Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
File:                     5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft (raw, json)
Hash identifier:          4WQKJVaL3jUTDnaVt16heqYkKc2yxy1qzcs2cZF/+vk=
Subject key identifier:   83:93:74:D1:80:51:09:1A:C6:9D:FF:92:76:AD:5F:3B:12:9F:75:8A
Authority key identifier: E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94
Certificate issuer:       /CN=e6157528a9cce92518f36bf0a81b7901a650ae94
Certificate serial:       0199225597BF81079859FBE4BFF12C8914FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
Manifest number:          1600
Signing time:             Sun 07 Sep 2025 04:00:58 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:58 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:58 +0000
Files and hashes:         1: 5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl (hash: AiggPVJ2DML4xiiDIPFAGPrCvuIMUFxyCgM6B65jdyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:97:bf:81:07:98:59:fb:e4:bf:f1:2c:89:14:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6157528a9cce92518f36bf0a81b7901a650ae94
        Validity
            Not Before: Sep  7 04:00:58 2025 GMT
            Not After : Sep  8 04:00:58 2025 GMT
        Subject: CN=839374d18051091ac69dff9276ad5f3b129f758a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:71:64:60:95:b0:f1:a6:1f:de:91:3f:3a:26:
                    66:1a:0e:df:b3:7f:20:81:32:23:0e:6c:18:76:e6:
                    54:6a:9a:90:95:26:df:70:8a:3d:85:f0:a4:55:f3:
                    41:85:da:e6:da:17:09:0f:74:3d:ea:ee:a7:9a:b5:
                    fe:73:26:0a:70:58:27:f7:b4:07:b9:e1:36:d5:82:
                    12:e6:66:ad:56:93:f9:6e:bf:97:7a:ae:2e:d2:f7:
                    05:ea:93:e7:10:6d:03:8d:21:f7:7e:87:dd:17:bb:
                    e1:c1:21:b4:3d:48:90:0f:0a:6c:f8:68:ad:a2:0f:
                    6b:36:4a:e1:89:d0:3d:98:e3:f6:c1:a2:10:1f:d5:
                    f6:05:d6:66:1f:a9:da:87:e9:6e:53:cb:bd:1d:f0:
                    a3:a5:fd:5a:85:95:7d:2a:73:79:25:9e:6e:5b:0f:
                    3b:c9:85:42:54:e2:c0:99:35:d6:c5:b9:13:cf:a3:
                    4c:5a:49:41:37:97:cf:73:3d:2e:55:45:f5:26:72:
                    29:98:6d:86:7b:8e:37:9f:08:49:ba:37:a7:df:db:
                    54:a8:c1:86:ca:6d:fe:03:b1:80:d1:ac:27:de:98:
                    a6:1b:90:36:d8:4d:56:83:69:b9:46:96:de:5a:8b:
                    1f:39:11:2b:ec:46:e6:01:63:bb:ee:af:bc:0d:53:
                    fd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:93:74:D1:80:51:09:1A:C6:9D:FF:92:76:AD:5F:3B:12:9F:75:8A
            X509v3 Authority Key Identifier:
                keyid:E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ba:9a:77:54:9e:72:3d:a0:7b:b5:20:fa:30:70:a6:33:92:
         5f:5b:05:31:fb:f7:c0:4d:2a:bc:e9:fb:56:69:45:76:ef:e9:
         24:46:aa:80:a1:ad:bf:62:8d:6c:3e:07:ce:ac:f4:23:d3:68:
         0c:16:52:fa:3e:e3:64:d0:f5:43:32:a7:25:6f:d1:62:7d:a5:
         bb:0c:88:41:1f:19:a4:14:07:7d:ff:27:2c:6a:d7:f4:9c:df:
         33:34:a2:a8:24:62:39:0a:34:72:17:ca:d9:0e:f1:ca:f2:bb:
         b4:e2:d7:7f:68:41:ab:6d:db:63:5d:53:54:9a:f3:1e:68:93:
         58:eb:34:a9:70:be:fc:aa:08:03:df:3e:e8:8f:0a:f8:65:61:
         c7:0c:52:aa:1d:8f:f8:b5:de:be:ed:31:c6:28:01:e0:6e:9b:
         76:2e:2c:37:52:2a:c4:8c:a4:9d:84:01:43:00:94:fa:f4:32:
         89:19:83:ec:47:67:b2:5b:8f:d6:2e:f4:40:81:1e:a9:34:45:
         89:20:1e:d3:09:9a:24:56:ab:6a:71:2e:d6:5d:1e:53:f4:74:
         1e:f3:c7:07:ef:fd:02:f9:18:b0:56:76:f9:8f:b0:62:db:0a:
         07:83:71:1e:96:8a:e9:e9:5b:64:5e:12:91:92:32:ef:1c:c8:
         33:61:4e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:25 2025 by rpki-client