Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
File:                     6ch0aZeAldiv9jJygEuy810UkQM.mft (raw, json)
Hash identifier:          V0irhRJ4dKMJPTGZH5F3r8IE2REn/THgpb3shR9vkdc=
Subject key identifier:   A4:67:1F:1D:0C:1C:5B:CF:AB:7D:75:7A:B4:7A:71:E3:B3:AB:48:32
Authority key identifier: E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03
Certificate issuer:       /CN=e9c87469978095d8aff63272804bb2f35d149103
Certificate serial:       01988D345008A2BF8B349781ACBD84A41CBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
Manifest number:          095F
Signing time:             Sat 09 Aug 2025 05:01:12 +0000
Manifest this update:     Sat 09 Aug 2025 05:01:12 +0000
Manifest next update:     Sun 10 Aug 2025 05:01:12 +0000
Files and hashes:         1: 6ch0aZeAldiv9jJygEuy810UkQM.crl (hash: 4/RcNoQ8DHE4rt66uWgUikorx5FOPtBOZONS6YaLTJY=)
                          2: zUJ5qWVbr4pmer3m739HNMffZjg.roa (hash: NJqHyM9HbL1+6lpUhrutNRFZX2Z30cCNuSy/2q+fWs4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:34:50:08:a2:bf:8b:34:97:81:ac:bd:84:a4:1c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c87469978095d8aff63272804bb2f35d149103
        Validity
            Not Before: Aug  9 05:01:12 2025 GMT
            Not After : Aug 10 05:01:12 2025 GMT
        Subject: CN=a4671f1d0c1c5bcfab7d757ab47a71e3b3ab4832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:72:c2:6a:87:93:9b:2e:e5:d0:c7:12:22:8a:
                    f7:e3:79:0f:95:aa:d0:63:60:cb:48:d9:c9:03:3a:
                    ed:db:7d:f4:12:b1:69:fb:e4:b2:7e:1b:c7:bb:f4:
                    b9:17:85:9d:62:1f:1f:2d:41:69:f2:31:0e:96:39:
                    e1:06:50:3f:84:17:8b:39:6b:2b:45:20:8b:ef:76:
                    91:39:a7:f0:00:82:9c:de:66:f1:eb:6e:05:ce:08:
                    02:6a:25:06:03:c7:28:91:dc:fd:e3:73:de:ae:7e:
                    42:6f:03:dc:cb:c0:95:ea:fc:39:10:ae:06:15:33:
                    0f:de:fb:06:8b:82:29:4f:26:87:27:2c:dd:3e:52:
                    64:0c:ec:9a:4c:a5:ba:37:e8:05:95:af:b9:3a:d0:
                    55:e4:48:60:fa:69:ca:57:8b:4f:b7:22:f2:38:0a:
                    eb:4a:db:3c:fe:e2:57:9f:83:e0:26:bd:bf:10:a2:
                    a9:11:0b:b8:d9:81:c1:3d:92:35:14:e7:3b:ac:fb:
                    ff:3f:12:9d:f4:cf:13:69:64:5f:3d:c3:a0:d7:5e:
                    eb:30:c4:08:45:fe:c2:61:0e:99:70:7b:bb:df:42:
                    1b:ad:69:b0:19:d3:5f:a5:c1:17:85:e2:57:24:01:
                    51:46:d6:25:7b:4e:65:50:76:56:d9:22:22:63:1e:
                    02:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:67:1F:1D:0C:1C:5B:CF:AB:7D:75:7A:B4:7A:71:E3:B3:AB:48:32
            X509v3 Authority Key Identifier:
                keyid:E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:7d:b4:23:e9:c0:7d:c7:e4:da:c2:b0:2c:ed:f3:8d:8b:9a:
         de:3d:00:f9:12:f5:64:1a:3f:8c:b3:d0:a3:33:69:ed:2c:6a:
         c8:3e:be:25:5b:8c:29:82:46:b6:c2:c5:7d:ab:6f:84:d1:e4:
         c3:31:9e:aa:5e:80:1f:5d:5e:7f:bb:4d:dc:f1:64:2e:6c:46:
         9d:57:69:47:ce:81:d2:74:cb:fd:24:e8:3c:d0:30:27:dc:56:
         9f:cf:9b:54:a4:29:68:ca:b3:a1:63:9d:89:a9:b1:42:67:9d:
         7a:23:45:f8:99:61:d8:b7:d4:f6:90:1c:11:14:26:8a:76:90:
         8f:a8:1d:de:62:56:73:70:06:07:35:0c:53:7d:d4:68:93:c0:
         20:13:e8:f6:e4:e3:ea:10:a9:87:b2:3a:d9:4a:b0:f2:b3:48:
         89:aa:f6:83:b9:9a:72:17:5e:da:c5:76:62:57:63:b7:6d:f9:
         71:f0:96:9b:78:ca:a2:ae:57:e6:e6:06:69:1c:29:a3:34:9c:
         83:9c:69:20:62:c9:9c:07:83:a7:c9:9d:f7:5b:b8:eb:2f:e9:
         ce:61:ec:59:28:13:1f:18:24:87:75:d5:da:61:2b:68:ed:7c:
         8e:e9:08:3e:ee:48:17:83:15:9b:a6:d9:02:7f:18:19:cb:c2:
         71:7f:e6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:54 2025 by rpki-client