Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.mft
File:                     6eybY31F3ICc9SE_ZXpjWpDjFx4.mft (raw, json)
Hash identifier:          KLbjfY9pBehIpcGwgLgTPLZQN9AkEPlPubbqOMwTmYc=
Subject key identifier:   F4:D3:77:5E:6C:D7:9A:97:13:6F:00:99:5A:A2:85:E7:A9:AE:25:3F
Authority key identifier: E9:EC:9B:63:7D:45:DC:80:9C:F5:21:3F:65:7A:63:5A:90:E3:17:1E
Certificate issuer:       /CN=e9ec9b637d45dc809cf5213f657a635a90e3171e
Certificate serial:       0198941237ADBC9BFFA16A9C47B5ACD49BF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6eybY31F3ICc9SE_ZXpjWpDjFx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.mft
Manifest number:          0A3B
Signing time:             Sun 10 Aug 2025 13:01:18 +0000
Manifest this update:     Sun 10 Aug 2025 13:01:18 +0000
Manifest next update:     Mon 11 Aug 2025 13:01:18 +0000
Files and hashes:         1: 6eybY31F3ICc9SE_ZXpjWpDjFx4.crl (hash: CE0WOhxqEg//6Koudo5doErTghupxV0KjOGehF9Bmns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6eybY31F3ICc9SE_ZXpjWpDjFx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 13:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:12:37:ad:bc:9b:ff:a1:6a:9c:47:b5:ac:d4:9b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9ec9b637d45dc809cf5213f657a635a90e3171e
        Validity
            Not Before: Aug 10 13:01:18 2025 GMT
            Not After : Aug 11 13:01:18 2025 GMT
        Subject: CN=f4d3775e6cd79a97136f00995aa285e7a9ae253f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:18:d5:e1:18:7f:99:e0:dc:18:3e:e8:17:cd:
                    c9:5f:ac:06:55:33:39:cd:fc:8c:ea:c9:ce:ec:cd:
                    09:ef:1f:d3:f3:1a:92:22:e7:c8:61:c9:e6:6b:76:
                    2e:b3:68:d8:86:a9:3b:b3:63:70:fa:18:54:ad:1a:
                    02:05:41:df:44:23:dc:24:ba:3c:56:09:9d:41:46:
                    df:3e:ae:fb:95:77:fa:35:9f:54:c9:e8:1a:7e:35:
                    8f:62:fb:42:47:0b:eb:bc:07:56:1b:b6:00:50:08:
                    e3:31:f8:bb:fb:38:bb:5b:14:ba:05:19:aa:d9:64:
                    19:b4:ca:1c:0d:28:f1:29:71:f0:b8:93:7c:66:d5:
                    d7:6e:52:ef:0e:fa:e6:55:3a:ae:0d:ca:95:71:1e:
                    6c:a0:83:0d:66:55:46:b7:ea:86:58:ee:eb:f4:24:
                    0d:69:d9:a7:ab:55:e3:54:70:3b:b7:8a:d3:7b:7e:
                    ef:ac:aa:7d:c2:a0:3f:5f:d7:c9:76:8c:76:6c:27:
                    2c:53:26:6d:6b:0c:28:c2:ce:6c:ac:77:10:16:fd:
                    a1:73:15:ac:f5:d5:81:ad:dc:c1:de:02:07:0a:19:
                    c7:c9:26:f7:32:26:08:80:2f:04:fd:8b:2c:3b:d5:
                    05:6b:00:13:8e:48:01:64:0a:69:54:03:b5:10:df:
                    cc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D3:77:5E:6C:D7:9A:97:13:6F:00:99:5A:A2:85:E7:A9:AE:25:3F
            X509v3 Authority Key Identifier:
                keyid:E9:EC:9B:63:7D:45:DC:80:9C:F5:21:3F:65:7A:63:5A:90:E3:17:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eybY31F3ICc9SE_ZXpjWpDjFx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:a2:1b:ac:12:a4:f4:3f:36:3e:cf:47:d9:e0:49:7f:49:a5:
         71:43:bd:d3:f5:84:61:4f:b8:93:55:88:4d:c4:5b:df:30:70:
         c6:c5:c0:9d:c6:a2:81:1e:47:c6:53:13:1b:74:40:94:11:c2:
         6b:1e:8b:47:dd:96:ca:8c:06:25:82:4b:db:29:ec:69:4a:98:
         93:7b:e8:1b:24:6e:f2:c6:8e:9a:4f:03:52:4d:1d:09:73:d6:
         fa:df:17:80:75:97:bb:0f:09:9c:71:48:d9:07:00:f2:99:84:
         02:f0:a0:98:ae:bc:a5:9e:e0:d2:e9:5d:5e:df:fb:81:67:e9:
         08:a6:41:0d:88:32:e1:e1:43:2b:ee:30:03:55:f9:b9:f8:7d:
         14:29:99:ea:c3:22:a3:66:fd:42:c1:ac:a4:20:ab:14:f5:6c:
         50:9b:f9:8c:ff:d7:18:64:30:c7:7a:b0:c4:ab:57:07:7b:fb:
         cc:a5:ec:89:6c:9b:28:d8:30:a5:25:b6:1b:a5:94:88:e2:9b:
         86:7d:bb:9c:37:d1:be:d5:1b:07:15:47:e1:93:57:3d:28:43:
         96:2a:77:ad:ec:bd:c2:96:65:32:d2:cf:b9:53:a2:8e:72:7b:
         f2:98:a4:04:58:92:fa:0b:7f:77:87:b8:f5:ce:3d:bf:dd:36:
         38:e7:1c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:31 2025 by rpki-client