Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
File:                     6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft (raw, json)
Hash identifier:          vOLmLC5+wqa6VXJW/2M6HDH1oqawh4efmr44HMxiqTc=
Subject key identifier:   50:3D:E2:7C:7E:2C:EA:93:99:B3:0E:AC:2A:6E:55:26:61:95:28:3E
Authority key identifier: EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17
Certificate issuer:       /CN=ea7651c0f1bf648ec64952e8084574b900f08a17
Certificate serial:       019921B1E584A502142BC6CE71ED42A9D62E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
Manifest number:          03AB
Signing time:             Sun 07 Sep 2025 01:02:10 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:10 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:10 +0000
Files and hashes:         1: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl (hash: cAhxH91cLifVod/IAhrzhoCiW+ycTzZbV/4PJEFJkY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b1:e5:84:a5:02:14:2b:c6:ce:71:ed:42:a9:d6:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea7651c0f1bf648ec64952e8084574b900f08a17
        Validity
            Not Before: Sep  7 01:02:10 2025 GMT
            Not After : Sep  8 01:02:10 2025 GMT
        Subject: CN=503de27c7e2cea9399b30eac2a6e55266195283e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e4:22:23:74:10:c7:58:a2:41:a7:c7:fd:73:
                    1f:4c:b3:d7:b6:22:c0:ce:20:d5:fe:be:5d:11:64:
                    fd:1d:c3:bc:32:68:c3:3f:48:5f:04:e4:9a:d5:c4:
                    82:ec:16:4a:02:3f:39:c6:7f:d6:02:b5:7f:88:1e:
                    da:6c:52:8e:35:99:bc:42:9a:91:18:9e:6e:b3:59:
                    25:d1:81:f4:32:97:8c:6d:c6:62:88:0f:6e:47:41:
                    10:87:a8:90:79:ec:50:b7:84:20:d5:19:fa:ee:ec:
                    be:a1:96:33:98:30:58:cd:b4:4a:8c:55:f9:40:89:
                    3d:b3:14:3f:89:42:ea:27:fd:40:20:61:f8:d7:d2:
                    1b:c0:41:9f:ef:8a:71:c8:6d:29:47:26:cc:bc:75:
                    e3:68:c7:e0:9e:41:7f:18:26:8c:61:50:83:73:c9:
                    a5:d0:f5:c3:e1:09:a8:06:84:9b:cc:16:f8:9a:da:
                    fd:89:6a:11:20:57:b8:5c:39:2a:5f:4d:4d:4e:60:
                    a4:03:4c:2d:0e:e8:d5:41:bf:e6:46:94:b8:b7:19:
                    f7:d8:ed:ee:54:d4:36:b4:c4:19:5d:4f:d0:de:2a:
                    f0:71:4c:01:1c:e1:2b:06:8b:53:61:4f:b2:2b:c1:
                    6c:a7:e6:dc:26:73:c0:f5:cc:d2:71:70:db:23:29:
                    87:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:3D:E2:7C:7E:2C:EA:93:99:B3:0E:AC:2A:6E:55:26:61:95:28:3E
            X509v3 Authority Key Identifier:
