Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
File:                     6xUL-GuHz4n8RJBgZfaXKwawnqg.mft (raw, json)
Hash identifier:          LftJpMCob2SfauGJRdpVaPj+9vv9EAtMZhaS2g3CeZA=
Subject key identifier:   8C:21:62:AB:8E:7F:A5:A9:BF:9C:DB:A5:26:3B:EE:8D:A1:BC:F4:84
Authority key identifier: EB:15:0B:F8:6B:87:CF:89:FC:44:90:60:65:F6:97:2B:06:B0:9E:A8
Certificate issuer:       /CN=eb150bf86b87cf89fc44906065f6972b06b09ea8
Certificate serial:       01988EECEFBB4B3760160ED2A4DBFB6DC629
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
Manifest number:          1622
Signing time:             Sat 09 Aug 2025 13:02:29 +0000
Manifest this update:     Sat 09 Aug 2025 13:02:29 +0000
Manifest next update:     Sun 10 Aug 2025 13:02:29 +0000
Files and hashes:         1: 6xUL-GuHz4n8RJBgZfaXKwawnqg.crl (hash: HHZUGd3rNddvSuvqON9Ad4/6VXTW95UJOOKgTTu/RRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 13:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:ec:ef:bb:4b:37:60:16:0e:d2:a4:db:fb:6d:c6:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb150bf86b87cf89fc44906065f6972b06b09ea8
        Validity
            Not Before: Aug  9 13:02:29 2025 GMT
            Not After : Aug 10 13:02:29 2025 GMT
        Subject: CN=8c2162ab8e7fa5a9bf9cdba5263bee8da1bcf484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:74:43:40:9a:34:a5:e8:89:5f:42:04:26:07:
                    d1:b2:2d:6a:f4:54:5a:39:ce:2e:72:b4:c2:6b:6a:
                    25:eb:22:2c:f1:38:54:71:15:ab:5e:6d:fd:7b:47:
                    69:ce:ba:bd:f6:1f:ef:3a:7e:87:94:b7:fd:d0:17:
                    3e:f5:8a:ea:1e:50:d7:9d:91:32:38:4e:8f:f0:d4:
                    04:27:1b:0d:a5:2f:8f:d8:28:6a:cc:f2:a1:fb:86:
                    1f:45:97:81:68:bc:08:14:55:3d:6e:04:5b:df:33:
                    69:38:af:75:30:fd:fe:07:a5:90:eb:18:25:31:53:
                    88:78:4f:94:b7:3b:04:fc:40:33:bf:20:22:f7:51:
                    83:48:2b:f8:28:45:d3:69:4f:8a:69:8e:a7:f4:12:
                    81:af:c5:8b:f1:da:78:71:ca:44:dd:51:fd:1c:23:
                    ac:40:be:0a:e8:f9:98:38:fa:8d:67:ca:81:d0:7d:
                    50:23:20:8a:1b:45:3d:f0:70:17:6c:be:9b:0e:81:
                    dc:6d:03:aa:1c:04:22:84:92:6e:47:2b:5b:01:d3:
                    ae:6e:c5:8a:00:7e:78:71:2e:97:23:72:e2:18:d5:
                    21:9a:5c:cf:70:5f:f8:f1:eb:a3:5c:32:6a:60:03:
                    5c:7d:67:36:86:09:14:5c:97:88:6b:4a:fe:c1:7a:
                    55:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:21:62:AB:8E:7F:A5:A9:BF:9C:DB:A5:26:3B:EE:8D:A1:BC:F4:84
            X509v3 Authority Key Identifier:
                keyid:EB:15:0B:F8:6B:87:CF:89:FC:44:90:60:65:F6:97:2B:06:B0:9E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6a:87:53:10:f7:53:14:c2:97:07:bc:fd:d3:3a:2e:d8:57:
         58:0e:dc:f5:54:6b:17:83:98:53:aa:45:77:f7:53:9f:7b:03:
         a1:d5:c4:aa:7d:dc:5b:a9:51:9e:93:e2:59:92:6e:34:27:0a:
         6f:20:a5:f6:85:db:47:6c:61:48:dd:6b:45:a6:c1:bd:85:6a:
         be:f4:7c:1e:23:84:16:6f:24:7c:a9:cb:02:ed:5a:99:0c:8b:
         d2:e2:41:04:ed:36:43:0f:99:c3:7b:7c:7e:6f:ab:06:e1:99:
         24:6a:d4:c0:21:fe:98:81:9d:8e:c5:6d:a8:43:c0:7b:e2:82:
         73:83:92:a8:a3:39:5b:f1:b6:85:37:61:fd:72:23:a7:12:3d:
         4f:7c:e4:63:d8:1a:92:3d:e6:0e:35:18:72:10:c0:ca:a0:93:
         46:f3:95:a7:88:99:a5:e9:ba:51:f4:5c:ee:8a:58:7b:b5:d7:
         08:1c:88:99:56:6e:07:55:1a:42:0f:14:b5:38:d1:e8:35:4d:
         24:80:e4:fe:a1:f4:e3:66:bd:2c:62:48:14:81:5d:ea:79:8c:
         02:d8:31:c2:e1:ee:9d:77:68:f6:1d:86:bf:2d:60:ed:26:54:
         26:56:51:fc:20:f2:b0:1e:35:d4:a0:85:c6:1b:06:7b:9b:78:
         5e:48:0e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:25:47 2025 by rpki-client