Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft
File:                     b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft (raw, json)
Hash identifier:          6H93gnLwqiIk9Y5gNWIdYNgEKtBr0do4CX5faBLMy84=
Subject key identifier:   AE:D5:4D:31:CB:4C:6E:06:75:0F:09:94:76:40:A6:C9:FC:4C:54:C2
Authority key identifier: 6F:A4:8E:96:19:74:26:E4:C5:EE:B4:23:E0:FD:9C:2E:95:2C:41:77
Certificate issuer:       /CN=6fa48e96197426e4c5eeb423e0fd9c2e952c4177
Certificate serial:       0198D7A969572F365FA55D8414B4DF24966C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft
Manifest number:          158E
Signing time:             Sat 23 Aug 2025 16:01:00 +0000
Manifest this update:     Sat 23 Aug 2025 16:01:00 +0000
Manifest next update:     Sun 24 Aug 2025 16:01:00 +0000
Files and hashes:         1: 9eMR4FNJDVauWkWIUPQVpbQ5CXg.roa (hash: u33y8H6nVy03TdakAVCKdnmWlusbHupRimP8Gevy98g=)
                          2: b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl (hash: vxojJSFX32obq0+IZVJ0WDBl67KfkqtjRK+ssfpp780=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a9:69:57:2f:36:5f:a5:5d:84:14:b4:df:24:96:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa48e96197426e4c5eeb423e0fd9c2e952c4177
        Validity
            Not Before: Aug 23 16:01:00 2025 GMT
            Not After : Aug 24 16:01:00 2025 GMT
        Subject: CN=aed54d31cb4c6e06750f09947640a6c9fc4c54c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:35:77:f5:67:8c:43:4a:51:18:dc:8c:ed:7c:
                    e6:4d:53:6c:3b:cc:8c:9b:df:97:bf:c6:73:c7:c8:
                    d9:29:b1:8f:55:2e:23:63:c3:35:fa:6c:fb:9c:2c:
                    c3:07:ac:19:a2:ef:9e:cf:cb:40:3f:2d:7c:87:51:
                    fb:21:57:af:f0:08:d8:55:1b:7b:17:c4:69:13:f5:
                    57:49:ea:ae:4d:34:e4:c3:d9:de:73:76:9c:64:40:
                    27:87:07:f3:8a:13:76:7c:25:77:68:2c:db:f0:2d:
                    0b:90:a7:65:33:4e:52:6c:a5:23:ca:c9:1a:1a:f3:
                    97:ae:8e:a8:a1:18:19:43:67:66:e1:34:ae:66:02:
                    f3:ef:91:61:13:10:c5:5d:1b:bd:47:c9:e6:9f:f0:
                    fd:5f:98:41:81:81:cb:0c:07:49:b5:e0:89:fc:09:
                    1f:e4:e9:5c:12:b7:3f:ac:8e:4a:22:c3:db:4c:a0:
                    ce:c5:3a:97:20:5a:76:5a:b7:f5:54:a2:d1:e3:f1:
                    df:93:e8:11:29:ee:d6:97:39:25:4f:2a:de:27:1a:
                    74:a2:ed:61:db:7a:09:58:a2:c9:bb:62:18:37:54:
                    51:1c:98:4c:3b:1e:6d:92:9e:46:ed:3a:cb:07:1e:
                    36:2c:d5:92:ef:61:63:cf:ef:f0:f9:af:db:34:f3:
                    14:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D5:4D:31:CB:4C:6E:06:75:0F:09:94:76:40:A6:C9:FC:4C:54:C2
            X509v3 Authority Key Identifier:
                keyid:6F:A4:8E:96:19:74:26:E4:C5:EE:B4:23:E0:FD:9C:2E:95:2C:41:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:c3:7a:39:61:3f:1e:09:07:dd:a2:3e:bf:66:8c:a0:d0:6c:
         ff:eb:6a:ba:30:b7:b7:e2:77:9d:25:e3:15:45:2d:6a:c3:8e:
         bc:c4:f2:3a:3e:6d:d1:3e:a8:8b:3f:f3:19:13:df:39:ec:6a:
         19:6c:7f:b3:e2:e4:2d:33:7b:13:e1:49:27:c0:c0:2f:42:0b:
         5c:e6:f5:9b:17:20:96:ff:12:a0:f4:f0:9b:ea:44:cd:8a:14:
         41:19:e4:d5:07:18:54:cf:77:b0:55:9c:14:9b:50:12:d4:a0:
         d9:3d:c8:f0:56:73:62:3d:92:9c:7f:46:39:5d:92:4f:8d:f3:
         b1:ba:ae:cd:e7:cc:b3:9a:fe:9e:97:68:48:c5:10:48:2d:e2:
         80:5c:4a:e4:f3:ce:16:6b:0c:73:cf:06:94:6a:08:4a:80:5d:
         df:50:2c:4e:cd:97:9b:0c:f5:45:fb:df:cc:6b:d3:44:c6:3d:
         14:9f:25:21:4c:d9:42:8f:4c:03:6a:d1:b5:e5:36:ca:e2:61:
         c2:2c:31:e5:77:d4:25:42:51:e1:ac:79:85:4a:0e:45:b2:2f:
         ff:ce:06:26:c2:30:c9:5b:7b:35:9b:e7:a0:85:b9:d0:18:64:
         31:49:a0:fc:01:52:0d:2d:b6:e9:c3:6e:4c:d1:6b:12:0b:8d:
         95:b7:6b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:50:28 2025 by rpki-client