Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
File:                     6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft (raw, json)
Hash identifier:          htK7xyBkVpJ2xARM7BPArmX66NCc6pYLMfw+lcXBZ5c=
Subject key identifier:   1A:AA:45:7E:A7:72:A7:53:B2:99:52:23:48:64:6A:98:64:02:BF:79
Authority key identifier: EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
Certificate issuer:       /CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Certificate serial:       01988EEB56C9ACC0E84249FE0C16E08BA30A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
Manifest number:          1625
Signing time:             Sat 09 Aug 2025 13:00:44 +0000
Manifest this update:     Sat 09 Aug 2025 13:00:44 +0000
Manifest next update:     Sun 10 Aug 2025 13:00:44 +0000
Files and hashes:         1: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl (hash: D3vKjFiXWlhTabfegLwXvpOkEUBEy82oEfFaY1S4xdI=)
                          2: zLngmWEw_D0Bxeb-kcPWwP9gp_U.roa (hash: Sf54rTElSlunUVvFtUXJDy0FrQ/XeLhMeCRG3/nN1oE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 13:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:eb:56:c9:ac:c0:e8:42:49:fe:0c:16:e0:8b:a3:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea51769ce8672c56d1652bf90a5aefca819b488a
        Validity
            Not Before: Aug  9 13:00:44 2025 GMT
            Not After : Aug 10 13:00:44 2025 GMT
        Subject: CN=1aaa457ea772a753b299522348646a986402bf79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:9a:d1:8f:f0:66:79:89:c1:af:ed:8e:bc:
                    1b:43:d1:2f:e7:de:14:02:5a:5c:fd:a8:ef:85:6c:
                    f4:07:45:e3:c3:67:c3:f3:0e:c8:55:d2:74:ff:2c:
                    63:23:7f:d5:19:93:cd:46:ea:9b:0a:0d:10:bd:c0:
                    5b:a0:19:cf:e0:e6:31:07:12:2e:1e:aa:5e:1f:6b:
                    fb:0e:f3:bc:12:b2:46:90:a8:42:28:c3:52:bf:34:
                    78:a9:c1:85:21:d9:ef:d8:9f:3f:89:37:89:d8:cc:
                    05:28:90:34:57:3e:99:d5:db:46:1d:39:bb:10:d3:
                    3e:06:bf:11:b1:63:49:39:8e:0c:4e:f8:f2:8b:9c:
                    43:69:9f:f2:4d:c4:27:54:2e:0f:c0:cc:aa:c8:e1:
                    da:43:fa:e6:dd:f9:11:27:f5:97:99:f0:22:9f:1e:
                    33:bf:9b:b9:ce:52:fe:f2:ba:3c:94:bb:f3:48:32:
                    3a:e4:84:98:bf:24:a7:4e:b8:4e:16:b9:d6:25:26:
                    40:8c:50:5e:79:f5:c0:51:4d:8e:8d:d2:87:b8:04:
                    46:e5:fb:a3:17:78:43:6b:93:db:c7:09:75:c4:5d:
                    7e:58:81:93:93:7b:c0:a9:97:91:16:06:c3:f7:12:
                    94:05:30:bf:fb:47:2f:26:85:79:7d:ee:7b:42:17:
                    4e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AA:45:7E:A7:72:A7:53:B2:99:52:23:48:64:6A:98:64:02:BF:79
            X509v3 Authority Key Identifier:
                keyid:EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:34:1f:f1:0e:7f:3a:a0:3f:49:d7:a6:44:05:32:5a:35:c1:
         8e:60:6a:38:9b:cc:f9:2e:32:67:18:44:0a:a0:ca:00:95:ff:
         e2:2e:83:d7:0f:05:89:f9:32:5c:57:d8:bd:b8:52:24:0e:83:
         3b:97:90:7d:85:de:d6:bd:09:c4:e2:50:19:33:a0:21:0b:b7:
         b2:46:b2:2e:15:13:5e:81:11:4b:ad:1e:e1:16:46:ac:3b:76:
         c0:74:9b:2b:e5:40:47:6a:d2:ad:bf:8d:a1:5a:f6:56:a2:09:
         51:8f:36:c5:28:2a:b5:b3:90:dc:2d:c7:9d:34:c8:0b:08:cf:
         65:a7:a8:57:fa:b8:90:d0:f4:a6:32:13:56:12:f6:43:ba:ee:
         aa:df:ed:fb:e5:f5:b4:db:ca:3d:bb:2d:29:e0:40:6e:e4:3d:
         43:5b:60:aa:1b:c7:82:84:80:b1:18:de:03:e0:b5:a7:10:55:
         3c:af:e7:c8:b8:26:ac:c2:1f:cd:50:35:36:9c:7c:b4:dc:db:
         21:4c:33:ed:10:7b:ca:0d:4e:75:86:ff:ab:eb:99:b2:c3:68:
         54:94:2f:63:00:9e:2b:ad:51:7c:8e:e1:97:21:4a:41:0b:b1:
         19:9e:87:1b:04:b7:6e:e0:94:4d:59:9c:db:5f:d5:ce:56:a1:
         68:66:a6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:32:39 2025 by rpki-client