Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft
File:                     c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft (raw, json)
Hash identifier:          sFPVxfT+6H3walVYyZE9DzeAielEeb6iTPYAAlQyCtI=
Subject key identifier:   95:4F:84:8C:F9:4C:57:85:92:A1:D2:48:0B:45:B4:C5:3D:BF:AC:F0
Authority key identifier: 73:AB:E1:5F:6C:54:09:2B:10:3D:4A:C0:86:44:46:9A:7B:1E:6F:E4
Certificate issuer:       /CN=73abe15f6c54092b103d4ac08644469a7b1e6fe4
Certificate serial:       019922FA7164FCDB71530BB6A9BA6AE84A32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c6vhX2xUCSsQPUrAhkRGmnseb-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft
Manifest number:          15FD
Signing time:             Sun 07 Sep 2025 07:01:02 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:02 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:02 +0000
Files and hashes:         1: c6vhX2xUCSsQPUrAhkRGmnseb-Q.crl (hash: vNd6eqSWQRcK5h7JS0vB48s0jUCzhdk6F/J4yAZb/iU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c6vhX2xUCSsQPUrAhkRGmnseb-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:71:64:fc:db:71:53:0b:b6:a9:ba:6a:e8:4a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73abe15f6c54092b103d4ac08644469a7b1e6fe4
        Validity
            Not Before: Sep  7 07:01:02 2025 GMT
            Not After : Sep  8 07:01:02 2025 GMT
        Subject: CN=954f848cf94c578592a1d2480b45b4c53dbfacf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5d:bf:40:f2:f8:1e:dc:86:df:0a:2b:60:ca:
                    f5:7e:1a:c3:7f:27:4b:90:9b:f2:99:9f:da:dc:39:
                    62:9b:bd:f5:d1:ae:39:10:15:1d:e8:10:7b:ae:f2:
                    e7:c9:d4:d5:8f:bb:62:29:87:38:81:47:7d:f5:5d:
                    c5:1d:5a:aa:fb:9d:d9:be:06:36:a6:8d:34:ac:bf:
                    35:fd:bf:03:5f:bb:4b:f0:65:50:b3:a6:5a:6f:4b:
                    77:8c:7e:8a:7b:46:c4:ab:9f:2d:65:6d:40:a8:c3:
                    60:77:cf:99:ec:b4:c7:3f:10:b0:1b:1e:e4:0d:45:
                    fc:03:41:ae:6b:4e:ab:42:dc:92:f0:88:2d:3f:6f:
                    8d:74:1a:70:b1:1e:79:b5:5d:a9:a8:4b:b3:30:d1:
                    c8:e6:b8:8f:06:0e:14:98:84:dc:d8:ab:56:68:3d:
                    bf:eb:a9:e7:c5:cc:a2:92:76:8e:49:d3:ce:bd:b9:
                    0f:40:f8:ca:dc:a9:0e:e0:c1:24:e2:1b:75:96:28:
                    36:d8:98:c9:f2:37:8b:1d:16:43:f5:7c:42:f9:07:
                    99:ef:5c:b9:5c:0a:fc:25:6f:90:4c:91:f1:4f:6c:
                    4e:5a:16:b6:ca:9e:57:ff:60:74:ad:37:bb:6d:1c:
                    42:6a:ba:ad:07:39:ea:ad:3e:ed:8d:b6:a0:c3:58:
                    a3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4F:84:8C:F9:4C:57:85:92:A1:D2:48:0B:45:B4:C5:3D:BF:AC:F0
            X509v3 Authority Key Identifier:
                keyid:73:AB:E1:5F:6C:54:09:2B:10:3D:4A:C0:86:44:46:9A:7B:1E:6F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6vhX2xUCSsQPUrAhkRGmnseb-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:18:4e:2d:fc:80:3e:34:9c:12:37:8d:b2:9c:df:2d:85:89:
         5f:04:4a:06:e9:07:dd:6c:59:11:05:32:12:b1:25:44:7e:fd:
         2e:0c:43:a9:34:9d:e8:c9:da:9c:41:71:ed:d7:bf:22:f6:80:
         7c:46:03:c4:ba:97:a0:7c:24:04:7f:47:af:fe:3a:ce:7e:6d:
         74:3d:57:72:bb:fd:f3:c3:06:cf:eb:24:ca:7c:35:98:65:c2:
         a2:4a:f0:7f:81:cf:46:da:3e:c8:17:05:4b:da:98:97:bf:4c:
         cf:cc:5b:1a:93:18:a6:82:59:78:69:ba:11:9b:c5:2f:c3:7d:
         48:11:dd:6e:c1:2f:a8:44:b8:1c:ee:87:59:ba:12:4f:06:08:
         51:09:b8:0e:d9:97:3d:68:2f:69:60:22:44:4f:62:02:3b:76:
         ac:5d:47:c9:66:66:43:cb:e6:3a:fc:c1:6d:0e:1c:54:bf:3b:
         c3:26:be:67:85:94:4f:ae:82:c4:75:d1:f6:fb:55:02:cd:9b:
         14:45:80:34:ae:81:9c:c0:d3:a3:0f:0c:03:a1:ae:96:f8:3e:
         38:6d:20:a0:02:6d:56:e8:8e:17:04:02:05:46:99:c3:bf:5b:
         36:7f:5a:fd:ab:89:c7:18:7e:02:49:5a:33:d3:05:52:fa:f4:
         39:2e:6d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:28 2025 by rpki-client