Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
File:                     6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft (raw, json)
Hash identifier:          Ci44oQaYkaL8QIMgz9ebs9FguwfT53f8MgJ576P8zDg=
Subject key identifier:   39:C6:4A:54:E0:CC:59:48:A1:CA:E5:2E:B4:53:F4:A2:BC:8B:E3:A9
Authority key identifier: EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
Certificate issuer:       /CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Certificate serial:       0198D583D0945C48445115E4C9BAE5CCEFF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
Manifest number:          0D3F
Signing time:             Sat 23 Aug 2025 06:00:42 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:42 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:42 +0000
Files and hashes:         1: 534vF5sjkwJDGuUSMSbyeoXyx-w.roa (hash: yaE3+RBNj5kJXWkdpo0vdtCXgmh99gzWa0o0cozuQ7M=)
                          2: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl (hash: cL4ttIMlVE5eXB5DWc5D2tZcgPto77b/YUYV+Rfp5Vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:d0:94:5c:48:44:51:15:e4:c9:ba:e5:cc:ef:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
        Validity
            Not Before: Aug 23 06:00:42 2025 GMT
            Not After : Aug 24 06:00:42 2025 GMT
        Subject: CN=39c64a54e0cc5948a1cae52eb453f4a2bc8be3a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:de:cc:21:d4:86:0c:75:05:74:33:83:3e:74:
                    02:1e:34:77:c3:a9:36:ae:23:ef:00:aa:49:6b:c7:
                    12:2c:01:65:a3:db:a6:c0:a9:02:4a:aa:f0:d5:6d:
                    b5:e3:b0:b5:84:12:bb:5f:19:2d:4e:4e:06:5e:87:
                    16:ff:ca:7c:a2:b7:9e:03:55:37:b4:42:1e:74:4c:
                    55:ba:54:11:d5:56:0a:7f:d1:a6:44:d9:e2:3b:2b:
                    be:d1:8f:14:5a:0e:09:07:e2:ed:92:85:17:c5:ba:
                    10:1a:ac:6d:cb:dd:e0:d0:60:ed:c6:51:dd:31:56:
                    fb:09:0e:f2:63:c9:41:16:35:c8:5f:b7:58:c6:3d:
                    b3:7e:55:a5:2d:69:9c:c4:28:6f:03:2d:7c:68:f4:
                    23:28:f9:5b:b6:b3:7c:ee:81:49:bf:6d:74:c5:90:
                    18:9b:13:01:21:54:7c:fa:5f:2c:71:30:a7:0a:87:
                    36:b9:26:60:04:9d:ff:4e:47:c3:db:38:61:65:c3:
                    2f:ce:3d:c6:3d:c1:ef:f9:f0:7e:5e:c4:6e:f3:66:
                    76:fc:a3:6f:54:53:8e:2e:4a:f9:1c:98:d9:9c:0e:
                    00:57:4f:e5:9b:b9:63:58:05:07:7c:c6:f2:69:d8:
                    e4:9c:16:de:5e:30:d6:9e:b1:53:3e:76:d3:7a:35:
                    1f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C6:4A:54:E0:CC:59:48:A1:CA:E5:2E:B4:53:F4:A2:BC:8B:E3:A9
            X509v3 Authority Key Identifier:
                keyid:EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:00:bc:6e:ef:8f:80:5a:32:0b:0e:51:ee:e5:8a:e8:7c:02:
         de:17:13:70:77:9f:99:9c:78:dd:ad:40:4e:46:58:fb:a9:6e:
         8f:11:e3:8b:5c:db:fb:f2:7a:95:c1:c3:d1:46:c2:33:09:7f:
         71:25:80:d1:58:2c:0b:9c:a7:21:68:99:43:8b:82:c6:0c:27:
         84:3e:9a:bb:26:3d:80:8c:82:b0:17:dd:0d:20:62:89:25:11:
         3d:d9:14:f5:95:6e:d7:63:e7:0b:ad:7b:af:1c:58:3e:8c:e3:
         b8:0a:50:72:da:e1:f5:bb:52:78:4f:60:15:9e:cc:e5:f3:84:
         50:44:6f:85:47:84:c3:94:78:e5:87:d2:39:61:47:ac:d5:68:
         38:0d:b1:1c:fa:99:78:32:17:40:d2:15:9b:e7:0c:a5:d2:30:
         62:54:8f:f5:f5:0b:ad:6e:06:2b:8e:9f:b0:d6:ff:5e:35:35:
         f1:73:ae:5f:ed:78:bc:0a:f2:26:8a:41:e9:a5:5c:49:13:97:
         75:51:3c:33:b4:39:9d:1d:1d:d5:ff:80:5d:d7:b2:86:7b:2a:
         e5:c8:7c:ef:70:69:4b:58:7a:5f:6b:39:6d:98:70:eb:42:73:
         fb:bd:a0:de:50:1f:a9:00:7f:7a:6f:40:e8:10:f9:ca:45:25:
         1b:bd:bf:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:49:27 2025 by rpki-client