Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
File:                     v6bpb8p6J4PLlyHrti3htTbBY6k.mft (raw, json)
Hash identifier:          Tx0auQbGCeSCqpLvOJEs9IY8iv69c2AjOSQiGLZ3oGE=
Subject key identifier:   91:93:8E:80:A8:C9:08:90:11:29:61:E0:96:EB:1A:EE:CA:CC:F5:3D
Authority key identifier: BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
Certificate issuer:       /CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Certificate serial:       0197B6A18D1F341D24AE3BB44F8C707B2785
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
Manifest number:          0D65
Signing time:             Sat 28 Jun 2025 13:02:10 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:10 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:10 +0000
Files and hashes:         1: UIZd9CI7aaVoCr978zA_tJuQwXc.roa (hash: gtKlay3p/m+1ysOhvty8fHbcgsJz5ALUFkSpQwwLWbI=)
                          2: v6bpb8p6J4PLlyHrti3htTbBY6k.crl (hash: U/X1NGq2i0w3fkhSG6VUXl5yt+n5HiKR7XZZ/VvbWpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:8d:1f:34:1d:24:ae:3b:b4:4f:8c:70:7b:27:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
        Validity
            Not Before: Jun 28 13:02:10 2025 GMT
            Not After : Jun 29 13:02:10 2025 GMT
        Subject: CN=91938e80a8c90890112961e096eb1aeecaccf53d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d2:81:70:ae:99:a4:41:1c:df:96:28:11:c4:
                    f4:ae:58:72:80:e5:f7:11:d2:42:29:03:96:f1:e2:
                    3b:3e:2e:c3:c1:64:9e:7a:a2:51:d6:6a:99:4e:c5:
                    d9:99:b4:e3:fd:c0:09:e4:68:06:9f:8a:cd:fa:8a:
                    0c:5a:d5:c7:26:5e:2d:2e:4b:9b:b0:e1:1f:71:db:
                    91:d9:cf:bf:fc:0a:fa:a7:1a:93:c2:00:a6:fe:d7:
                    1f:25:01:f0:ca:60:d9:d1:58:1a:d0:a5:78:6b:ec:
                    a7:2e:c9:19:01:4f:fe:91:b2:ef:a5:54:67:72:00:
                    72:32:dd:e0:4b:c5:f9:db:53:61:d5:ef:fa:9e:95:
                    c0:77:9d:40:58:1c:07:dc:f7:f1:a2:97:5b:ba:79:
                    ff:ab:a8:44:61:03:43:f6:78:04:88:59:a5:32:96:
                    68:65:ec:68:80:f3:d2:fe:5e:46:9c:1f:41:22:7b:
                    10:f8:08:47:3e:79:09:56:f9:8b:e0:35:ec:7e:50:
                    e5:f6:03:da:81:5a:eb:8c:f1:5e:1d:33:c0:ea:27:
                    31:3e:a9:9a:a4:d0:44:e6:1b:e4:9c:e3:69:f1:bf:
                    1f:a5:62:4e:6e:46:de:26:f9:61:81:8d:ca:fb:cb:
                    a1:18:e0:95:68:02:31:8a:9d:d8:ad:0a:83:3c:19:
                    ee:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:93:8E:80:A8:C9:08:90:11:29:61:E0:96:EB:1A:EE:CA:CC:F5:3D
            X509v3 Authority Key Identifier:
                keyid:BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:88:b8:c4:34:fd:53:2f:4f:73:82:01:fe:b0:92:67:4f:87:
         22:5f:0d:9b:e8:d0:8d:93:b8:5b:57:1e:66:c2:85:a6:4e:ba:
         26:be:ce:a8:7b:eb:c9:2d:d0:f1:ca:89:bb:c1:7f:7d:8d:51:
         c7:c7:03:c9:52:a0:a9:f0:82:c5:ed:3e:78:5b:bc:71:38:28:
         a8:0b:62:b9:a1:76:82:13:76:b6:63:a8:f9:31:64:22:72:c2:
         e6:05:8a:10:be:c1:c0:64:c9:8c:df:97:69:c8:fa:5a:8a:f4:
         8b:67:84:e4:8f:65:78:03:d7:16:49:49:57:60:24:0c:c3:93:
         c7:52:16:2c:e7:45:3b:38:61:cc:8a:c2:e6:52:44:b2:a8:bf:
         2f:59:63:6a:43:00:5a:10:cb:fc:41:a3:ef:93:8c:8b:84:dd:
         43:b7:4a:5c:d5:ae:e7:56:9e:9c:fa:b8:64:94:54:17:63:cd:
         5e:d1:e9:01:53:eb:e7:70:21:57:09:52:f6:5d:a3:38:e5:db:
         2d:d0:28:9d:41:2c:82:b1:d0:26:83:50:1f:57:da:6f:fd:44:
         71:70:c5:28:57:eb:86:05:c3:b2:24:56:83:da:af:01:41:89:
         1c:36:17:83:31:18:bc:cd:56:6d:87:b6:32:c3:15:fe:e5:a0:
         22:b5:06:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:02:03 2025 by rpki-client