Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
File:                     6wK1I7069vxsN93WbN9HmT24Yys.mft (raw, json)
Hash identifier:          3u5m2yByGR14KHmXivzGzvSeRUrPvv5wpEkIWHepL9o=
Subject key identifier:   58:98:EC:87:35:57:BC:93:71:4D:40:0F:B5:29:00:FB:83:EF:60:3E
Authority key identifier: EB:02:B5:23:BD:3A:F6:FC:6C:37:DD:D6:6C:DF:47:99:3D:B8:63:2B
Certificate issuer:       /CN=eb02b523bd3af6fc6c37ddd66cdf47993db8632b
Certificate serial:       0198D54E3B01AA957F7850E326AAE513F143
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
Manifest number:          08C5
Signing time:             Sat 23 Aug 2025 05:02:10 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:10 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:10 +0000
Files and hashes:         1: 1zUeCNsyUySRrcIIfazZmjAut_s.roa (hash: WXspWFEbktg81y3mrIdyXASjQtA7MBr6Jnt3pUsHMi4=)
                          2: 6wK1I7069vxsN93WbN9HmT24Yys.crl (hash: Cs92wvkFv9qYxhQ+2sWVDbczMl08+I0jEs4e6kj7e2M=)
                          3: zd1TadsFdkDRbaDn6de93U3QGzg.roa (hash: 3y34pfznptay8iJNHTIdskxBHxaww5H8QXxFU6fcGRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:3b:01:aa:95:7f:78:50:e3:26:aa:e5:13:f1:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb02b523bd3af6fc6c37ddd66cdf47993db8632b
        Validity
            Not Before: Aug 23 05:02:10 2025 GMT
            Not After : Aug 24 05:02:10 2025 GMT
        Subject: CN=5898ec873557bc93714d400fb52900fb83ef603e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e5:17:e6:11:8a:8e:df:ca:b9:94:54:1a:49:
                    fe:a7:a0:0e:a3:a3:9f:b7:2e:a8:f2:cb:a2:d9:22:
                    6b:2b:75:07:ad:f5:70:ac:c6:be:d8:d5:b2:39:50:
                    31:2e:c1:15:23:1b:99:ea:9c:eb:6f:54:86:57:d1:
                    f1:69:12:0a:9e:ab:98:7c:87:4d:e0:9a:f2:f2:b9:
                    11:6d:89:3a:0c:d3:45:46:f9:cb:1c:79:a2:c4:d1:
                    2b:be:8a:e6:9c:77:9e:4f:1c:35:f1:0c:12:d7:a2:
                    53:bf:1b:6d:98:22:11:03:7f:46:6a:8b:48:88:ae:
                    8b:88:b7:dd:26:50:de:f9:84:fb:af:01:88:16:72:
                    0c:53:b6:3a:0d:cc:e1:f0:3b:07:42:1a:41:c0:77:
                    4a:fa:c4:35:cf:50:08:4d:a8:a3:4e:c7:3d:38:d3:
                    40:8f:64:de:d2:be:ca:e0:4c:cb:d8:e3:39:ea:0f:
                    d2:22:59:85:61:22:a8:00:a3:27:67:40:bb:0b:06:
                    02:a9:75:5f:d4:df:7a:3a:75:83:9b:41:de:44:d5:
                    ae:01:8b:54:bc:a1:bd:1e:6e:93:67:d4:3a:22:7e:
                    13:73:be:b1:83:ea:7a:10:0e:ed:fd:d5:0b:b8:d8:
                    c8:67:ac:46:48:f5:12:e1:e4:b8:3a:9c:6e:64:02:
                    3c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:98:EC:87:35:57:BC:93:71:4D:40:0F:B5:29:00:FB:83:EF:60:3E
            X509v3 Authority Key Identifier:
                keyid:EB:02:B5:23:BD:3A:F6:FC:6C:37:DD:D6:6C:DF:47:99:3D:B8:63:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:7b:1c:a3:33:05:58:b7:ea:59:86:70:00:dc:83:17:15:06:
         96:c2:23:4e:90:fd:43:1b:d5:82:48:cf:5b:b8:b7:07:10:32:
         a4:ff:34:56:10:95:6b:17:88:6d:2b:c5:79:46:ab:e5:f0:6b:
         11:62:5a:2b:19:9a:aa:71:ee:c7:fc:12:b7:11:a8:13:7a:cf:
         ab:2f:2b:80:eb:48:49:e2:aa:00:a8:f4:87:8b:33:31:a9:68:
         e9:2c:5c:1a:90:59:ec:5b:35:42:cd:27:7b:7e:c4:00:4a:8d:
         e3:aa:15:fe:ad:f6:e5:64:c9:74:21:88:aa:23:d5:74:c3:e5:
         bd:9a:79:7a:f5:e8:38:c4:f6:7c:ed:ac:bb:58:a5:e1:64:06:
         5e:0c:2d:b2:04:66:a4:ab:c2:b8:03:0b:3d:35:67:78:27:68:
         c7:d6:7b:42:d1:71:3e:27:c1:7c:9f:e8:14:5c:9c:14:72:86:
         e9:ba:cb:a8:b2:88:c2:b4:67:cb:5f:e8:ad:fe:33:4b:e8:36:
         26:74:6d:c6:60:5c:8e:10:c4:3d:44:9e:0f:e9:f7:5c:49:a4:
         1d:26:c1:ae:4c:59:0e:75:b4:09:ba:c5:81:03:1b:52:12:76:
         03:b5:3d:b7:95:84:79:bc:f0:cb:e7:88:e5:16:0b:a4:2b:d0:
         08:81:f4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:31 2025 by rpki-client