Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft
File:                     6XEkdSyEAGfdN-JC6Undo03LS04.mft (raw, json)
Hash identifier:          zXA5NWi6IO6KMePrXaqOGXYQEptEmQzrjgUC09+QQUI=
Subject key identifier:   F4:FD:07:CA:56:7A:57:E2:CF:FE:87:CE:9F:21:CF:E3:DB:AC:85:5A
Authority key identifier: E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E
Certificate issuer:       /CN=e97124752c840067dd37e242e949dda34dcb4b4e
Certificate serial:       019922FA939EBE1EBF03C02DAF5565EC4A80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft
Manifest number:          1671
Signing time:             Sun 07 Sep 2025 07:01:10 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:10 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:10 +0000
Files and hashes:         1: 6XEkdSyEAGfdN-JC6Undo03LS04.crl (hash: 9llKMSpxpxmnFFMYxSUGaGm96Yuww+2Pg2HL5ekzMrI=)
                          2: ln8cbDhSIfp4E2XB9SOMHr6Pnko.roa (hash: HgLGglk0S4IATrqUxgAV1S7c2Cds50Oig+WiSSLRjns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:93:9e:be:1e:bf:03:c0:2d:af:55:65:ec:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97124752c840067dd37e242e949dda34dcb4b4e
        Validity
            Not Before: Sep  7 07:01:10 2025 GMT
            Not After : Sep  8 07:01:10 2025 GMT
        Subject: CN=f4fd07ca567a57e2cffe87ce9f21cfe3dbac855a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:17:09:38:b6:cc:76:10:61:22:3c:e7:08:3e:
                    bf:46:20:ce:dc:4b:df:41:14:ce:a6:41:6e:46:09:
                    cb:a5:62:96:34:41:38:ba:bc:6f:0f:09:dc:bb:b9:
                    03:4e:92:d2:c2:8e:bf:d7:43:d1:46:76:2c:28:09:
                    e0:63:4f:cd:9a:47:ea:35:68:71:3b:e4:4b:f5:dc:
                    f5:40:19:99:c7:2f:4c:8d:9d:12:7e:46:cf:2f:d9:
                    38:ed:4f:21:86:c8:87:3b:5d:00:62:20:b6:60:7c:
                    b3:3f:d7:d3:a2:56:9b:ea:79:a5:f7:de:51:18:97:
                    b8:9a:6b:21:89:1b:63:b0:ef:43:af:13:b5:e4:06:
                    b4:fe:89:61:dc:7c:6b:59:44:b9:a0:c4:90:81:88:
                    5e:4e:fb:e4:43:27:8e:8f:d4:40:21:96:ac:c0:a6:
                    f7:ef:a4:1e:84:8e:67:f9:78:f5:db:52:58:65:fd:
                    cf:72:f5:13:6a:81:f8:5c:2a:4a:56:0d:c8:8f:6f:
                    52:ca:91:dc:84:81:7b:3b:51:06:10:0c:dd:d4:de:
                    80:ce:38:1a:1a:7a:2b:16:dc:20:45:c1:62:ff:47:
                    16:d0:d6:ba:46:e1:2a:48:0b:91:67:54:9d:7e:cb:
                    eb:b1:38:2e:90:6f:8d:b6:a0:15:48:53:6b:a1:94:
                    0e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:FD:07:CA:56:7A:57:E2:CF:FE:87:CE:9F:21:CF:E3:DB:AC:85:5A
            X509v3 Authority Key Identifier:
                keyid:E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:39:49:ee:70:05:7f:8f:71:e2:c1:7a:dd:d8:ed:64:98:fb:
         74:95:ac:34:a1:b5:69:5f:41:7d:b2:0b:9f:f1:26:46:04:c2:
         35:c1:2d:36:f4:d5:08:29:d1:b1:c1:44:6b:ac:b5:2c:78:1c:
         90:d6:86:95:77:6a:f7:39:0b:32:8d:d7:e6:46:3f:5c:4a:6e:
         81:47:74:5a:3a:ae:25:0b:b9:d2:3c:6b:68:00:e8:8a:59:04:
         ae:8d:a4:7a:a7:1d:8e:54:62:16:8c:81:34:f5:54:72:01:d8:
         56:a4:fc:de:ef:fd:f9:7e:5b:85:de:1a:14:2e:00:da:77:64:
         2f:fe:35:2a:9a:d6:29:5a:73:2f:f2:0f:fb:bb:34:10:77:e1:
         08:7e:3a:9a:de:f8:ba:be:3b:38:dc:2b:91:95:e2:91:f5:e7:
         70:34:74:a4:52:d1:79:c7:16:cc:a1:c3:c1:e2:21:8e:31:dc:
         8d:90:73:dc:f0:fd:d7:0c:7f:4d:a0:47:f4:f6:1f:b3:fc:d3:
         a9:63:0c:64:96:ac:44:d6:9c:4d:0d:07:d7:2c:b8:1f:26:eb:
         0a:a3:90:9f:20:36:b7:74:0b:53:2f:b5:c0:c6:75:fe:a4:89:
         68:d3:d4:71:c3:af:37:0d:b1:2f:78:5a:82:fb:2f:2c:09:af:
         2c:bc:66:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:38 2025 by rpki-client