Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
File:                     6T7pptFATGHrGbArAtdNqDpmM9o.mft (raw, json)
Hash identifier:          RFTn/0axYhBkRO+Tz5F+wcbO5+tAVCduCojRUO2X6C4=
Subject key identifier:   9F:1E:68:90:D7:FA:F2:FB:5F:53:DB:FD:D1:4A:B9:03:6E:4C:33:9B
Authority key identifier: E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA
Certificate issuer:       /CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da
Certificate serial:       0198737404846E9043CC57ED05DB41305A0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
Manifest number:          011C
Signing time:             Mon 04 Aug 2025 05:00:39 +0000
Manifest this update:     Mon 04 Aug 2025 05:00:39 +0000
Manifest next update:     Tue 05 Aug 2025 05:00:39 +0000
Files and hashes:         1: 6T7pptFATGHrGbArAtdNqDpmM9o.crl (hash: ko62iaaFjG0mSGiFlOrfWoCm2DcznQkh+TwAnPkNW0o=)
                          2: nTzt_7yObYF91YEfJlGe8rhCQyE.roa (hash: UZJuy0N8FDFUyDPS/6Vsx+tptqpEF0jDlmMqyvXeZZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:04:84:6e:90:43:cc:57:ed:05:db:41:30:5a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da
        Validity
            Not Before: Aug  4 05:00:39 2025 GMT
            Not After : Aug  5 05:00:39 2025 GMT
        Subject: CN=9f1e6890d7faf2fb5f53dbfdd14ab9036e4c339b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4a:29:86:9a:d5:b7:43:6d:dc:57:b6:13:92:
                    2d:70:85:23:0f:7c:c9:ca:79:06:13:ee:11:d5:fe:
                    c2:49:37:b2:1d:22:77:eb:6c:3f:d1:7a:b1:c6:b7:
                    ab:48:61:2b:b6:26:e4:7c:f0:6f:9c:7e:07:a9:74:
                    a1:a4:29:ca:d7:1c:4e:33:b2:fa:2a:5a:c3:fc:dd:
                    a3:2a:9b:bb:e0:91:95:f8:30:21:b1:14:94:85:62:
                    b8:6a:80:90:78:85:e6:82:ee:07:04:c0:8a:0b:1d:
                    87:fc:53:80:6c:23:24:1b:4b:60:0e:c6:d7:88:58:
                    7e:f1:cd:80:41:85:86:45:f5:3a:15:e9:df:1f:71:
                    d2:66:1a:33:5c:2a:8b:d2:e9:08:1a:f0:db:89:c9:
                    e9:2a:8d:f2:09:90:ac:d7:0e:be:35:bc:d9:2b:18:
                    0a:29:d4:d9:3a:a0:27:c5:63:e8:e1:e5:99:5d:11:
                    68:8c:65:18:3f:dd:08:0d:f7:94:c4:ae:73:4e:e0:
                    8c:bc:fc:04:19:bf:f6:5c:61:5e:59:f4:b9:a6:0f:
                    86:9f:5c:6d:38:0c:48:f9:8c:72:3f:72:24:11:73:
                    16:f4:01:b9:f8:62:7b:a0:e8:81:bd:d0:f7:2a:b8:
                    45:a5:b0:60:21:0b:58:46:41:e8:7d:41:f4:f5:a5:
                    a3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1E:68:90:D7:FA:F2:FB:5F:53:DB:FD:D1:4A:B9:03:6E:4C:33:9B
            X509v3 Authority Key Identifier:
                keyid:E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:75:7d:92:ef:d1:23:08:47:45:21:6a:cd:2a:63:16:20:a4:
         de:c9:df:6a:7e:94:26:52:30:1a:87:be:a9:b8:da:c1:d5:d4:
         52:a8:23:ca:11:0e:e6:03:7b:d0:08:1a:c6:b4:66:14:5d:a2:
         eb:9e:a8:ff:c2:46:ef:a5:b6:3a:e2:e0:02:9d:1c:94:97:ff:
         15:4d:57:df:86:b6:6a:0c:07:07:0f:bf:fe:c8:72:e7:ff:04:
         00:b8:ef:81:b1:14:83:75:c5:19:61:99:90:25:f1:d9:14:ae:
         73:df:98:c9:e9:f6:e5:12:1b:b7:6a:46:c2:78:26:48:b7:91:
         eb:66:39:b6:37:8e:f5:27:fb:d6:fc:4e:a0:36:a5:a8:95:33:
         4a:f9:bd:0c:20:08:a3:7a:9e:30:df:dc:e9:74:0e:e9:54:a7:
         f4:d7:97:31:9e:3c:4a:c3:1c:52:9e:5d:27:83:5e:cf:72:27:
         9d:ee:24:28:5e:f9:9a:3b:7c:b5:c7:e7:23:93:bd:1a:91:d4:
         eb:67:55:96:ed:be:e9:8c:a7:05:6b:6b:3c:18:87:42:a7:4e:
         49:07:4a:cb:e0:8d:c5:a1:83:2f:57:60:f8:a3:36:85:4c:2d:
         e5:a0:d2:93:04:28:73:1a:48:c2:d2:4b:b9:cf:2b:67:fb:49:
         3e:c2:a5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:04 2025 by rpki-client