Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
File:                     6GNg24H1BcXpqbWtEKgcZPSoW9I.mft (raw, json)
Hash identifier:          2R6pfmRJiv6153Oys9BVvA/Y9bpkpV79K1ZUSHdqE2c=
Subject key identifier:   A8:F7:CE:1E:0A:A6:F0:D0:22:41:72:E2:CB:3A:54:04:50:97:FC:C4
Authority key identifier: E8:63:60:DB:81:F5:05:C5:E9:A9:B5:AD:10:A8:1C:64:F4:A8:5B:D2
Certificate issuer:       /CN=e86360db81f505c5e9a9b5ad10a81c64f4a85bd2
Certificate serial:       0199240CC64731B3C7558787915F231D720D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
Manifest number:          1601
Signing time:             Sun 07 Sep 2025 12:00:40 +0000
Manifest this update:     Sun 07 Sep 2025 12:00:40 +0000
Manifest next update:     Mon 08 Sep 2025 12:00:40 +0000
Files and hashes:         1: 6GNg24H1BcXpqbWtEKgcZPSoW9I.crl (hash: nEysuTYOy1lt2n1RUmA4SCqvBYn77/5jrk+iGGGNS3k=)
                          2: uADkX3srvSz7h5-6p6oWNf6171A.roa (hash: JFtPLvs27wHExEiH+3v7Jikl9EHdIYjblSR25Lrk4HQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:24:0c:c6:47:31:b3:c7:55:87:87:91:5f:23:1d:72:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86360db81f505c5e9a9b5ad10a81c64f4a85bd2
        Validity
            Not Before: Sep  7 12:00:40 2025 GMT
            Not After : Sep  8 12:00:40 2025 GMT
        Subject: CN=a8f7ce1e0aa6f0d0224172e2cb3a54045097fcc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:41:ea:2c:db:86:03:f7:1e:bb:6d:59:a4:be:
                    7e:be:d7:2d:13:6b:2f:1e:37:43:dd:c4:5e:bc:40:
                    39:b8:48:53:d8:a4:a0:40:f2:63:fb:4f:7e:82:e5:
                    23:74:78:a8:6b:69:e7:e1:95:30:ec:0f:f3:28:8c:
                    cd:61:2b:a6:37:a9:c9:5b:13:03:ab:0e:0a:70:9f:
                    4e:94:f1:12:31:74:94:82:ca:fe:de:0f:dc:7e:0b:
                    40:f6:62:43:39:38:21:44:18:dc:a8:56:a4:d0:bd:
                    64:47:80:22:70:df:4e:70:89:35:56:35:81:d5:72:
                    39:00:85:89:32:fe:6c:ca:9a:78:60:b8:3c:20:55:
                    a8:71:ba:94:38:1d:8a:db:40:2b:17:28:b1:8b:00:
                    6a:06:e3:d1:34:9a:fe:ef:2f:28:c8:58:b3:a6:b2:
                    22:b4:0a:b3:59:49:1f:cf:9a:ed:ef:6d:8b:ea:2c:
                    5f:19:a1:63:16:51:74:cb:23:ef:bd:76:e3:26:2e:
                    f8:46:32:fe:69:04:7e:97:e7:ce:b1:0c:26:fe:84:
                    14:e7:c2:61:a7:2e:ea:14:c2:16:eb:06:97:c6:cc:
                    45:7f:ee:95:5f:ea:25:01:7a:ab:e2:5a:df:1d:c7:
                    4f:ef:88:da:3d:0e:d1:39:b8:e6:dc:4e:ab:62:e5:
                    b0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F7:CE:1E:0A:A6:F0:D0:22:41:72:E2:CB:3A:54:04:50:97:FC:C4
            X509v3 Authority Key Identifier:
                keyid:E8:63:60:DB:81:F5:05:C5:E9:A9:B5:AD:10:A8:1C:64:F4:A8:5B:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:1a:72:94:71:6e:5b:42:d8:c8:40:a8:7b:73:9a:77:bf:2f:
         a6:54:b9:57:41:98:70:00:bc:02:b1:f1:f9:3f:ac:29:f1:98:
         88:2b:da:7c:d6:80:33:3b:d1:e6:d8:2f:a7:f0:78:89:ff:3a:
         bb:ba:87:00:35:f2:0f:d9:9f:f5:4b:fd:75:cf:ce:7e:2f:7b:
         8d:20:3b:52:b3:21:54:f8:af:67:46:42:f8:5c:58:7a:ae:62:
         dd:09:51:b2:be:e8:02:c9:3c:69:fa:54:1e:83:6f:c0:12:26:
         82:c9:95:bd:ed:9e:ac:55:70:05:60:b8:b4:e2:c7:be:ea:d8:
         91:16:4b:ea:67:f4:c2:1c:60:79:dd:9e:fb:da:6e:91:5e:c0:
         68:a6:1a:10:cb:25:2e:1f:cf:2f:38:71:bf:25:aa:08:9a:ec:
         98:fc:61:2d:2f:a7:36:b1:bd:1b:d6:4e:01:e6:e8:9a:ea:92:
         51:ca:49:49:ea:3e:e0:13:50:89:5e:0d:fa:37:ab:3e:95:9b:
         85:bc:76:b7:44:f6:a6:7e:f7:2f:28:13:3b:24:aa:ec:b5:06:
         a8:70:d5:83:ef:bd:db:75:e3:41:52:97:0b:0d:76:e8:9b:37:
         9b:2b:83:57:4b:67:f8:78:83:2e:42:99:70:14:db:96:6e:81:
         07:ef:b0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:05 2025 by rpki-client