Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
File:                     6MpwwfyVubHp3Hd1RVutuSFPkdA.mft (raw, json)
Hash identifier:          1x2sJiug6GP+Kq5ZdIwjhzXCrQQFt68NW2WEsUDkth8=
Subject key identifier:   92:4F:85:D0:23:7A:60:67:28:DA:89:F2:B0:32:5A:F5:73:FE:2D:1F
Authority key identifier: E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0
Certificate issuer:       /CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
Certificate serial:       0198D404EF61C0F9A116C825216DFF095824
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
Manifest number:          154F
Signing time:             Fri 22 Aug 2025 23:02:29 +0000
Manifest this update:     Fri 22 Aug 2025 23:02:29 +0000
Manifest next update:     Sat 23 Aug 2025 23:02:29 +0000
Files and hashes:         1: 6MpwwfyVubHp3Hd1RVutuSFPkdA.crl (hash: PE80ZKgQ7FzUjd/w4Vmb/yijHWn5b6oxloNW6ObSLVg=)
                          2: h3MBCKUGhHfeEGJEjBUvFcZingY.roa (hash: Kf87fhJV7eWi54ATVvDhv4SnGp1TZLheM1w//OwPipM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 23:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:04:ef:61:c0:f9:a1:16:c8:25:21:6d:ff:09:58:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
        Validity
            Not Before: Aug 22 23:02:29 2025 GMT
            Not After : Aug 23 23:02:29 2025 GMT
        Subject: CN=924f85d0237a606728da89f2b0325af573fe2d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:12:91:1e:4e:b7:3d:b7:22:56:31:f8:b5:c1:
                    55:d3:36:52:d5:6f:a4:51:4b:38:5d:80:96:40:bd:
                    f7:02:b9:61:28:fc:9e:df:70:db:68:c3:0a:30:22:
                    c0:4e:b6:8b:ec:75:24:22:84:56:4a:94:e3:42:3e:
                    eb:df:2d:99:ee:5f:cc:9e:c2:85:88:f6:ed:1a:7a:
                    6c:b3:4b:db:d0:aa:dd:0b:fd:76:71:e2:03:f9:0a:
                    a7:f3:7a:b3:1e:af:a4:ae:eb:a5:7c:ce:5e:f0:b9:
                    a8:a1:a0:c5:80:77:73:2e:02:39:4a:28:c2:7e:dc:
                    67:36:23:a1:69:e3:8e:72:9b:8d:23:94:5e:7c:5a:
                    fa:8b:6c:ba:f4:d8:ce:3d:91:0a:69:2f:4a:27:7b:
                    e2:31:ac:53:1d:ad:8f:d9:7f:72:21:08:f7:43:cf:
                    ad:7d:6c:2e:84:b2:ae:a0:90:30:5b:b1:9f:a1:25:
                    36:59:44:84:ca:d1:97:1b:7f:ac:8a:12:5a:79:e7:
                    12:ce:b3:02:d6:42:d8:bb:72:76:94:be:4e:0d:10:
                    36:1f:18:1f:ab:5a:4b:f7:d3:92:93:cb:86:cf:15:
                    37:e9:1a:24:3e:79:e3:49:c5:fa:c5:b9:ce:8b:9b:
                    a7:67:8c:ae:89:ff:ef:26:c3:1a:36:97:02:11:2e:
                    e7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4F:85:D0:23:7A:60:67:28:DA:89:F2:B0:32:5A:F5:73:FE:2D:1F
