Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
File:                     6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft (raw, json)
Hash identifier:          gWjcPHS/R9zL3al92RpsO6kRVJ85wN5rcEXNVq4AWsI=
Subject key identifier:   6A:2A:43:B8:E9:E9:1E:6A:B5:B7:30:12:22:23:FE:93:27:E5:A8:3A
Authority key identifier: E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48
Certificate issuer:       /CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
Certificate serial:       01992330E24B9B36A40B21849C96B97C2EB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
Manifest number:          1671
Signing time:             Sun 07 Sep 2025 08:00:30 +0000
Manifest this update:     Sun 07 Sep 2025 08:00:30 +0000
Manifest next update:     Mon 08 Sep 2025 08:00:30 +0000
Files and hashes:         1: 6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl (hash: Qpz9nkwSCi5OVhu9fUiruPzXNldBJcqR23wYBTv9QAE=)
                          2: VgS-u0ELxQR2AwhETKCUa6iULQU.roa (hash: 7YXeyW9OYhf7wVeeaMa0yi4RPICzvGAFTAe8JBcfnZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:30:e2:4b:9b:36:a4:0b:21:84:9c:96:b9:7c:2e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
        Validity
            Not Before: Sep  7 08:00:30 2025 GMT
            Not After : Sep  8 08:00:30 2025 GMT
        Subject: CN=6a2a43b8e9e91e6ab5b730122223fe9327e5a83a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:36:c7:a1:d5:a7:80:a0:58:fe:a0:56:9c:5c:
                    c1:32:31:a9:97:ea:79:06:97:07:45:94:e1:8b:5e:
                    b1:0c:95:3f:d9:bb:d0:4b:8e:6f:41:84:f5:d1:07:
                    54:e5:be:71:54:68:43:cf:2a:fc:77:97:28:2b:57:
                    40:e9:61:9d:57:5a:c6:33:dc:4d:1c:e2:e9:ba:82:
                    9e:9f:69:ee:df:3f:89:e7:f1:81:c0:4c:cf:d1:d9:
                    65:0f:1e:62:6f:6c:aa:64:6e:3e:dd:2b:bc:81:ed:
                    4b:dd:bc:37:88:ac:d9:36:aa:8b:1a:e8:68:e9:46:
                    6b:97:21:3a:c9:03:db:16:99:ac:c4:94:44:46:d1:
                    bb:6c:8a:46:f4:e6:d5:fa:07:73:66:75:3c:96:2d:
                    92:4f:10:55:38:f9:9e:8c:a7:da:b0:7f:2e:e6:90:
                    cc:91:ae:a9:50:bf:9c:20:3b:60:1e:f9:9f:4d:04:
                    be:e4:91:8e:47:c0:0f:20:ba:17:1b:5d:1d:f6:b4:
                    9e:f7:e5:59:e8:9d:75:e5:97:d7:a3:74:66:16:aa:
                    2f:39:ee:19:9f:4c:17:e8:5a:a8:f6:33:c0:ec:18:
                    24:d3:1c:84:c2:5d:ce:3e:4f:d7:cc:6e:41:98:97:
                    3a:57:d0:8f:d8:76:fb:16:c6:f5:ed:f2:1f:e7:68:
                    5b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2A:43:B8:E9:E9:1E:6A:B5:B7:30:12:22:23:FE:93:27:E5:A8:3A
            X509v3 Authority Key Identifier:
                keyid:E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:27:42:14:63:8b:fa:ef:c3:45:b3:3e:b8:cc:b7:17:ef:cb:
         9d:47:06:b2:2d:e4:c0:90:16:7c:1f:a1:6b:97:0f:a4:ed:c1:
         b0:7f:4b:c9:b2:5b:34:70:ee:cd:5d:59:8f:2b:dc:27:88:65:
         c2:0d:37:18:c2:47:25:4f:9e:5a:eb:d8:ee:32:c1:66:05:30:
         f3:78:2f:89:ff:52:cb:64:d8:14:cd:1e:d0:84:c8:2c:f2:73:
         65:dd:a9:b2:37:e8:99:a4:54:8f:11:64:a8:8e:e2:af:70:d8:
         67:4f:f5:b2:55:7a:fe:66:4c:7b:95:7c:0a:c2:bd:59:6b:6b:
         b1:a0:a3:08:cc:29:04:29:33:09:3f:28:6c:9e:cc:32:8a:3c:
         b3:9a:62:0e:9e:96:9e:18:e7:a2:35:25:ff:7c:c9:4f:63:55:
         ff:30:91:1b:32:1e:11:b4:c7:fd:71:3f:46:76:0c:98:b7:73:
         2e:68:f7:58:9e:4d:82:d0:f3:87:dd:ce:c0:a2:ac:56:d7:57:
         30:19:52:c1:4d:3c:98:e7:c2:fa:3e:b5:3e:10:f0:9e:51:ac:
         5d:1c:25:40:57:7c:5e:63:77:7c:2b:b0:83:4a:cc:c6:05:24:
         12:6c:7c:41:22:d5:94:f9:55:4d:d0:98:0d:12:34:6c:98:37:
         ab:fb:4e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:06 2025 by rpki-client