Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft
File:                     6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft (raw, json)
Hash identifier:          l/KHV/ACIKeQum3TNpULruRIzsL4q6TEHi5RUoVJnC4=
Subject key identifier:   FC:64:C0:4C:5B:C2:84:14:F8:29:82:27:A9:18:C7:AB:E9:A9:E2:33
Authority key identifier: E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D
Certificate issuer:       /CN=e8bd0d9aa8c743cda182f00668583a46e600c32d
Certificate serial:       0198955B387EB6BF9C193306A2A6B57E00CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft
Manifest number:          14E4
Signing time:             Sun 10 Aug 2025 19:00:40 +0000
Manifest this update:     Sun 10 Aug 2025 19:00:40 +0000
Manifest next update:     Mon 11 Aug 2025 19:00:40 +0000
Files and hashes:         1: 6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl (hash: 41gVHBTL2ADSjyRLAJ9xH1jGNdR6rV5H7KbYVe/p3Zk=)
                          2: XmxwkZr2Ua5UDkEHGjDtz-Zyw08.roa (hash: P/OmeGABxQo0KdahW/abtL2rzvBKjRzNV4nj+svt9Ok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:5b:38:7e:b6:bf:9c:19:33:06:a2:a6:b5:7e:00:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8bd0d9aa8c743cda182f00668583a46e600c32d
        Validity
            Not Before: Aug 10 19:00:40 2025 GMT
            Not After : Aug 11 19:00:40 2025 GMT
        Subject: CN=fc64c04c5bc28414f8298227a918c7abe9a9e233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:30:6c:67:cc:a8:e2:f6:60:4c:72:f6:dc:9e:
                    79:18:18:09:54:cf:b8:7c:d6:84:43:4a:03:d8:bf:
                    0b:d5:2c:eb:29:e8:29:7e:f9:a3:a6:c6:81:23:5d:
                    a9:77:10:59:c5:2d:0a:eb:24:68:40:f3:3e:11:b0:
                    82:be:69:78:63:56:5c:4e:b4:3d:8d:65:89:53:ad:
                    16:a2:06:e8:f0:27:a2:f2:25:c1:d7:0e:81:c9:18:
                    b3:d4:47:16:d1:86:d3:19:ff:75:d6:94:f1:85:10:
                    1b:50:ea:89:57:34:0a:50:9f:71:45:f5:e5:b0:c3:
                    83:e5:a6:e4:07:c0:52:77:d3:62:ba:26:df:b8:bc:
                    76:c0:1a:c0:a4:81:af:9a:95:12:8d:9b:33:40:75:
                    6c:8c:eb:cb:c6:d1:f9:a9:6f:9c:ff:8b:d2:a0:c4:
                    be:de:57:3e:bf:85:82:15:bb:63:8b:97:48:49:7b:
                    fe:98:37:91:00:89:68:ee:39:0a:29:d3:33:1c:52:
                    74:3b:b0:46:34:e0:2b:1a:47:4c:68:74:27:87:8e:
                    04:37:00:8a:b7:a1:d9:e5:06:67:1f:63:5a:b3:3c:
                    17:72:88:8d:89:20:b6:57:8b:a4:33:de:be:10:12:
                    c1:34:80:24:bf:8f:a0:19:be:f8:08:24:0a:d2:1a:
                    b5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:64:C0:4C:5B:C2:84:14:F8:29:82:27:A9:18:C7:AB:E9:A9:E2:33
            X509v3 Authority Key Identifier:
                keyid:E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:65:97:03:0b:47:6b:6b:75:d3:7c:2d:f4:12:47:05:8b:d5:
         c5:a7:ee:dd:e1:b5:b6:a2:74:d1:1f:6d:76:12:d4:d2:38:ca:
         26:05:0f:10:80:ee:5f:ce:8f:15:8d:17:72:8a:83:ba:01:b8:
         3a:7f:1a:1e:e7:69:5b:b0:37:91:88:5b:16:58:9e:cc:11:00:
         bb:03:1a:05:45:89:47:e5:4c:f3:8f:dd:ff:65:0a:89:f5:04:
         e4:31:5c:b9:f2:03:df:a1:bb:67:f1:a8:ea:96:34:e5:0e:ca:
         28:f3:d5:ce:d9:5e:54:6a:bb:31:8e:ea:aa:23:5d:0a:15:dd:
         31:0f:29:12:e3:11:c7:0d:53:50:f1:a5:83:f7:c1:7b:89:bc:
         a9:a6:90:ac:ae:ff:69:24:f3:d7:19:04:6e:92:55:29:c0:b7:
         5e:d3:77:f9:16:6e:2b:91:74:e2:16:5c:9d:66:5b:01:8f:9c:
         7c:7a:8f:2b:3d:f1:17:9d:0b:5c:2e:0a:0b:cf:6d:c0:6d:45:
         71:22:8f:37:9f:df:6a:6e:5d:4c:68:ce:3d:23:67:a4:a8:f6:
         b7:f0:45:a7:0c:dc:5d:5a:1a:0a:bc:64:ff:bb:f3:23:65:fc:
         b3:84:b8:51:4d:81:71:ea:79:b4:49:50:09:15:46:70:75:cb:
         a0:52:f6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:48 2025 by rpki-client