            X509v3 Authority Key Identifier:
                keyid:E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:0c:9d:61:41:6b:6a:59:78:21:67:5d:ef:96:15:8c:2c:e7:
         9b:21:d9:e0:6a:7b:84:e4:05:bc:36:8d:e3:d6:92:44:77:ea:
         b8:3d:cf:d1:b0:d7:cf:61:cd:92:96:d6:9a:48:f9:82:fd:a3:
         c5:ab:d1:d3:e3:a4:74:78:90:f7:8b:aa:67:58:57:af:af:8f:
         12:7b:12:65:40:6a:f8:23:d3:0c:d1:24:5c:38:93:e9:51:88:
         ab:0a:fc:1c:56:df:3e:9c:97:70:b6:bf:0d:05:46:47:b6:56:
         49:0f:36:89:1b:fb:6f:15:d6:08:46:e8:6a:c4:44:69:88:cc:
         5b:62:49:80:74:26:9b:8b:79:08:fc:9f:18:67:4d:47:93:e4:
         5a:b9:36:fe:b5:cf:f1:1a:0d:88:61:fb:64:8f:5f:48:d8:7b:
         4b:62:e4:7b:14:38:52:05:fd:30:6a:f6:7d:fa:19:bb:74:fc:
         7f:fe:de:e4:3d:22:db:bd:b4:1d:b4:ad:f4:d9:84:1b:c7:31:
         ab:15:c2:a2:28:16:33:95:f9:10:e9:fa:da:f3:c6:ef:2a:90:
         e4:3c:6d:a1:01:96:bc:c8:80:98:0f:8d:58:c7:b8:26:51:37:
         54:b6:b9:aa:6a:7c:6e:cd:e0:fb:52:f3:52:c5:56:bd:f9:c4:
         31:f4:a0:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBO9hwPmhFsglIW3/CVgkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4Y2E3MGMxZmM5NWI5YjFlOWRjNzc3NTQ1NWJhZGI5MjE0
ZjkxZDAwHhcNMjUwODIyMjMwMjI5WhcNMjUwODIzMjMwMjI5WjAzMTEwLwYDVQQD
Eyg5MjRmODVkMDIzN2E2MDY3MjhkYTg5ZjJiMDMyNWFmNTczZmUyZDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBKRHk63PbciVjH4tcFV0zZS1W+k
UUs4XYCWQL33ArlhKPye33DbaMMKMCLATraL7HUkIoRWSpTjQj7r3y2Z7l/MnsKF
iPbtGnpss0vb0KrdC/12ceID+Qqn83qzHq+kruulfM5e8LmooaDFgHdzLgI5SijC
ftxnNiOhaeOOcpuNI5RefFr6i2y69NjOPZEKaS9KJ3viMaxTHa2P2X9yIQj3Q8+t
fWwuhLKuoJAwW7GfoSU2WUSEytGXG3+sihJaeecSzrMC1kLYu3J2lL5ODRA2Hxgf
q1pL99OSk8uGzxU36RokPnnjScX6xbnOi5unZ4yuif/vJsMaNpcCES7ndQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJPhdAjemBnKNqJ8rAyWvVz/i0fMB8GA1UdIwQY
MBaAFOjKcMH8lbmx6dx3dUVbrbkhT5HQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk1wd3dmeVZ1YkhwM0hkMVJWdXR1U0ZQa2RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81ZmI5ZmUtZGRjNy00NDMyLWE0YTMt
MTZkOWY3ZDA3NGYzLzEvNk1wd3dmeVZ1YkhwM0hkMVJWdXR1U0ZQa2RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81ZmI5ZmUtZGRjNy00NDMyLWE0YTMtMTZkOWY3ZDA3NGYz
LzEvNk1wd3dmeVZ1YkhwM0hkMVJWdXR1U0ZQa2RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiAydYUFr
all4IWdd75YVjCznmyHZ4Gp7hOQFvDaN49aSRHfquD3P0bDXz2HNkpbWmkj5gv2j
xavR0+OkdHiQ94uqZ1hXr6+PEnsSZUBq+CPTDNEkXDiT6VGIqwr8HFbfPpyXcLa/
DQVGR7ZWSQ82iRv7bxXWCEboasREaYjMW2JJgHQmm4t5CPyfGGdNR5PkWrk2/rXP
8RoNiGH7ZI9fSNh7S2LkexQ4UgX9MGr2ffoZu3T8f/7e5D0i2720HbSt9NmEG8cx
qxXCoigWM5X5EOn62vPG7yqQ5DxtoQGWvMiAmA+NWMe4JlE3VLa5qmp8bs3g+1Lz
UsVWvfnEMfSg4g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:44 2025 by rpki-client