Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
File:                     H6_KU6xU5X5SwBATiiEnlMZw4M0.mft (raw, json)
Hash identifier:          EUd6MvOkzjqjcnVahdRVjVhJYfq1PlJyQDBj1Uus35o=
Subject key identifier:   F9:45:29:75:A9:FC:64:D7:E4:AE:27:47:7B:2A:0F:F5:3E:3B:22:90
Authority key identifier: 1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
Certificate issuer:       /CN=1fafca53ac54e57e52c010138a212794c670e0cd
Certificate serial:       0198D4731C72426DBF6F26E5BAA2C5022654
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
Manifest number:          06A0
Signing time:             Sat 23 Aug 2025 01:02:50 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:50 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:50 +0000
Files and hashes:         1: H6_KU6xU5X5SwBATiiEnlMZw4M0.crl (hash: Wptpdgk+2MqO+BhWsCshTFcOOnHajq6yMC7JLg17zBQ=)
                          2: HcCGVf1c2Ti9Q8GpR181zKxoK-4.roa (hash: epMyekEuNY8Rw5EQGjHEPi8q6cf4LUx00XdGU4u6gyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:1c:72:42:6d:bf:6f:26:e5:ba:a2:c5:02:26:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fafca53ac54e57e52c010138a212794c670e0cd
        Validity
            Not Before: Aug 23 01:02:50 2025 GMT
            Not After : Aug 24 01:02:50 2025 GMT
        Subject: CN=f9452975a9fc64d7e4ae27477b2a0ff53e3b2290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a5:d2:ca:e1:88:dc:8c:72:d4:be:41:b3:03:
                    be:0e:5c:00:b2:42:fd:19:22:0f:90:b6:9f:70:d4:
                    dc:58:3d:d7:57:2f:c5:64:d7:66:ae:cf:2f:a7:b2:
                    78:fa:38:d9:22:fa:5f:17:20:c9:9f:fd:11:30:31:
                    de:ba:42:6b:42:02:43:29:78:3a:82:de:2d:63:71:
                    f4:1b:f5:d3:e6:5e:1b:f3:7f:bd:90:3e:5a:59:9e:
                    a1:b0:8f:e9:fd:6e:38:a7:a8:9d:5a:d0:95:0c:ae:
                    62:d2:74:f7:d0:dd:f1:34:d3:54:a3:f2:7c:e9:5c:
                    60:58:b2:65:af:a4:28:0f:9f:22:e2:6d:ef:a6:fe:
                    ea:c9:1b:34:e4:77:00:00:da:5d:a5:e1:c4:87:5d:
                    7b:c0:80:79:72:e2:cd:90:df:7d:09:e5:f7:4d:6d:
                    9f:e8:24:3c:be:b9:78:00:eb:95:15:59:6c:65:8b:
                    31:52:28:99:06:6a:90:87:ba:b4:42:f9:2d:73:63:
                    9b:37:e1:93:33:b8:93:fc:c6:7a:c5:ff:68:28:02:
                    9e:ac:88:c4:ca:8a:82:a9:94:7f:20:14:8a:52:93:
                    1a:f6:7b:a5:03:39:cb:83:4b:59:15:3e:0a:a6:3f:
                    28:f4:9a:d3:47:28:d1:20:e8:72:94:85:20:f9:21:
                    cd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:45:29:75:A9:FC:64:D7:E4:AE:27:47:7B:2A:0F:F5:3E:3B:22:90
            X509v3 Authority Key Identifier:
