Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
File:                     6EKPwtpbZWN0nMuZd1d16CC3czw.mft (raw, json)
Hash identifier:          Vu4R2W1CpdorqD3ejPpqCBpr6DcocDl5glU6mXRsvbc=
Subject key identifier:   F2:80:77:32:89:88:68:C5:3C:6F:EA:97:DB:A4:20:B0:3D:5F:5C:6D
Authority key identifier: E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C
Certificate issuer:       /CN=e8428fc2da5b6563749ccb99775775e820b7733c
Certificate serial:       01987450A6289409B02610D0BA7306FA6C9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
Manifest number:          1048
Signing time:             Mon 04 Aug 2025 09:01:39 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:39 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:39 +0000
Files and hashes:         1: 6EKPwtpbZWN0nMuZd1d16CC3czw.crl (hash: 7QT8ID7BX9F8XNbGK6f6D8TY1SkPRnte0bKFP5o8zu4=)
                          2: LFFuuAaPymw7mrLkEc1dJw_pneU.roa (hash: roCdm0ObDLqCzKMIH+P6b5BVl1CPDBPmD6VmUXfwJys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:a6:28:94:09:b0:26:10:d0:ba:73:06:fa:6c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8428fc2da5b6563749ccb99775775e820b7733c
        Validity
            Not Before: Aug  4 09:01:39 2025 GMT
            Not After : Aug  5 09:01:39 2025 GMT
        Subject: CN=f2807732898868c53c6fea97dba420b03d5f5c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:76:74:9e:78:36:93:45:17:65:47:11:e3:1e:
                    b7:04:91:08:8d:4e:cb:f1:75:99:9d:40:39:5a:4a:
                    8d:01:52:66:26:0f:b2:9f:19:c5:91:7f:81:c1:bd:
                    95:7f:45:88:be:26:32:63:7c:b8:fb:77:25:78:b6:
                    81:81:44:84:76:f5:16:d7:92:c3:9f:fe:10:4f:e2:
                    f1:02:71:9e:54:a6:50:f1:b7:34:14:40:3c:e4:9e:
                    8d:06:d5:06:73:64:8a:5d:58:28:57:03:1b:37:d9:
                    e9:cb:85:4b:c5:72:e2:a3:5f:da:71:56:49:a2:5b:
                    28:3a:6f:30:71:f7:fd:22:3d:88:c2:e9:b9:cb:c6:
                    c3:0d:82:ea:79:80:f5:67:e5:3d:2c:e8:51:70:6e:
                    be:2b:d9:ce:94:35:e7:74:84:b6:f0:e1:a5:9b:7e:
                    98:b7:fd:c1:ba:89:30:a4:7f:94:49:f2:51:12:86:
                    46:16:9c:8e:6a:c5:a0:ed:7a:3a:e8:ed:ec:f8:c4:
                    16:86:e1:1a:80:06:f5:90:5a:46:5f:e6:b3:fb:68:
                    cc:54:5a:ef:e7:2b:6f:a5:89:3b:b9:a0:41:c0:38:
                    71:6c:e9:b7:2f:3a:42:73:34:7d:00:db:fc:92:06:
                    e1:3b:e4:91:fc:79:d6:93:92:bb:51:28:29:64:99:
                    0c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:80:77:32:89:88:68:C5:3C:6F:EA:97:DB:A4:20:B0:3D:5F:5C:6D
            X509v3 Authority Key Identifier:
                keyid:E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:7a:ad:18:4b:db:0e:ba:e6:38:dd:dc:8c:8f:77:22:d6:09:
         62:b2:9b:b7:7b:ae:2d:d9:fb:c8:71:0f:2f:7a:ca:8a:84:eb:
         2c:ea:40:43:66:a4:40:59:64:2e:04:b5:cd:8a:6c:3a:48:13:
         26:fc:0e:38:25:a9:97:be:f7:75:ea:df:05:23:66:fd:27:5e:
         13:f0:28:02:b9:26:c9:9f:1e:fd:bf:a1:b1:bd:c8:ae:e3:e2:
         10:48:0d:32:26:20:58:7c:d1:eb:de:7c:d0:7d:b2:b4:25:d5:
         ee:98:60:25:ce:88:db:95:8b:ad:91:8c:77:22:5e:c9:08:e5:
         28:b5:ce:ac:f4:b5:4a:c2:fd:00:d4:f9:5e:9a:3b:03:57:13:
         28:eb:8f:9c:a3:0e:36:6b:a4:5f:83:25:30:19:56:52:47:d4:
         b4:a2:f7:23:67:a1:14:28:67:c7:fb:e1:47:b9:b7:47:a2:27:
         6e:25:19:64:92:98:11:f5:3b:88:b1:16:40:79:8b:ce:df:8a:
         03:9c:38:a2:1e:5a:73:56:04:6c:24:49:1c:8c:0b:14:9f:9b:
         06:9c:58:70:ac:5f:d2:7d:1d:9e:5a:04:85:30:19:40:46:2c:
         20:65:8a:03:be:6b:9b:99:41:0d:fc:8c:7b:9a:56:af:e3:c7:
         3c:fd:45:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:16 2025 by rpki-client