Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft
File:                     t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft (raw, json)
Hash identifier:          53lqqFrNCcmKb8Jr2ztsxkvKgnICsuJvXIHhedxmkxk=
Subject key identifier:   48:6F:0A:0F:C0:B0:95:39:F7:A0:B0:BA:69:2E:A0:8B:A1:37:FB:4B
Authority key identifier: B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB
Certificate issuer:       /CN=b7a670e51c96419fc52028b12e45655ef914ddbb
Certificate serial:       0198D5BB8304E8BCAB30AB7313B29E45CC95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft
Manifest number:          144D
Signing time:             Sat 23 Aug 2025 07:01:32 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:32 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:32 +0000
Files and hashes:         1: NsZjsu2WDCD4J07ujcjp4ji-VOU.roa (hash: VU4MSu0eDWsfOu4NUIfDAf48zntyybA1JsYveD+Po8w=)
                          2: gwXTY0LJ22_8yhfOOeJP7JMePkA.roa (hash: C8Ad/tS32eCjtx+fJLVbrf6IcLPHhfeHNWH2HlHojI4=)
                          3: t6Zw5RyWQZ_FICixLkVlXvkU3bs.crl (hash: LFw6EvU7hrlJhM+HOLA+4IGv/EztxbichP29DIers/w=)
                          4: tYoEMyoFgANiNY7nw4zfzPaPtkI.roa (hash: PX+Kyq98vaXV0wz8tTuZQEWdK7K2Hq3OD8ndatlexb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:83:04:e8:bc:ab:30:ab:73:13:b2:9e:45:cc:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a670e51c96419fc52028b12e45655ef914ddbb
        Validity
            Not Before: Aug 23 07:01:32 2025 GMT
            Not After : Aug 24 07:01:32 2025 GMT
        Subject: CN=486f0a0fc0b09539f7a0b0ba692ea08ba137fb4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fa:0f:08:cb:b8:68:8b:2b:71:b0:50:2c:51:
                    5d:34:0d:ec:57:42:90:46:8a:a5:57:85:89:71:73:
                    c9:b7:24:10:b4:12:29:55:8b:ea:64:c1:a7:63:82:
                    b4:7b:07:87:3f:cb:3c:63:b1:0c:ad:34:62:0c:15:
                    9c:21:00:76:75:75:67:38:b0:a4:de:0b:83:87:34:
                    aa:45:8e:73:79:cb:10:49:e7:f2:aa:83:5b:7e:8b:
                    a5:7a:4a:da:a9:66:01:06:b4:1e:2d:58:3d:bc:8f:
                    b3:d4:02:23:e4:1f:85:d1:ff:0b:62:13:6c:cf:0a:
                    60:83:35:41:b0:28:ad:92:57:c8:54:f0:85:1f:d3:
                    82:b0:06:bd:0d:d7:f7:10:69:79:60:33:79:52:5e:
                    ac:13:f3:35:fe:af:73:a1:9d:00:b4:d1:d1:92:d1:
                    33:1d:32:f9:fa:ca:d0:7e:3f:e8:11:9a:99:ac:18:
                    b9:b3:85:51:34:a9:21:10:9f:7e:16:a9:9d:36:17:
                    51:db:60:14:38:58:af:45:d3:e3:50:c9:ea:cf:51:
                    5d:02:1d:4d:90:32:77:c0:fd:88:a9:9b:c0:01:dc:
                    d3:68:4c:bd:50:b9:dc:06:d7:11:04:92:a9:89:69:
                    dc:df:99:e6:43:b6:fe:5f:7b:3c:8e:dd:2f:d6:9f:
                    67:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6F:0A:0F:C0:B0:95:39:F7:A0:B0:BA:69:2E:A0:8B:A1:37:FB:4B
            X509v3 Authority Key Identifier:
                keyid:B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:da:ae:9b:1b:62:c1:fe:74:ec:8f:96:3f:37:2b:a5:d1:bd:
         4c:cf:22:b7:4e:75:c8:88:74:1e:3d:50:93:81:f9:e3:03:c9:
         b4:3a:70:c9:4c:b6:63:d2:b7:76:de:76:75:46:2b:f4:e9:af:
         53:93:7e:66:97:4f:4b:4a:ed:ea:3c:1c:f0:de:c7:5c:09:d2:
         69:a4:5f:3c:86:c3:0e:22:1a:36:6f:d3:4f:94:33:01:fa:86:
         32:6e:7c:af:ca:1c:ca:91:93:fa:d4:e2:35:eb:9f:19:94:da:
         98:37:38:56:62:fb:b7:37:1f:29:df:ff:bd:08:cb:95:93:a3:
         43:59:49:ad:3d:ba:af:03:2a:ed:4e:b9:0f:3a:b6:58:90:21:
         25:c9:da:d1:69:ee:4c:01:19:6d:28:0d:b2:67:b8:c7:9d:f7:
         a2:ef:2f:d4:b3:2e:41:f2:d9:2e:6c:ef:9b:b9:cf:c1:26:e4:
         2b:d2:a8:71:80:49:54:b7:7e:f9:54:14:c1:aa:72:14:5a:89:
         ef:eb:71:20:05:6d:14:c8:98:d5:84:85:9c:52:d5:4f:07:db:
         64:2e:91:b8:7e:4d:9f:75:3b:ea:9e:1c:58:f7:86:0c:7f:c1:
         1d:64:42:38:a3:f9:1f:9a:a0:0a:9d:ea:7c:c3:27:88:e9:54:
         c1:5d:fc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:16 2025 by rpki-client