                keyid:EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:f7:10:c0:8b:33:0b:3d:3e:6b:7a:db:9a:88:43:5d:f0:42:
         94:f0:3b:f9:b6:1d:ce:d1:93:ce:b1:4a:9d:9c:1b:e8:a5:e1:
         c5:df:4e:c9:4a:2b:0d:91:26:49:ae:a6:eb:3b:ab:7d:42:aa:
         8e:2c:e5:b3:18:7e:75:e5:52:fa:bf:01:4f:b3:65:d6:ce:8f:
         f0:ee:c6:89:e7:16:51:78:16:a0:af:8a:97:5e:86:56:33:09:
         4e:f3:8c:76:ef:b3:67:f5:5e:51:8d:c4:b9:d8:5a:2b:b1:40:
         1c:7a:88:71:e6:70:23:9e:9b:59:8b:b6:19:f0:3e:cc:4e:20:
         80:03:eb:4a:71:92:dc:c9:71:ee:be:7b:26:7c:2f:00:0a:10:
         a8:af:a9:73:cc:cc:75:75:76:98:fb:df:9f:d0:02:f8:b3:11:
         e0:b0:95:5e:76:ce:ce:08:57:41:8c:67:67:d3:0e:be:3a:4f:
         e8:da:80:56:c2:9f:57:86:d2:d5:7b:7e:f9:aa:a5:e2:02:5d:
         44:ab:24:59:f9:ab:52:2c:f5:03:e5:a6:49:39:84:4b:24:c5:
         2f:f5:a9:ca:3f:f0:ce:d0:82:b8:7f:24:cc:91:d1:82:14:40:
         9f:a7:97:3e:60:b4:54:28:8d:f6:62:41:52:43:b7:7b:68:77:
         f8:3d:56:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhseWEpQIUK8bOce1CqdYuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNzY1MWMwZjFiZjY0OGVjNjQ5NTJlODA4NDU3NGI5MDBm
MDhhMTcwHhcNMjUwOTA3MDEwMjEwWhcNMjUwOTA4MDEwMjEwWjAzMTEwLwYDVQQD
Eyg1MDNkZTI3YzdlMmNlYTkzOTliMzBlYWMyYTZlNTUyNjYxOTUyODNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuQiI3QQx1iiQafH/XMfTLPXtiLA
ziDV/r5dEWT9HcO8MmjDP0hfBOSa1cSC7BZKAj85xn/WArV/iB7abFKONZm8QpqR
GJ5us1kl0YH0MpeMbcZiiA9uR0EQh6iQeexQt4Qg1Rn67uy+oZYzmDBYzbRKjFX5
QIk9sxQ/iULqJ/1AIGH419IbwEGf74pxyG0pRybMvHXjaMfgnkF/GCaMYVCDc8ml
0PXD4QmoBoSbzBb4mtr9iWoRIFe4XDkqX01NTmCkA0wtDujVQb/mRpS4txn32O3u
VNQ2tMQZXU/Q3irwcUwBHOErBotTYU+yK8Fsp+bcJnPA9czScXDbIymHkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFA94nx+LOqTmbMOrCpuVSZhlSg+MB8GA1UdIwQY
MBaAFOp2UcDxv2SOxklS6AhFdLkA8IoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm5aUndQR19aSTdHU1ZMb0NFVjB1UUR3aWhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80ZDAxMDYtYzFlZC00ZmYxLWFiZDYt
NjBkZWM5N2Q2NzgzLzEvNm5aUndQR19aSTdHU1ZMb0NFVjB1UUR3aWhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80ZDAxMDYtYzFlZC00ZmYxLWFiZDYtNjBkZWM5N2Q2Nzgz
LzEvNm5aUndQR19aSTdHU1ZMb0NFVjB1UUR3aWhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAivcQwIsz
Cz0+a3rbmohDXfBClPA7+bYdztGTzrFKnZwb6KXhxd9OyUorDZEmSa6m6zurfUKq
jizlsxh+deVS+r8BT7Nl1s6P8O7GiecWUXgWoK+Kl16GVjMJTvOMdu+zZ/VeUY3E
udhaK7FAHHqIceZwI56bWYu2GfA+zE4ggAPrSnGS3Mlx7r57JnwvAAoQqK+pc8zM
dXV2mPvfn9AC+LMR4LCVXnbOzghXQYxnZ9MOvjpP6NqAVsKfV4bS1Xt++aql4gJd
RKskWfmrUiz1A+WmSTmESyTFL/Wpyj/wztCCuH8kzJHRghRAn6eXPmC0VCiN9mJB
UkO3e2h3+D1WAg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:40 2025 by rpki-client