Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
File:                     9vwoeVAOHrgIVXBc-ENeA2NRN94.mft (raw, json)
Hash identifier:          raUaCL/QZJ/F2AEaaipwdEmFQZqe/pobjUkIWUN43Yg=
Subject key identifier:   F6:81:65:C9:1A:9D:DB:BF:51:BA:58:64:39:E2:45:E6:B4:04:E1:23
Authority key identifier: F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE
Certificate issuer:       /CN=f6fc2879500e1eb80855705cf8435e03635137de
Certificate serial:       01988168B9DE0257ECE432A7A762A117E1EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
Manifest number:          0670
Signing time:             Wed 06 Aug 2025 22:03:00 +0000
Manifest this update:     Wed 06 Aug 2025 22:03:00 +0000
Manifest next update:     Thu 07 Aug 2025 22:03:00 +0000
Files and hashes:         1: 9vwoeVAOHrgIVXBc-ENeA2NRN94.crl (hash: GdaDEo3k3LjXMC6v8mUBbf5hQCXkuZulczv0ZLax3ao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:68:b9:de:02:57:ec:e4:32:a7:a7:62:a1:17:e1:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6fc2879500e1eb80855705cf8435e03635137de
        Validity
            Not Before: Aug  6 22:03:00 2025 GMT
            Not After : Aug  7 22:03:00 2025 GMT
        Subject: CN=f68165c91a9ddbbf51ba586439e245e6b404e123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:69:6c:bc:37:e1:a1:d5:30:3a:93:cf:11:c5:
                    57:b1:fe:db:60:63:31:02:4d:f6:b5:3a:df:74:4d:
                    cb:62:98:39:c8:81:b1:5b:0b:47:76:72:f3:df:fa:
                    96:e8:a1:85:16:9f:3e:88:53:38:d3:5b:80:16:8d:
                    d9:61:11:93:06:32:b2:c6:8e:cb:a6:0a:99:6b:35:
                    a6:86:6a:13:55:e1:33:16:a7:eb:bf:0d:43:63:73:
                    49:ea:b7:02:f9:2d:d1:f9:39:b0:b7:1d:e4:bf:db:
                    a3:42:bd:15:a3:b1:61:cb:d4:6c:d3:38:cb:69:71:
                    da:bf:f1:70:43:97:25:88:c9:82:16:f9:90:fb:20:
                    b7:b0:da:3a:b8:68:fa:52:bf:95:29:98:16:5c:d2:
                    9a:9c:07:d5:00:15:5a:5c:ce:29:eb:1f:37:04:de:
                    6a:88:24:2f:27:25:46:32:6b:89:06:d7:82:f2:01:
                    9f:87:78:3c:ff:9c:80:0b:76:9f:b1:fd:30:ac:2e:
                    99:58:f1:33:bf:6d:0a:9d:42:17:97:65:cd:48:fc:
                    fb:4c:28:c5:c2:86:5b:39:ea:12:49:90:d6:13:83:
                    7d:b3:c9:b3:71:68:ed:f1:c8:1c:9b:69:04:ac:8c:
                    29:76:58:db:3b:0d:74:cc:f2:fd:a0:2f:cb:b4:2b:
                    03:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:81:65:C9:1A:9D:DB:BF:51:BA:58:64:39:E2:45:E6:B4:04:E1:23
            X509v3 Authority Key Identifier:
                keyid:F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:2e:bb:9e:2f:d7:e1:18:b8:0c:1e:d9:17:00:d9:14:ed:0b:
         67:b8:c7:ea:96:4c:3f:5a:ee:17:82:bb:af:4f:8c:13:89:3d:
         65:9d:7a:bd:00:fc:21:70:b6:7c:3e:33:2c:4e:70:f7:45:35:
         92:f9:8e:4b:1a:63:ea:37:c8:9a:56:d8:3c:67:a2:30:a7:ff:
         19:b2:17:42:2e:db:4c:4e:d6:24:96:4f:2c:d5:d7:3d:39:c0:
         5c:c3:e6:91:bf:36:af:ba:ee:f4:e6:1f:c7:c0:8a:dd:62:c0:
         c7:70:f1:0e:69:50:a6:64:91:77:0a:c2:42:a0:ce:77:48:e5:
         35:01:6f:e2:5e:99:9f:3e:d2:78:fb:5c:4f:07:ff:6e:8b:83:
         44:9d:9d:43:39:81:a8:ee:fb:fb:8b:4a:71:6a:4c:d1:87:e3:
         c3:a4:95:be:bf:69:a2:1e:93:92:b3:1f:c8:2a:f3:6f:58:b5:
         41:97:c0:8f:f7:69:0b:2f:54:21:6c:4a:28:93:c5:90:5b:7e:
         7b:03:ee:a9:df:f0:db:31:08:a3:6e:2a:5a:0b:a1:bb:f7:0c:
         b0:73:d2:00:68:f4:d5:a5:da:91:3a:3e:c4:9b:2d:0e:45:a8:
         90:80:93:1c:09:6b:12:eb:fe:3d:ef:c9:75:ab:2e:c0:bf:25:
         98:c2:4e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:59:59 2025 by rpki-client