Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
File:                     a-pT2WLWegFI5je0tGib5NCEqeU.mft (raw, json)
Hash identifier:          IvXIxjVm30xlxnh0XNTj8Jk8tomfwCXUgD3Vtd1F1vc=
Subject key identifier:   B9:C6:17:16:36:BD:BD:F2:5A:ED:F9:4F:DC:CC:3A:E9:9E:2F:8F:06
Authority key identifier: 6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
Certificate issuer:       /CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Certificate serial:       019895243FEB96FF5571B6CAA9769007D7D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
Manifest number:          0606
Signing time:             Sun 10 Aug 2025 18:00:37 +0000
Manifest this update:     Sun 10 Aug 2025 18:00:37 +0000
Manifest next update:     Mon 11 Aug 2025 18:00:37 +0000
Files and hashes:         1: a-pT2WLWegFI5je0tGib5NCEqeU.crl (hash: W7U5DdWOeEp4C259AZpomzvd/ePdm2BEPRqf84ZaekE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 18:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:24:3f:eb:96:ff:55:71:b6:ca:a9:76:90:07:d7:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
        Validity
            Not Before: Aug 10 18:00:37 2025 GMT
            Not After : Aug 11 18:00:37 2025 GMT
        Subject: CN=b9c6171636bdbdf25aedf94fdccc3ae99e2f8f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f2:78:5a:df:03:18:63:0c:a5:bb:fc:31:1a:
                    e0:fe:7c:27:6b:6f:88:1d:15:ff:ed:49:e5:9f:dc:
                    03:06:3d:f3:f0:f2:eb:87:4a:a0:48:d0:6b:25:59:
                    b1:b2:3f:d3:59:77:df:52:11:b0:b7:b9:f2:59:8e:
                    dd:88:51:65:30:97:91:d1:89:1e:1d:11:26:f2:2c:
                    fd:68:9d:ab:60:fa:65:80:74:d0:db:51:65:43:30:
                    44:0c:a1:26:10:e2:8e:47:30:15:5d:f9:de:54:3f:
                    bf:2f:24:32:5b:ed:d1:38:10:70:51:f5:cc:cd:4b:
                    45:dc:25:6e:c5:85:83:55:06:04:2e:d1:75:13:ca:
                    a2:99:ec:27:09:6c:5e:58:8d:b9:c5:50:76:78:61:
                    02:a5:b8:d4:80:bf:65:e7:68:8f:41:94:14:c0:65:
                    8c:45:29:fc:9a:ff:96:d9:0d:54:8e:4d:ae:de:cf:
                    01:7a:3b:bd:dd:d0:6e:70:06:0a:61:f7:d0:b4:81:
                    d1:e4:f1:16:2b:b7:b5:43:6b:6a:ba:95:09:66:08:
                    8c:cd:62:ca:b8:ab:77:99:58:a8:4f:b5:2d:ec:9f:
                    73:f6:ec:87:89:a9:cf:ea:0f:1e:6a:0e:5b:a5:22:
                    b5:ff:6e:87:1f:8f:5d:7e:38:29:dc:68:91:8a:ff:
                    53:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C6:17:16:36:BD:BD:F2:5A:ED:F9:4F:DC:CC:3A:E9:9E:2F:8F:06
            X509v3 Authority Key Identifier:
                keyid:6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:01:47:19:86:45:fb:6e:07:6c:17:ee:5f:7f:e0:64:03:3d:
         87:cd:47:f5:dd:99:8f:53:4f:19:3d:e6:1f:06:64:88:ff:e9:
         aa:f4:db:e9:9a:71:06:56:49:ca:f1:8c:31:79:21:a4:1d:9e:
         91:46:01:b0:0c:33:95:92:48:54:81:69:64:a9:69:41:b9:20:
         6d:d2:1e:b2:3b:f7:24:54:14:86:e4:64:e3:8a:c8:b4:04:f4:
         a9:8f:4c:af:07:54:bc:5d:22:d2:71:51:1b:72:b6:42:4e:a9:
         a9:d3:0b:96:77:45:c3:b2:fc:9c:09:59:32:10:64:84:b9:24:
         90:1d:39:a6:e7:0a:14:93:e7:04:02:d4:3f:64:f8:5b:dc:31:
         54:4d:40:d3:38:18:f6:ea:07:c4:13:d7:f2:75:ec:d1:e7:fd:
         35:3d:d0:7e:79:fc:d2:27:e8:5f:98:14:2c:bb:b4:1a:93:d9:
         85:2a:23:4a:ce:60:81:6b:cd:91:01:be:23:cd:3f:4f:83:ac:
         82:97:e0:3b:85:cb:e7:67:e9:1f:e0:6e:93:41:64:9e:35:9f:
         52:f9:49:a3:3d:bd:e8:87:b1:87:c2:ac:ad:05:f9:c5:02:08:
         42:46:03:4b:60:03:65:5f:7d:a2:1f:73:02:d0:8d:81:f6:ba:
         3a:b0:49:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:12:52 2025 by rpki-client