Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
File:                     6e5l7GbZD_j_-NFwcyBXdALoXMc.mft (raw, json)
Hash identifier:          yVDtWESQqHf4e1nJMAzq8IIhCmt3Aj0Wf0Z9G2aALuU=
Subject key identifier:   1C:C9:1A:CC:DA:30:75:03:DB:2F:30:E0:EE:5E:9F:19:E6:D6:D3:F2
Authority key identifier: E9:EE:65:EC:66:D9:0F:F8:FF:F8:D1:70:73:20:57:74:02:E8:5C:C7
Certificate issuer:       /CN=e9ee65ec66d90ff8fff8d1707320577402e85cc7
Certificate serial:       0198D5BBED85112A09853C34A6091757B9DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
Manifest number:          1044
Signing time:             Sat 23 Aug 2025 07:01:59 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:59 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:59 +0000
Files and hashes:         1: 49q3DDmrg6cVtppsLABS81MGkqg.roa (hash: Y49UGOvEecC7Z5Ts0nifT62msA+Ws1fglGSRVZSw/Hs=)
                          2: 6e5l7GbZD_j_-NFwcyBXdALoXMc.crl (hash: Ea59Uwox3a5BMXlLd+n309qaXkKzL+yncklKyUqQdWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:ed:85:11:2a:09:85:3c:34:a6:09:17:57:b9:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9ee65ec66d90ff8fff8d1707320577402e85cc7
        Validity
            Not Before: Aug 23 07:01:59 2025 GMT
            Not After : Aug 24 07:01:59 2025 GMT
        Subject: CN=1cc91accda307503db2f30e0ee5e9f19e6d6d3f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:26:22:9f:6b:82:ba:57:18:37:ab:56:2e:95:
                    9b:c5:1d:3c:67:2e:e4:38:42:d3:8b:c1:86:2b:ad:
                    dd:71:5e:26:37:d6:2e:3f:1f:c8:e7:d9:9f:7f:c8:
                    3b:e0:32:18:02:9d:3b:fc:78:e4:17:af:56:8b:ef:
                    26:6f:49:23:d0:24:d4:1a:b3:3d:28:a3:ba:f2:43:
                    45:f9:f7:08:f4:77:2a:84:f2:1a:7b:98:1c:21:81:
                    b5:c8:04:c8:a5:28:99:cb:d8:cf:f8:11:01:2d:53:
                    e4:14:5a:a9:1e:b7:bf:c5:b7:85:57:93:ed:57:4f:
                    54:58:d6:70:ea:80:cd:99:3a:e8:93:09:2a:7b:3f:
                    f8:46:1d:7f:48:49:4a:cd:06:a8:65:c6:d8:d1:58:
                    0d:66:81:c7:cc:aa:df:bc:94:5e:63:ab:9f:c2:4c:
                    04:5f:31:06:ec:bb:e9:25:2f:21:61:a2:c2:73:82:
                    0d:92:3e:71:e1:45:88:b0:4d:ca:ed:a9:f1:e0:c9:
                    64:a9:7a:dd:ce:ae:db:47:fa:06:a0:4c:77:e2:66:
                    48:61:3d:62:4d:a9:98:43:51:d7:f2:f3:60:50:db:
                    2e:21:12:e4:80:2d:86:0d:64:07:93:94:53:86:ef:
                    14:b3:e3:2b:81:a4:26:4c:f4:eb:51:06:56:7f:c5:
                    88:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C9:1A:CC:DA:30:75:03:DB:2F:30:E0:EE:5E:9F:19:E6:D6:D3:F2
            X509v3 Authority Key Identifier:
                keyid:E9:EE:65:EC:66:D9:0F:F8:FF:F8:D1:70:73:20:57:74:02:E8:5C:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:3d:cb:f7:63:c7:b3:65:8a:39:a6:93:b9:7e:f6:a9:2c:07:
         1f:08:f7:37:fd:94:e4:e1:30:63:cf:24:7d:dd:78:f5:ee:29:
         35:83:4b:2b:de:2a:c1:4d:e0:e8:58:ce:9e:27:a3:3e:85:a3:
         d3:81:6f:1c:58:a8:32:0d:d2:37:18:9d:4f:f7:d0:d5:64:85:
         24:2c:79:e3:50:89:82:90:27:b2:7c:0e:96:16:58:f6:e8:f9:
         78:36:8a:7a:ee:4e:8a:4f:ab:0e:05:2b:f4:da:f4:7f:a9:38:
         43:8a:a1:92:e9:cb:c4:8a:2f:8c:dd:6e:6f:91:34:dd:28:13:
         87:5b:be:b4:c5:7b:20:85:55:e4:1e:6a:d5:24:3c:68:eb:15:
         f1:a7:88:95:1d:99:1d:d8:2e:ad:f7:9d:13:96:4c:9a:96:cd:
         31:10:14:25:77:3b:b2:51:e1:17:57:a1:66:b6:ac:4f:6a:e0:
         bf:dd:de:f9:a1:5c:65:66:2c:8a:57:e7:7e:84:45:d9:07:6d:
         44:ee:95:c1:60:33:3a:42:2b:de:56:8d:4e:3a:28:46:7a:ea:
         fd:06:9f:6f:e2:81:b9:34:6b:6e:1f:97:26:94:60:68:96:40:
         32:d6:27:f8:a4:2f:2d:fe:fb:32:21:d9:70:83:f4:54:c8:76:
         16:79:bf:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:32 2025 by rpki-client