Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft
File:                     bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft (raw, json)
Hash identifier:          JaLbjHWK96+S19+klnIoHzg/fI/J7Hkkpn7mw/yv8jY=
Subject key identifier:   4E:18:FB:8B:DD:83:46:05:1E:3D:7F:F0:C1:BF:DA:DD:20:48:05:AC
Authority key identifier: 6D:57:00:91:6F:90:98:3B:D8:E8:9C:D0:5F:E6:29:EC:18:3B:FA:54
Certificate issuer:       /CN=6d5700916f90983bd8e89cd05fe629ec183bfa54
Certificate serial:       019892C92A899BC28F13C042524227294626
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft
Manifest number:          0A91
Signing time:             Sun 10 Aug 2025 07:01:53 +0000
Manifest this update:     Sun 10 Aug 2025 07:01:53 +0000
Manifest next update:     Mon 11 Aug 2025 07:01:53 +0000
Files and hashes:         1: bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.crl (hash: b6lGRKnDF89sPD+eV7HIjZdmgyky3uDYR5tqh9fAQAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 07:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:c9:2a:89:9b:c2:8f:13:c0:42:52:42:27:29:46:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d5700916f90983bd8e89cd05fe629ec183bfa54
        Validity
            Not Before: Aug 10 07:01:53 2025 GMT
            Not After : Aug 11 07:01:53 2025 GMT
        Subject: CN=4e18fb8bdd8346051e3d7ff0c1bfdadd204805ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1f:ec:d9:80:fa:0d:98:54:ba:66:82:68:79:
                    62:a8:76:76:fb:2b:dd:d9:4a:60:00:22:78:c2:64:
                    a4:a0:8d:26:4e:62:aa:2d:1d:ff:c7:f6:5e:69:b5:
                    1a:53:a5:65:65:98:e1:19:69:d5:44:be:06:21:65:
                    b6:05:88:41:7b:b6:24:92:9d:1d:49:cd:bf:86:44:
                    15:4b:0b:65:41:e0:39:5f:16:ee:d8:9e:e0:9a:aa:
                    4d:f4:3d:21:84:50:d4:74:6c:c9:f5:fd:6f:fe:34:
                    86:c9:ca:64:7f:40:15:8c:47:02:a0:83:24:5f:f2:
                    1e:97:23:66:2f:09:7f:05:31:44:77:d6:d6:40:cd:
                    03:20:fe:e9:84:b3:87:e2:ff:5a:62:f7:ae:93:70:
                    64:ea:dc:10:5e:45:05:c8:0c:c2:82:8b:8c:3c:65:
                    8d:31:89:29:24:5f:09:3d:d3:43:da:46:d3:3c:d5:
                    cb:70:b6:aa:7e:d9:9b:b6:0b:c2:39:9c:d1:23:f3:
                    35:8b:41:3b:48:9a:2d:40:7f:25:be:df:f6:45:f1:
                    3b:66:59:a8:85:f4:1e:d6:6e:03:3e:49:44:e9:13:
                    64:ab:1f:aa:08:26:10:bb:b3:ac:0f:e2:62:41:f3:
                    a0:46:53:c6:e3:f9:f0:67:ac:5f:e5:80:0f:9c:95:
                    3b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:18:FB:8B:DD:83:46:05:1E:3D:7F:F0:C1:BF:DA:DD:20:48:05:AC
            X509v3 Authority Key Identifier:
                keyid:6D:57:00:91:6F:90:98:3B:D8:E8:9C:D0:5F:E6:29:EC:18:3B:FA:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:7b:fd:65:b2:e7:32:34:eb:7e:e4:09:d6:e6:87:b7:f9:ff:
         1b:be:e2:9e:ff:aa:72:81:09:2f:b3:dd:ff:9f:16:d0:62:f6:
         a0:cb:a8:79:fe:9a:95:de:c8:51:0d:e6:6d:db:e7:e7:08:2c:
         f9:46:e2:b9:3f:88:34:a7:03:49:18:04:79:af:fa:23:6c:79:
         83:1b:9c:e9:16:09:74:59:49:ff:8b:24:01:9f:18:21:0a:ce:
         24:1f:f5:14:9e:34:f4:db:f5:1d:42:38:d6:f9:a2:2b:6c:37:
         19:19:c1:19:4e:3f:f4:c5:57:1a:d1:21:b5:9e:c9:04:46:82:
         a3:de:76:50:27:b6:ef:68:32:90:c4:9a:e1:94:93:f7:8a:6a:
         8d:ba:fa:75:4a:30:e6:cb:d2:ef:54:82:1c:4d:e3:fd:6b:9f:
         e3:2d:8b:7f:68:a0:b1:c9:b8:8a:6d:09:1e:c8:bb:f5:38:a7:
         27:a5:17:24:bf:a1:17:3c:a7:8b:de:e4:74:3d:1e:2b:1f:9f:
         58:8e:3b:96:27:59:98:35:34:68:be:0a:2f:9a:0b:42:2c:6c:
         1b:6b:24:50:90:1c:4b:49:3a:de:2e:fb:86:e8:8a:02:37:a1:
         f3:a9:cf:46:8d:cc:75:66:50:b0:fb:1b:6f:b8:d9:aa:6f:3e:
         8b:ea:0b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:58:16 2025 by rpki-client