Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
File:                     6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft (raw, json)
Hash identifier:          g58fRV0YbAwa7HuBbFC7wJth9Dt6SGAQuO5N+KavAkw=
Subject key identifier:   E8:97:97:AA:B4:99:24:F5:2C:EE:05:74:0A:66:6B:21:61:27:D4:2B
Authority key identifier: E8:2B:EF:EC:70:6E:ED:27:7A:9D:98:F7:0B:B3:FB:66:84:9B:F2:96
Certificate issuer:       /CN=e82befec706eed277a9d98f70bb3fb66849bf296
Certificate serial:       0199172D2A37ED14A52315DF6275A51397E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
Manifest number:          0F82
Signing time:             Fri 05 Sep 2025 00:00:59 +0000
Manifest this update:     Fri 05 Sep 2025 00:00:59 +0000
Manifest next update:     Sat 06 Sep 2025 00:00:59 +0000
Files and hashes:         1: 6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl (hash: yv0a6ctTOoUqX0rvI/G5tq+ZQ0Wpzm7uNNYR/iEqmTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 00:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:2d:2a:37:ed:14:a5:23:15:df:62:75:a5:13:97:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82befec706eed277a9d98f70bb3fb66849bf296
        Validity
            Not Before: Sep  5 00:00:59 2025 GMT
            Not After : Sep  6 00:00:59 2025 GMT
        Subject: CN=e89797aab49924f52cee05740a666b216127d42b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7b:14:40:18:56:ba:47:cb:d1:88:36:68:5b:
                    e1:b9:9e:20:09:cb:f1:77:68:e5:7e:55:f8:50:dd:
                    59:54:ed:86:2f:61:fd:82:d4:ff:b3:65:2f:f0:3b:
                    ba:08:b4:dd:42:81:ce:99:ce:3b:d0:5a:69:68:0b:
                    11:08:6e:f4:3a:e9:6c:e1:cd:43:9e:da:5e:df:1d:
                    8c:a3:22:1c:28:5f:62:46:b7:fa:80:c8:0a:90:8a:
                    d0:c7:3e:82:e3:60:77:76:5d:91:44:91:90:1b:c7:
                    4b:57:86:3b:22:6a:d6:5e:eb:61:52:96:7a:15:01:
                    e6:f6:46:eb:bc:de:b1:af:89:bb:28:ca:c8:74:33:
                    4b:f0:7a:4d:a7:49:e7:4a:2a:22:95:8b:2a:3c:53:
                    02:de:a4:c9:25:84:fd:f4:f5:65:48:f4:6e:ad:ab:
                    56:4e:5d:b5:0c:0b:85:71:ec:a6:62:88:14:77:4a:
                    e8:52:b6:c3:71:66:52:de:72:17:a7:d4:19:89:92:
                    1b:9c:46:80:0a:e8:b0:a8:28:49:4c:da:ed:3d:6f:
                    7e:47:8f:94:c7:2b:50:3d:75:84:a5:50:30:75:b6:
                    2a:12:74:38:70:99:7a:fd:27:9a:44:64:78:41:44:
                    de:df:6b:3d:6a:0c:19:53:ae:25:ae:a3:b8:a4:ba:
                    fb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:97:97:AA:B4:99:24:F5:2C:EE:05:74:0A:66:6B:21:61:27:D4:2B
            X509v3 Authority Key Identifier:
                keyid:E8:2B:EF:EC:70:6E:ED:27:7A:9D:98:F7:0B:B3:FB:66:84:9B:F2:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:5b:6a:8f:87:ca:de:4f:c7:6d:3e:49:a0:d7:03:ee:63:a5:
         06:96:90:3b:5a:67:04:3a:8f:7f:96:29:92:64:83:3a:6a:32:
         84:9e:c0:e2:c3:66:22:a1:5e:49:55:eb:bf:ef:9b:82:56:ec:
         59:0b:34:e6:f7:3f:cb:09:50:b9:64:4c:b1:0b:b0:55:b1:61:
         17:52:75:a2:db:6e:a3:c7:ee:b5:19:8f:0f:c7:ff:0a:c4:d9:
         55:e4:b6:bd:c9:b5:32:eb:37:ed:26:1b:b7:54:82:99:87:4d:
         ff:06:44:1f:00:88:a5:c8:94:23:b3:41:6d:83:bf:08:40:c0:
         56:62:0e:fb:83:14:19:e6:2e:77:c7:b8:4f:30:b6:f1:76:91:
         a8:8b:0e:87:cd:f1:37:a0:5f:0a:23:f0:72:2d:55:3b:12:35:
         74:f3:eb:5b:cd:52:db:73:e6:ab:dc:77:2f:17:80:c5:ea:66:
         be:42:45:90:2a:82:ee:98:76:00:43:dc:dd:69:7d:20:73:4b:
         a4:54:18:7d:ac:bc:17:44:a9:b7:8b:82:0a:f7:2a:db:2b:53:
         89:5d:fc:88:6b:bd:87:82:3e:a2:00:4b:57:1e:02:2c:25:1e:
         0b:d3:70:9e:64:d3:4a:45:71:89:e6:da:50:c1:ac:9f:6b:12:
         70:cf:29:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:06:45 2025 by rpki-client