Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
File:                     6MC119fK9-9NNVXA2Q6V17-G5gY.mft (raw, json)
Hash identifier:          F1lzCL9kfh7YWvx/KkvY3RjEDxwOqMGk7YUNydiikCk=
Subject key identifier:   22:1C:15:4C:2B:39:93:82:6A:5F:21:19:F9:C3:E5:AF:16:52:A3:D1
Authority key identifier: E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06
Certificate issuer:       /CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606
Certificate serial:       019891EC43DC728ACBC0DF450DBE3D735AF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
Manifest number:          04A7
Signing time:             Sun 10 Aug 2025 03:00:36 +0000
Manifest this update:     Sun 10 Aug 2025 03:00:36 +0000
Manifest next update:     Mon 11 Aug 2025 03:00:36 +0000
Files and hashes:         1: 6MC119fK9-9NNVXA2Q6V17-G5gY.crl (hash: TL/aSJILiB10lj0L8DpgKic+pUMBMb7VbEIfCf3KGDs=)
                          2: zLqJ2jk1gnb1U6_xEyeO1kXar2w.roa (hash: f9xXsOCbyfrGDmPeAHiz1i2Ip8aFRkb7BmV8Krt70eA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 03:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:91:ec:43:dc:72:8a:cb:c0:df:45:0d:be:3d:73:5a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606
        Validity
            Not Before: Aug 10 03:00:36 2025 GMT
            Not After : Aug 11 03:00:36 2025 GMT
        Subject: CN=221c154c2b3993826a5f2119f9c3e5af1652a3d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:35:ad:03:48:23:40:8b:1a:81:5b:b8:28:25:
                    6b:e6:a0:c5:21:07:94:98:d9:43:92:ca:3e:3c:86:
                    a5:44:fd:3d:1a:78:f2:3b:fc:67:2d:52:f7:fd:ee:
                    2a:f9:1f:8a:55:40:c9:31:98:af:67:c7:8d:97:65:
                    75:8f:f5:af:d3:b6:81:27:36:bd:7e:7c:d4:70:ee:
                    e1:bd:ff:11:4d:bb:f9:cc:ee:a9:74:05:bd:3d:3d:
                    5f:ff:54:c0:ac:d7:60:2c:75:cb:bd:68:c0:67:69:
                    66:0e:2e:03:8a:bc:dc:ab:3e:26:af:e7:50:99:e8:
                    25:de:5f:43:1b:1d:1b:f6:5b:fd:4f:b2:e8:0b:0d:
                    9d:26:da:e4:d9:74:91:90:b5:1a:5e:7d:30:04:a6:
                    43:84:84:b4:5b:c6:7e:5f:4a:b6:2f:e7:d2:84:a2:
                    db:24:f9:71:2f:d0:22:37:60:4d:66:e8:77:e3:1d:
                    c1:09:70:e2:10:59:3e:8b:06:e8:71:43:09:eb:eb:
                    1f:54:3c:9d:42:ec:17:c2:cf:e0:ce:a8:b5:fc:34:
                    d5:18:b6:91:b1:4c:d6:cf:8e:5c:ea:8e:45:af:59:
                    61:0c:4f:ac:b3:9e:46:a2:f0:c4:2f:8e:1e:75:c3:
                    65:22:2e:3e:27:cf:d9:ad:dc:3f:2e:8b:54:79:c6:
                    19:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1C:15:4C:2B:39:93:82:6A:5F:21:19:F9:C3:E5:AF:16:52:A3:D1
            X509v3 Authority Key Identifier:
                keyid:E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:aa:37:dd:00:d5:43:41:ed:37:dc:a9:df:67:eb:72:98:b0:
         3b:ff:5b:dd:98:fa:45:f2:60:f6:0e:48:29:fb:11:10:4f:09:
         7c:f6:8d:da:02:1b:c7:7d:59:e3:5d:c6:aa:69:06:0f:81:96:
         31:35:58:e1:46:65:c4:4e:94:ac:98:1c:a6:0b:e5:02:57:5d:
         a1:9e:d3:14:ad:77:1f:4d:83:6f:e8:64:12:f7:7a:ce:f5:1d:
         cb:2a:53:b3:aa:bc:a9:e7:98:55:7a:e0:dc:4c:bc:0f:0e:f7:
         63:c1:5f:79:32:a6:02:76:43:7e:f1:05:66:40:43:f0:8b:e7:
         c1:1b:42:6d:70:41:58:2c:0a:df:4e:70:8d:84:56:2c:e9:41:
         92:b4:46:fa:e8:4d:5a:d1:64:73:6c:c3:b2:1b:76:5f:0e:f7:
         9e:ed:86:01:04:33:c3:a1:97:da:31:69:5d:05:1c:87:ce:b0:
         bf:a4:ac:db:b1:92:b7:e5:2f:2c:df:02:64:d8:34:dc:79:28:
         24:d2:e5:a0:63:35:42:90:7c:a9:9b:df:0b:ce:eb:fa:72:0b:
         df:93:08:dd:dc:0d:66:1e:73:91:31:b0:30:14:8d:5f:6d:13:
         08:4a:f1:88:f6:ac:6d:44:f7:2e:08:9c:76:47:44:0b:7e:13:
         a0:61:78:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:41:40 2025 by rpki-client