                keyid:1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:03:4a:44:6d:8c:9e:83:0d:98:22:2a:b5:6e:44:36:de:e1:
         2b:e5:6f:bd:61:72:b8:9d:79:6e:df:63:34:f5:2f:b9:f0:6e:
         27:16:70:6e:ea:8c:ef:69:4a:66:27:f4:83:f9:47:06:a8:13:
         d3:fe:92:55:2c:77:f7:7f:5e:36:b5:6d:4c:6e:6c:66:11:df:
         0e:88:bf:6b:72:2f:48:86:8a:f9:7e:1e:3c:1c:12:62:42:49:
         5a:32:4d:c6:21:f6:96:ff:4e:72:76:88:69:58:d1:91:8b:ff:
         9b:d7:a8:c5:16:d5:a7:2d:1a:d2:b4:13:7b:8f:eb:74:56:0e:
         4c:23:f5:0a:2c:5b:e7:92:51:85:e9:24:ea:18:ca:bf:cc:7c:
         05:0d:04:17:78:05:0d:24:b5:22:ca:87:55:54:b8:30:be:aa:
         b6:72:0c:3b:56:72:cb:fb:59:34:16:16:c8:b0:b4:a2:b5:35:
         24:8e:5c:0d:1b:05:3b:12:2a:59:e6:f6:68:5b:60:5c:17:d4:
         57:8a:bc:5b:10:14:d0:c5:1d:52:01:6d:31:8c:03:cf:1a:60:
         f3:fc:ef:99:a4:05:fb:78:f2:e4:16:8b:fe:b9:f0:a3:02:93:
         34:32:8a:e2:f7:54:cc:88:af:5e:30:4f:fb:f4:91:5c:5d:03:
         2f:be:95:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcxxyQm2/bybluqLFAiZUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYWZjYTUzYWM1NGU1N2U1MmMwMTAxMzhhMjEyNzk0YzY3
MGUwY2QwHhcNMjUwODIzMDEwMjUwWhcNMjUwODI0MDEwMjUwWjAzMTEwLwYDVQQD
EyhmOTQ1Mjk3NWE5ZmM2NGQ3ZTRhZTI3NDc3YjJhMGZmNTNlM2IyMjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qXSyuGI3Ixy1L5BswO+DlwAskL9
GSIPkLafcNTcWD3XVy/FZNdmrs8vp7J4+jjZIvpfFyDJn/0RMDHeukJrQgJDKXg6
gt4tY3H0G/XT5l4b83+9kD5aWZ6hsI/p/W44p6idWtCVDK5i0nT30N3xNNNUo/J8
6VxgWLJlr6QoD58i4m3vpv7qyRs05HcAANpdpeHEh117wIB5cuLNkN99CeX3TW2f
6CQ8vrl4AOuVFVlsZYsxUiiZBmqQh7q0Qvktc2ObN+GTM7iT/MZ6xf9oKAKerIjE
yoqCqZR/IBSKUpMa9nulAznLg0tZFT4Kpj8o9JrTRyjRIOhylIUg+SHNYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlFKXWp/GTX5K4nR3sqD/U+OyKQMB8GA1UdIwQY
MBaAFB+vylOsVOV+UsAQE4ohJ5TGcODNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDZfS1U2eFU1WDVTd0JBVGlpRW5sTVp3NE0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83NjhlMjktMjRjNS00ZmE3LTliMzYt
Yzk5NWQyZWM5ZTk0LzEvSDZfS1U2eFU1WDVTd0JBVGlpRW5sTVp3NE0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83NjhlMjktMjRjNS00ZmE3LTliMzYtYzk5NWQyZWM5ZTk0
LzEvSDZfS1U2eFU1WDVTd0JBVGlpRW5sTVp3NE0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwNKRG2M
noMNmCIqtW5ENt7hK+VvvWFyuJ15bt9jNPUvufBuJxZwbuqM72lKZif0g/lHBqgT
0/6SVSx3939eNrVtTG5sZhHfDoi/a3IvSIaK+X4ePBwSYkJJWjJNxiH2lv9OcnaI
aVjRkYv/m9eoxRbVpy0a0rQTe4/rdFYOTCP1Cixb55JRhekk6hjKv8x8BQ0EF3gF
DSS1IsqHVVS4ML6qtnIMO1Zyy/tZNBYWyLC0orU1JI5cDRsFOxIqWeb2aFtgXBfU
V4q8WxAU0MUdUgFtMYwDzxpg8/zvmaQF+3jy5BaL/rnwowKTNDKK4vdUzIivXjBP
+/SRXF0DL76VrA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:42 2025 by rpki-client