Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft
File:                     6ILCYEFZvDDAW58M9unYNhAuqUs.mft (raw, json)
Hash identifier:          z81zMO0RgaLub84QYBXB6lDcmucrWISkbN76dbyTACo=
Subject key identifier:   57:2E:EF:DE:6B:3D:3C:51:70:A3:15:E2:5F:61:D7:C9:45:9C:3D:46
Authority key identifier: E8:82:C2:60:41:59:BC:30:C0:5B:9F:0C:F6:E9:D8:36:10:2E:A9:4B
Certificate issuer:       /CN=e882c2604159bc30c05b9f0cf6e9d836102ea94b
Certificate serial:       019896A4BEB3C61CCE9D79379C4E05A94983
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ILCYEFZvDDAW58M9unYNhAuqUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft
Manifest number:          12EB
Signing time:             Mon 11 Aug 2025 01:00:35 +0000
Manifest this update:     Mon 11 Aug 2025 01:00:35 +0000
Manifest next update:     Tue 12 Aug 2025 01:00:35 +0000
Files and hashes:         1: 6ILCYEFZvDDAW58M9unYNhAuqUs.crl (hash: mz3GAGPfsbroxKDSEg9dfwuFPlEECAVFXs6KkePR5Nw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ILCYEFZvDDAW58M9unYNhAuqUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:a4:be:b3:c6:1c:ce:9d:79:37:9c:4e:05:a9:49:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e882c2604159bc30c05b9f0cf6e9d836102ea94b
        Validity
            Not Before: Aug 11 01:00:35 2025 GMT
            Not After : Aug 12 01:00:35 2025 GMT
        Subject: CN=572eefde6b3d3c5170a315e25f61d7c9459c3d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2b:72:32:e9:bc:74:38:41:79:82:4d:91:6b:
                    e5:13:1c:67:b7:14:1d:d7:03:91:7f:de:06:ea:4d:
                    fe:3d:00:61:1f:4e:0f:9e:7d:20:8f:fa:94:29:07:
                    df:e3:e6:81:16:87:1e:7c:c6:ed:04:92:12:6b:46:
                    9f:97:8e:08:bf:32:88:52:98:3b:97:b8:92:c2:80:
                    90:2a:a2:b8:53:dd:af:cb:64:94:dd:0a:ee:77:65:
                    fb:49:ec:c4:d3:70:ab:7a:95:9f:63:c5:e5:f8:f4:
                    87:13:8e:d7:9c:cc:57:c0:b3:f6:4b:37:2a:43:cd:
                    90:57:9e:c3:39:61:97:e0:d9:89:18:9d:08:00:68:
                    d6:41:0c:69:d1:70:22:9c:58:18:79:73:14:4f:60:
                    ee:8e:6a:00:7e:6d:68:78:13:61:1b:15:83:8d:96:
                    2a:48:93:96:2e:59:a8:6c:5d:06:19:33:45:aa:90:
                    42:85:0f:c0:8e:07:63:fd:61:45:19:4b:36:ba:9f:
                    0e:3c:ad:55:79:18:bc:ba:d1:24:6e:a6:f2:ac:3e:
                    e8:c7:60:69:c4:0d:15:a5:b5:ff:85:f2:31:cd:7e:
                    f1:78:96:49:15:f8:8e:05:6b:e7:b4:27:dc:fe:1e:
                    b1:da:98:5c:a4:77:c9:17:c7:46:b7:ea:80:b4:ec:
                    e3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2E:EF:DE:6B:3D:3C:51:70:A3:15:E2:5F:61:D7:C9:45:9C:3D:46
            X509v3 Authority Key Identifier:
                keyid:E8:82:C2:60:41:59:BC:30:C0:5B:9F:0C:F6:E9:D8:36:10:2E:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ILCYEFZvDDAW58M9unYNhAuqUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:d8:e2:fb:11:e1:dc:ee:b3:1a:ea:c9:28:a0:88:b6:07:d0:
         45:8a:66:af:a7:15:b4:46:49:f4:92:be:21:5c:33:b4:2d:89:
         be:76:9f:62:f7:cb:1c:65:e1:fa:17:53:74:da:3b:3a:f4:8c:
         94:5c:51:6f:3f:fb:24:19:6a:dc:83:d6:3c:19:c3:ca:50:db:
         80:87:ee:12:cf:f2:b0:ee:2b:7d:c9:e1:fe:3a:25:0e:a5:db:
         23:15:60:6e:ad:d4:eb:24:69:75:42:46:54:cb:43:19:ea:62:
         61:3b:01:3c:57:73:11:2b:17:3c:f3:f1:9e:4e:18:4a:9c:17:
         d7:84:fa:00:95:43:e7:67:e5:a9:38:8a:2e:86:53:3d:26:56:
         c7:c8:51:d0:0e:29:16:a9:3e:4d:9e:b9:36:0e:fa:db:11:42:
         cc:12:f9:5a:53:e2:59:77:3d:e9:67:76:35:47:31:cd:96:fd:
         97:6a:66:b3:bf:a5:c2:1c:79:4e:09:32:d5:43:f1:3d:31:dc:
         37:76:61:8c:b4:4b:b2:61:53:e1:a1:fd:8a:0d:e3:f9:74:51:
         ec:10:08:82:54:3b:fa:8f:7e:d7:46:48:f2:ef:e3:3d:d9:a0:
         84:c0:67:e7:a0:9c:3b:8a:5f:88:f6:c8:b6:71:f7:f8:d1:39:
         d9:d5:be:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:16:34 2025 by rpki-client