Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft
File:                     6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft (raw, json)
Hash identifier:          LZXHRJu8Yg3e9M6aeBjI5wwsgyo1+e3wfeQ38HlGCFo=
Subject key identifier:   91:19:39:40:E2:E3:6F:DC:CB:FA:B7:9D:03:E0:62:4D:1E:2D:53:75
Authority key identifier: E9:31:36:B4:45:FB:A1:CC:C1:F4:3C:43:59:0E:9B:D9:A5:AA:51:82
Certificate issuer:       /CN=e93136b445fba1ccc1f43c43590e9bd9a5aa5182
Certificate serial:       01987D8A546E444C9AA57A5005141A284D25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TE2tEX7oczB9DxDWQ6b2aWqUYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft
Manifest number:          036A
Signing time:             Wed 06 Aug 2025 04:01:14 +0000
Manifest this update:     Wed 06 Aug 2025 04:01:14 +0000
Manifest next update:     Thu 07 Aug 2025 04:01:14 +0000
Files and hashes:         1: 6TE2tEX7oczB9DxDWQ6b2aWqUYI.crl (hash: AGNmbWjd5XkmqjWXTbDvdop38u0vS1p6pVle9xUQqMc=)
                          2: gqtW-HTwNuaNzij_O-fG_WDDmgI.roa (hash: 64HgUSoh+cIdBaNAyauCdgl6p5QawtedcJQPBNkM8qg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TE2tEX7oczB9DxDWQ6b2aWqUYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8a:54:6e:44:4c:9a:a5:7a:50:05:14:1a:28:4d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93136b445fba1ccc1f43c43590e9bd9a5aa5182
        Validity
            Not Before: Aug  6 04:01:14 2025 GMT
            Not After : Aug  7 04:01:14 2025 GMT
        Subject: CN=91193940e2e36fdccbfab79d03e0624d1e2d5375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d5:03:8d:7d:d4:36:4b:90:c2:10:fc:91:4a:
                    36:5c:d8:26:c0:94:1a:9e:ae:fb:b2:c7:e9:d9:7a:
                    4d:49:d2:05:10:41:85:3e:3f:bf:5d:9c:d5:bd:41:
                    9e:34:eb:33:c5:98:df:de:10:a2:71:9b:c5:81:1d:
                    82:0b:c3:6e:5d:eb:25:a2:dd:6d:3c:cc:cd:07:7e:
                    f8:9a:d8:c4:bd:90:81:57:b9:6b:68:77:dc:75:49:
                    2e:be:cc:df:8a:a9:62:11:38:b0:28:d6:1b:3d:f1:
                    93:17:3e:ab:1c:a9:78:ba:63:b9:50:cc:55:92:5f:
                    be:ee:db:c2:04:41:e3:16:6b:d6:7f:65:34:97:62:
                    50:22:79:bc:bc:78:71:3d:d6:e7:52:b1:9d:4f:c6:
                    a4:06:9a:7a:d3:55:c7:5e:61:dc:a7:de:dd:6b:94:
                    37:e5:29:0b:4c:c5:d4:64:2b:c9:8c:72:4e:3b:a6:
                    b0:3e:9d:11:30:c0:af:95:2f:b6:c1:fb:84:3b:ae:
                    13:d0:fc:00:e0:19:73:db:de:54:db:c0:34:d4:a1:
                    00:67:2f:64:a1:75:c3:7f:63:a0:69:fa:da:34:af:
                    cc:e3:5d:c2:11:12:97:fa:6d:82:1e:a1:24:71:f5:
                    2e:38:50:d3:73:d4:8a:10:cc:eb:0f:0a:b6:53:c4:
                    48:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:19:39:40:E2:E3:6F:DC:CB:FA:B7:9D:03:E0:62:4D:1E:2D:53:75
            X509v3 Authority Key Identifier:
                keyid:E9:31:36:B4:45:FB:A1:CC:C1:F4:3C:43:59:0E:9B:D9:A5:AA:51:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TE2tEX7oczB9DxDWQ6b2aWqUYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:cc:37:43:94:39:f3:dc:9a:e0:4a:01:ac:1f:06:29:9d:14:
         8a:53:5f:f5:1a:2d:f1:ad:58:23:46:97:6f:fa:dc:04:6c:e5:
         72:61:70:6e:a4:61:e7:74:41:8a:08:d4:15:df:91:62:93:c3:
         c4:f3:cc:d9:68:95:bb:bd:15:26:60:22:c8:32:94:29:4f:5d:
         6a:84:57:1d:ab:23:b4:a4:5d:08:70:d9:58:23:78:5e:b9:6a:
         1d:e2:db:ff:b2:18:85:ba:30:02:d1:80:50:7f:69:d6:11:94:
         3a:ce:02:6a:0a:6f:87:d5:d9:99:ae:f1:e8:b5:b7:40:0b:d3:
         b5:e9:dd:0c:a4:5c:e9:ce:a4:ce:4e:61:72:0f:52:5d:c3:0f:
         90:8d:e5:1e:64:19:9c:67:19:d9:9f:40:a1:41:92:3b:ab:44:
         b7:4b:3e:97:5f:a6:0d:43:d9:1c:89:43:ab:e6:8e:25:58:8b:
         1e:e7:e8:4a:77:7d:88:a0:0b:39:ee:fc:72:85:f8:c7:b2:05:
         6c:77:8b:ab:d9:f3:f8:0e:b5:1b:96:12:6d:a5:6c:52:88:9f:
         ec:05:29:ca:0c:23:c2:4f:eb:d0:b3:ce:58:a3:96:93:65:50:
         48:2c:18:d6:5f:44:3d:01:73:4e:30:96:4c:86:db:af:b7:9f:
         a5:85:ea:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:39:00 2025 by rpki-client