Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
File:                     zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft (raw, json)
Hash identifier:          96SyOfn7dubptqfNJ9pfaJiwAyM/5z/3Zegr+1Blazs=
Subject key identifier:   E6:FA:9A:71:B1:C3:79:6A:A5:29:22:D2:AE:EC:F4:D3:91:87:B7:CF
Authority key identifier: CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59
Certificate issuer:       /CN=cea7ccd2aec0bbefc6350856512a95fe02259959
Certificate serial:       019922558C6F4392695FC8E68E5B86B05E9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
Manifest number:          0206
Signing time:             Sun 07 Sep 2025 04:00:55 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:55 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:55 +0000
Files and hashes:         1: zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl (hash: pc+IKVbVV7pxTUmDGH1+HVWN8HeQ1eZF54EeqPeR6HY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:8c:6f:43:92:69:5f:c8:e6:8e:5b:86:b0:5e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea7ccd2aec0bbefc6350856512a95fe02259959
        Validity
            Not Before: Sep  7 04:00:55 2025 GMT
            Not After : Sep  8 04:00:55 2025 GMT
        Subject: CN=e6fa9a71b1c3796aa52922d2aeecf4d39187b7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8d:db:29:ea:95:eb:d3:ea:3d:9e:d8:98:12:
                    ae:39:54:42:56:19:c0:fd:69:44:9e:00:3c:ca:e7:
                    63:ce:2d:2e:f9:99:74:84:bd:87:09:93:77:10:f8:
                    de:80:a0:6c:c7:96:2a:bd:11:cb:59:cd:b1:ad:a5:
                    7d:57:f5:a3:6b:dd:b2:d2:f3:36:98:e7:54:f2:5f:
                    a1:12:38:75:9f:42:5a:11:f6:f9:b0:9a:d5:26:88:
                    50:95:37:28:cb:6d:de:a6:9c:bf:1a:d1:99:1a:98:
                    2c:6b:d8:cb:5b:10:76:43:bd:d5:2f:b7:1b:52:50:
                    40:57:47:bf:c8:3c:bb:70:f5:25:87:b8:93:ad:f7:
                    2c:e2:e2:21:0b:91:e1:3e:b2:22:f2:62:e1:1b:13:
                    74:2b:61:d2:f1:db:27:4f:0d:7a:09:0e:99:8e:bb:
                    09:06:2c:44:c3:dc:18:ea:78:dd:89:de:ba:90:70:
                    f0:2c:47:56:67:54:43:91:7c:d1:53:49:53:57:27:
                    17:39:cb:8c:15:98:71:9c:94:3e:d7:4d:e8:1b:12:
                    16:83:e0:43:80:a3:ef:65:7c:b8:b1:f0:00:8d:c6:
                    c2:51:a2:5c:f7:f0:75:c2:47:ae:ae:98:13:64:ac:
                    17:8d:e0:78:55:15:32:32:fc:cf:28:88:51:16:09:
                    df:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FA:9A:71:B1:C3:79:6A:A5:29:22:D2:AE:EC:F4:D3:91:87:B7:CF
            X509v3 Authority Key Identifier:
                keyid:CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:41:87:c0:40:12:28:0e:48:4d:14:db:d9:dc:e8:ae:6d:f0:
         d6:14:54:b1:22:cc:ad:3f:94:7c:81:f1:66:54:7f:da:c4:b5:
         bf:50:51:63:16:61:74:be:c6:2b:cd:6a:a0:20:3c:21:fe:85:
         c9:d4:be:a1:69:fc:2a:bc:d9:09:0a:70:78:5f:4f:44:b9:0f:
         47:2a:00:79:f1:d1:46:42:7d:a2:b1:78:c9:27:f0:08:54:6a:
         59:02:5b:28:b7:aa:af:a5:d7:41:e7:b3:3d:f6:9f:32:76:b3:
         7d:0d:e1:70:51:22:ec:7f:97:c2:fd:bb:8a:cc:8b:be:d0:6b:
         d3:56:f0:ec:58:ce:fc:9d:d1:6c:37:6a:75:ae:ba:cf:d0:7c:
         2e:a3:8d:13:db:61:88:18:ff:10:ec:95:6a:94:c0:b5:76:b8:
         77:c9:21:4c:d0:86:69:7e:ec:f0:2a:9a:43:6d:c0:f6:4e:5f:
         9d:0c:b8:74:7f:aa:0e:2f:3a:3d:60:e4:50:75:5a:32:69:88:
         d7:2d:97:fa:fe:33:d7:74:e1:a4:18:15:f4:89:47:db:17:6b:
         d0:eb:e9:15:ff:31:65:19:c9:a3:66:88:88:62:e7:d2:14:d9:
         e4:22:03:a6:3b:0b:54:3d:51:3b:14:12:60:08:99:c3:89:0a:
         cc:42:f9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:04 2025 by rpki-client