98:15:78:04:
         ee:8f:b4:a0:89:e2:6b:7a:f3:dd:1b:4d:51:2c:2e:f7:55:a8:
         c6:eb:ab:7a:19:de:83:52:11:c3:76:ce:5a:ff:38:24:bc:7b:
         80:4d:1b:61:64:20:a0:c3:51:e3:ef:c2:e8:66:b0:cf:dc:68:
         5b:f8:54:4d:39:01:fd:81:54:7d:5a:19:e8:c1:c3:c5:bf:7a:
         71:b6:8a:95:59:e1:71:1b:64:85:44:da:e2:c9:c9:05:a0:6d:
         77:2c:14:81:66:f5:ad:7b:ca:a8:70:1a:ed:d1:96:1a:9d:79:
         1f:6d:fb:5c:04:ce:27:6b:3f:77:33:3a:4d:98:6b:1e:34:b7:
         00:13:ad:96:a2:a0:aa:c2:f9:87:b7:bc:b6:1e:c7:03:2c:40:
         5c:e6:e0:e0:5a:16:df:ff:f3:5c:ce:61:54:95:14:50:dc:78:
         a9:01:fb:42:76:32:d3:1a:40:ef:57:44:f8:dc:81:18:15:3f:
         f3:60:38:2c:bc:10:f8:be:99:b1:13:14:3e:69:db:71:b6:1a:
         cb:2c:f3:0d:81:92:8a:33:6b:74:d9:c7:67:63:19:dd:6f:7d:
         1a:23:e6:28:be:a3:ad:f5:5d:01:c9:7a:bd:80:96:35:4b:b0:
         6b:60:e9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:33 2025 by rpki-client