Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft
File:                     6gYhpKcsclr8dUFej4rPdTPUIH0.mft (raw, json)
Hash identifier:          jfWU+7qBtVWbxKbB6ZbAgct65z5KmXe7MpwJPMPGrsc=
Subject key identifier:   96:88:18:FC:A5:13:CE:3A:76:D2:B9:CB:A7:48:21:97:8B:77:85:B0
Authority key identifier: EA:06:21:A4:A7:2C:72:5A:FC:75:41:5E:8F:8A:CF:75:33:D4:20:7D
Certificate issuer:       /CN=ea0621a4a72c725afc75415e8f8acf7533d4207d
Certificate serial:       019873E240F2A025CEF63C4FBD77A0C12CDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft
Manifest number:          1462
Signing time:             Mon 04 Aug 2025 07:01:04 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:04 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:04 +0000
Files and hashes:         1: 6gYhpKcsclr8dUFej4rPdTPUIH0.crl (hash: NnE4W/CqPaPCk78DT4B8Eg/N5RzOwGYa3TVJYG4OfU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:40:f2:a0:25:ce:f6:3c:4f:bd:77:a0:c1:2c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea0621a4a72c725afc75415e8f8acf7533d4207d
        Validity
            Not Before: Aug  4 07:01:04 2025 GMT
            Not After : Aug  5 07:01:04 2025 GMT
        Subject: CN=968818fca513ce3a76d2b9cba74821978b7785b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a1:50:37:73:a0:df:01:7c:de:23:6d:d2:a8:
                    f9:90:70:6c:d1:94:da:ae:e2:8b:45:e5:b0:a7:c2:
                    97:65:75:70:62:49:a8:66:85:37:8a:cb:53:eb:64:
                    b3:50:2b:f7:98:2e:f5:7a:37:76:47:43:e0:84:5e:
                    99:8b:e3:ff:b7:e7:c7:a6:51:79:e7:94:1b:6c:e6:
                    ce:c6:60:32:06:b8:65:28:f4:ca:c9:7d:97:a8:64:
                    62:97:cb:b9:d8:ec:6a:9f:e6:46:44:f8:0b:92:78:
                    1e:6f:94:25:a4:4b:91:e9:4e:e2:ff:4b:58:5e:71:
                    05:3e:58:c5:58:4b:ef:45:6d:fa:e7:a1:67:e7:0f:
                    8b:46:b7:9d:b3:54:d8:bf:35:ac:9c:ce:7e:52:60:
                    a8:ab:94:28:fb:95:08:ad:bd:b8:15:46:65:d5:af:
                    94:96:b3:c6:be:b5:1d:7e:4d:ee:d9:b4:42:24:a8:
                    a8:e0:a4:86:e5:48:71:1b:2c:42:66:03:cf:70:10:
                    d5:61:ea:75:5a:f5:a1:fb:cd:8d:c0:63:66:ab:25:
                    64:49:e3:37:f1:d2:bf:eb:63:8d:38:20:2c:63:66:
                    86:3f:78:50:29:ec:b5:07:f5:25:f4:e2:4f:55:b8:
                    0f:2a:b1:28:9c:a8:b6:4d:aa:92:19:e3:a5:ab:2f:
                    d0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:88:18:FC:A5:13:CE:3A:76:D2:B9:CB:A7:48:21:97:8B:77:85:B0
            X509v3 Authority Key Identifier:
                keyid:EA:06:21:A4:A7:2C:72:5A:FC:75:41:5E:8F:8A:CF:75:33:D4:20:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:0f:fe:85:35:0d:1a:5c:97:01:04:e7:3a:a4:35:3f:47:be:
         1c:e5:c8:a3:d6:58:7e:81:78:e6:78:13:6f:e2:d9:f8:c1:97:
         e4:57:68:bb:17:c3:a4:f2:77:f4:28:00:7c:f2:70:59:e1:11:
         e6:0e:51:d5:d3:22:b9:7f:42:3e:45:37:f1:a0:cf:8b:15:46:
         ac:97:e9:ee:5e:87:04:ab:ff:cb:26:76:24:03:3e:7d:f6:77:
         2f:c6:eb:d9:51:a6:f1:4e:3f:ab:d6:04:4b:b6:62:17:3c:d2:
         45:25:25:2d:fc:0c:9f:c7:cc:1b:a6:7f:7f:5c:f2:58:a5:e5:
         0d:66:12:86:56:94:3f:c0:74:16:7e:c7:4b:38:ee:15:d1:04:
         17:95:4b:4d:20:ac:08:72:be:56:62:a6:9e:2f:b4:4c:39:b1:
         45:8a:46:d9:00:89:79:b2:37:91:91:74:c4:02:8a:f8:41:70:
         e5:2e:1f:56:7c:7a:e3:a1:07:ab:93:6f:bd:96:ce:44:18:a0:
         43:37:09:28:2a:99:b5:dc:fb:7f:73:38:d0:56:0b:6f:25:26:
         96:f4:b6:24:2a:3b:c6:4a:51:0b:6f:df:ff:a9:0e:16:23:c4:
         9c:40:fb:02:b4:45:aa:5b:13:60:ca:50:fc:0d:85:41:95:8a:
         bc:da:32:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:56 2025 by rpki-client