Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
File:                     6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft (raw, json)
Hash identifier:          85O9hO1jZS9SgsMM3x8GS7pYh4UPsXvT4WIqtMX90Cg=
Subject key identifier:   F4:3B:B0:67:D2:61:FE:9E:B1:95:68:0E:07:BE:FA:2B:4F:7A:1B:2A
Authority key identifier: E9:6B:91:2B:4A:5A:0C:77:03:B5:CA:58:B1:86:74:1E:0D:53:35:B4
Certificate issuer:       /CN=e96b912b4a5a0c7703b5ca58b186741e0d5335b4
Certificate serial:       019873E3D51E8815345CEF9C11D9D0B43627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
Manifest number:          100F
Signing time:             Mon 04 Aug 2025 07:02:47 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:47 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:47 +0000
Files and hashes:         1: 6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl (hash: +huhLK2Rpds5jlDNdSOg5FCk0H84+Kqn/sNNJXzj9C8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:d5:1e:88:15:34:5c:ef:9c:11:d9:d0:b4:36:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b912b4a5a0c7703b5ca58b186741e0d5335b4
        Validity
            Not Before: Aug  4 07:02:47 2025 GMT
            Not After : Aug  5 07:02:47 2025 GMT
        Subject: CN=f43bb067d261fe9eb195680e07befa2b4f7a1b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2d:04:74:86:e6:7e:73:14:67:5c:3f:1b:10:
                    52:97:37:43:ae:68:7e:6c:33:57:a2:4b:df:4d:11:
                    87:69:72:b3:75:c4:90:38:9a:b6:b2:5f:1b:9b:ed:
                    84:04:64:66:8b:ae:d9:ea:70:7f:fa:9f:c9:81:5c:
                    e9:cd:86:b3:dc:8e:65:19:49:4f:14:f9:ae:23:c3:
                    1c:e0:1b:45:58:5e:3b:5f:ef:14:b8:88:7f:89:71:
                    43:74:80:b3:59:d2:64:68:0c:61:ff:55:a2:0e:8e:
                    25:bb:fb:3b:c6:3a:3e:eb:55:eb:ee:25:15:9a:0d:
                    45:d0:bf:99:39:45:15:2c:de:aa:c0:0f:8d:08:a9:
                    ac:2d:88:3e:63:34:24:52:e1:cb:cc:b2:c6:58:4f:
                    53:ae:e9:f9:58:85:05:6b:4e:88:ca:9a:f9:7e:59:
                    9c:41:f8:b9:4e:24:16:97:c0:ce:0d:c1:70:d5:85:
                    19:8e:27:60:71:3f:f7:1f:04:6c:dc:68:06:c4:a3:
                    00:52:75:8f:ea:d8:48:08:06:74:75:a9:69:21:dc:
                    dc:10:9b:26:9c:e0:e9:60:9c:a7:eb:15:8a:9d:51:
                    58:b2:be:a6:d5:0a:85:d8:5d:1f:eb:c1:4a:02:a7:
                    77:bc:18:69:7e:e6:d0:49:e3:43:00:24:d6:56:6c:
                    06:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3B:B0:67:D2:61:FE:9E:B1:95:68:0E:07:BE:FA:2B:4F:7A:1B:2A
            X509v3 Authority Key Identifier:
                keyid:E9:6B:91:2B:4A:5A:0C:77:03:B5:CA:58:B1:86:74:1E:0D:53:35:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:a5:27:f6:cf:49:0f:a5:81:62:22:43:0f:30:a0:c6:b9:d6:
         bd:22:84:11:31:fb:16:38:26:df:6b:00:bd:2e:3c:62:da:39:
         95:cd:d2:8b:0d:8d:67:37:22:4f:c2:46:67:07:69:fd:f2:c0:
         71:ad:f9:e3:5f:5c:d3:95:33:b9:e5:64:f6:d3:b0:8a:0c:43:
         23:ce:57:44:3a:ee:65:ef:08:5a:89:a2:51:66:91:6c:a6:1b:
         a8:9f:5d:9b:2c:79:25:37:9c:18:b4:72:bf:8d:89:1b:d4:f4:
         13:64:79:b5:c3:bb:ea:3b:e8:5a:fe:7c:b3:d4:d6:88:e7:bc:
         ce:a2:71:6f:4b:29:0c:cd:ea:0d:13:52:3c:a5:de:2e:bd:a6:
         50:ed:c9:1b:2e:e7:ba:52:d3:fd:a0:11:fe:ee:db:a7:02:bb:
         a5:52:c5:21:98:b0:e6:82:7c:c3:76:50:1a:48:42:62:1a:83:
         2b:31:8f:a2:30:d1:19:cc:1b:4a:81:1b:b4:b5:df:ef:39:72:
         1b:c1:80:56:44:d3:e9:88:85:be:a0:41:ef:67:95:41:cc:21:
         9a:2b:4c:65:54:41:2a:a6:b9:63:19:37:c1:70:90:e4:31:1d:
         69:8c:49:fb:e7:93:57:77:2d:fe:9d:be:a6:dc:b2:af:7f:89:
         c8:52:c5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:20 2025 by rpki-client