Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
File:                     6xUL-GuHz4n8RJBgZfaXKwawnqg.mft (raw, json)
Hash identifier:          pGgIm5niJbZbU5IFK9v9F6MIpakZndeB8XaWujitnFE=
Subject key identifier:   C1:AA:8A:87:8C:33:2E:E3:F8:31:81:C6:22:D5:51:5C:36:B0:F9:BC
Authority key identifier: EB:15:0B:F8:6B:87:CF:89:FC:44:90:60:65:F6:97:2B:06:B0:9E:A8
Certificate issuer:       /CN=eb150bf86b87cf89fc44906065f6972b06b09ea8
Certificate serial:       019921B070016010C2436C0F75D5C005538F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
Manifest number:          166E
Signing time:             Sun 07 Sep 2025 01:00:34 +0000
Manifest this update:     Sun 07 Sep 2025 01:00:34 +0000
Manifest next update:     Mon 08 Sep 2025 01:00:34 +0000
Files and hashes:         1: 6xUL-GuHz4n8RJBgZfaXKwawnqg.crl (hash: 2yaJoxzWcCbS48xyZJ0sE7w7z8432+35RjqIbftFAkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b0:70:01:60:10:c2:43:6c:0f:75:d5:c0:05:53:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb150bf86b87cf89fc44906065f6972b06b09ea8
        Validity
            Not Before: Sep  7 01:00:34 2025 GMT
            Not After : Sep  8 01:00:34 2025 GMT
        Subject: CN=c1aa8a878c332ee3f83181c622d5515c36b0f9bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e6:ce:d3:9a:4e:f8:e1:f8:36:99:15:26:9f:
                    f8:47:43:5e:66:e1:dd:50:19:c6:2c:0b:3c:a7:65:
                    42:c1:71:eb:44:81:ab:c1:c2:55:b8:a1:06:99:a5:
                    00:c6:df:c9:e1:5a:af:db:3b:9f:c1:70:fa:a8:a1:
                    67:93:71:c7:cc:96:1e:e9:79:1f:2f:ac:cc:06:51:
                    04:cd:75:4f:32:92:ad:79:51:4b:b6:96:2f:c9:6f:
                    b8:2d:f8:01:52:40:02:62:95:e8:ed:0f:24:2c:40:
                    32:09:af:2d:82:88:07:c3:5b:7e:78:ad:e2:6f:ce:
                    e9:c6:09:41:c0:42:98:db:fb:09:16:bf:30:59:72:
                    f6:cc:4a:99:0d:57:6c:e6:bc:dc:b0:42:3c:73:e4:
                    ca:5b:4b:e2:9e:bb:c1:de:63:7e:57:70:f7:9c:0c:
                    88:d1:09:48:85:a0:9d:8a:4e:10:77:69:79:97:fa:
                    5e:bf:41:62:1e:95:05:81:80:d5:a8:1b:e5:c7:30:
                    cf:af:1d:7a:7d:0d:d3:5d:1f:29:d3:08:23:f1:5d:
                    33:b0:66:13:74:b3:e2:84:0d:c6:5c:13:c4:6e:1b:
                    fe:46:9d:67:bb:d3:5e:76:06:66:93:31:3b:08:86:
                    6a:74:ec:d0:c4:e3:2f:01:8e:74:a3:8c:b9:98:dd:
                    79:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AA:8A:87:8C:33:2E:E3:F8:31:81:C6:22:D5:51:5C:36:B0:F9:BC
            X509v3 Authority Key Identifier:
                keyid:EB:15:0B:F8:6B:87:CF:89:FC:44:90:60:65:F6:97:2B:06:B0:9E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:cc:fd:ae:f8:d9:1d:51:07:12:39:44:09:8f:26:c1:12:01:
         db:80:3a:49:ef:2c:aa:d2:2f:02:99:4e:13:40:4b:c5:df:33:
         f2:28:8e:e6:d2:61:55:c0:11:29:39:90:55:13:2a:b3:20:91:
         46:ff:8e:e9:be:ab:68:31:f1:76:91:b4:24:19:7d:57:5c:70:
         8f:b1:bc:1b:c8:c2:ee:b9:28:f6:c9:cb:cd:7a:68:05:ff:02:
         d7:79:78:98:76:b2:08:52:41:ae:d7:9a:92:d0:be:32:ca:f7:
         b5:b7:f1:27:df:04:ad:36:d5:79:f1:db:8f:b0:1b:2d:ae:f1:
         29:f3:7c:b3:22:e6:ac:d4:ba:78:93:75:ab:02:9e:50:d2:62:
         9e:65:bc:a0:98:c1:d8:d3:39:f4:bf:08:8a:45:e9:0e:b4:80:
         26:97:84:4e:ff:a0:f6:5e:70:39:40:de:a0:38:2a:9f:e8:42:
         a5:66:9b:2e:6b:c0:81:de:70:57:72:53:55:98:7d:0d:b1:e9:
         03:bd:bc:e8:ee:ca:63:9d:fc:36:92:5b:22:ba:69:26:85:54:
         b9:70:60:7b:94:1e:2d:53:57:74:ec:dc:88:3b:1d:cc:f6:cc:
         89:61:6d:51:5b:3c:40:94:27:03:92:bc:2c:21:e8:46:5e:cc:
         9a:87:8c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:47 2025 by rpki-client