Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft
File:                     x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft (raw, json)
Hash identifier:          G5fW06EdX2BwowQ1FXefxIzpgcdLtz1jtDNW/q9Q4hI=
Subject key identifier:   CF:BE:95:17:52:53:15:70:53:44:EF:B0:53:F6:91:FF:09:E2:14:D0
Authority key identifier: C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2
Certificate issuer:       /CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2
Certificate serial:       0198D6603CFABDE48F4A392C6CFAC4384A09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft
Manifest number:          0F9C
Signing time:             Sat 23 Aug 2025 10:01:27 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:27 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:27 +0000
Files and hashes:         1: JqQax9sv0vRADwA78DtmjWkQLEE.roa (hash: Yj45NvtpL9PKcZ/9PbAe7wPZg60kGlm36nNetlLSWMc=)
                          2: QeY7vGKOe5WJwx2PdFZMhuvqcrM.roa (hash: iFsqZE7xTmoV7CGhuU56miv5nf81Wm5pGm3tJX+o8Gg=)
                          3: dSov7w2eyIME-dLmYE5huJUu4Yg.roa (hash: ZBbSGs3xtCwiRVVA/WAQV08kD/BTL0iXtgfJYGFBfeY=)
                          4: x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl (hash: lgy1jtmDJqr7/pK603up8akYlXGC1DxKTsX8u/ucIa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:3c:fa:bd:e4:8f:4a:39:2c:6c:fa:c4:38:4a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2
        Validity
            Not Before: Aug 23 10:01:27 2025 GMT
            Not After : Aug 24 10:01:27 2025 GMT
        Subject: CN=cfbe9517525315705344efb053f691ff09e214d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:82:20:62:76:04:58:e3:d3:39:f9:00:f9:21:
                    d8:8a:3f:ad:13:18:af:be:04:dd:5b:21:7d:84:76:
                    57:2e:4b:6c:85:f1:68:da:b3:ba:8f:53:17:d3:7b:
                    09:80:83:cf:fb:54:30:e5:1a:b8:18:96:5c:2c:2d:
                    11:24:d6:23:76:7d:85:11:65:b6:1d:b2:d0:6e:ee:
                    0b:17:fb:f8:ee:ab:4d:43:b8:a9:63:f7:74:af:a8:
                    19:b0:c9:4a:a4:14:4f:72:8f:e0:1d:57:af:0e:95:
                    1d:e9:11:72:80:e5:cd:3b:cb:f8:97:17:14:7a:b5:
                    c2:c5:cf:91:10:03:36:f8:f4:b2:bf:bc:32:08:e5:
                    51:69:2b:ae:b8:21:42:3a:4f:48:59:73:fc:0b:1d:
                    0b:08:f0:da:1f:3b:2c:63:c4:aa:bb:13:e1:7e:a8:
                    be:e4:33:6a:5b:54:aa:25:94:93:48:29:75:66:23:
                    e9:81:12:59:f1:e0:d0:6a:6f:e1:2d:83:39:84:30:
                    d2:a1:bc:a5:9f:2c:d9:82:92:a8:27:b2:25:bb:62:
                    23:ca:ab:f8:b9:16:b5:1d:27:d9:1d:86:0a:28:a5:
                    57:fe:da:bc:3c:d6:5b:5c:4a:06:76:c2:f9:d6:73:
                    5c:ea:48:9b:5f:eb:3b:bf:1c:6b:35:97:04:a6:a6:
                    6e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BE:95:17:52:53:15:70:53:44:EF:B0:53:F6:91:FF:09:E2:14:D0
            X509v3 Authority Key Identifier:
                keyid:C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c2:0b:38:e3:19:73:da:87:f9:61:fe:44:79:a7:40:2d:a5:
         e1:6d:82:9d:79:f3:a8:1a:0a:c9:8c:44:34:3a:83:94:3a:b7:
         48:fb:1f:e7:9d:45:38:19:15:74:46:a7:52:28:ab:31:04:63:
         f8:3c:6f:c0:30:55:70:ac:3d:d1:52:7f:ed:35:e9:52:13:66:
         ab:80:72:cd:6a:eb:38:31:b9:b5:21:1b:94:71:4c:45:11:3c:
         d0:cf:24:67:17:c4:42:9f:3a:21:75:3f:07:ac:7b:48:85:12:
         e5:09:91:f0:b3:c9:91:32:63:18:de:1a:1e:e5:9f:8d:a3:82:
         ec:85:d4:5e:06:3e:5e:87:a7:57:f4:64:8e:47:50:e9:6e:24:
         11:16:e7:4c:59:2b:e1:92:ad:79:91:6d:4c:d6:6d:b6:77:23:
         18:ae:eb:96:a5:2a:a4:fa:53:d1:7a:da:f6:59:f4:70:78:4d:
         fa:6f:24:25:2d:cb:7a:88:42:bb:6e:48:ec:2b:de:64:ad:e4:
         5e:43:3b:72:29:bb:d3:fd:c5:88:c7:11:94:4c:98:44:15:d4:
         9b:4f:2c:54:80:25:b7:2b:2b:7c:68:ee:ce:d8:a5:0e:e1:74:
         9f:8a:5d:b3:26:b2:da:a2:c4:1a:00:77:2a:63:fb:34:1d:5a:
         94:be:c5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:25:12 2025 by rpki-client