Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
File:                     6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft (raw, json)
Hash identifier:          V9MlHzcV2GFs5Jwc6GLTmeIdFoo2MT0QVSjaDJ/jlFs=
Subject key identifier:   CB:FA:C3:E3:4E:FA:CB:5C:AA:C0:D3:CC:BE:0A:73:0B:2C:65:33:53
Authority key identifier: E8:4B:EF:96:61:6B:65:2D:C3:64:18:47:05:55:FE:8D:59:22:18:88
Certificate issuer:       /CN=e84bef96616b652dc36418470555fe8d59221888
Certificate serial:       0198D4743C5FB00A5D58C4C6A58E3462DF96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
Manifest number:          0128
Signing time:             Sat 23 Aug 2025 01:04:03 +0000
Manifest this update:     Sat 23 Aug 2025 01:04:03 +0000
Manifest next update:     Sun 24 Aug 2025 01:04:03 +0000
Files and hashes:         1: 4Gofx77thE1H70ueVHLD9j47btM.roa (hash: 9EbLzC5Y1+8DffIsLyCHPxc8JLdUo3GxnL9ubC3vyyI=)
                          2: 6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl (hash: L+U4vl+o/uvMQN4hhmuVrViSGTdfxVKb44TxKb5wtJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:3c:5f:b0:0a:5d:58:c4:c6:a5:8e:34:62:df:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84bef96616b652dc36418470555fe8d59221888
        Validity
            Not Before: Aug 23 01:04:03 2025 GMT
            Not After : Aug 24 01:04:03 2025 GMT
        Subject: CN=cbfac3e34efacb5caac0d3ccbe0a730b2c653353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c4:3f:b7:a3:b0:1b:50:4d:b3:41:0f:ed:82:
                    ac:a1:36:dd:59:a0:90:96:3d:c4:fd:77:3f:d4:f9:
                    7f:ae:7a:27:62:ec:b2:a3:9c:4a:2f:79:39:4b:54:
                    be:7b:48:d5:32:28:2a:99:47:1f:53:58:2b:07:ae:
                    17:d8:f0:d6:62:09:5c:e8:72:fd:4c:91:ec:b0:b9:
                    9e:23:94:1f:51:87:45:24:4f:56:e5:50:6a:a0:71:
                    dd:e0:84:67:f0:5d:a0:25:30:de:87:85:8e:33:ce:
                    ea:48:19:87:00:ab:97:3e:21:40:c3:b6:81:be:98:
                    5f:ce:31:09:12:11:34:85:59:1d:21:5e:fe:e0:2d:
                    01:7c:b1:45:be:30:8a:49:82:e7:b1:89:68:92:4d:
                    3e:c3:38:a0:f7:eb:40:78:25:fb:ef:e7:17:bc:d3:
                    8a:93:9f:fd:a6:23:5c:40:5f:1a:a4:e5:ca:db:03:
                    63:12:6e:42:d0:f0:1c:d9:37:f4:6f:8d:88:b9:a5:
                    67:16:cf:26:31:87:8b:fd:99:a0:27:f5:93:b2:6a:
                    34:22:6a:73:9e:a2:b8:a2:1b:98:fe:83:97:32:84:
                    64:77:54:eb:42:1a:e8:48:31:95:3d:62:c7:21:2e:
                    b9:fc:37:df:65:33:eb:3d:eb:98:b8:ca:df:23:f2:
                    c7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FA:C3:E3:4E:FA:CB:5C:AA:C0:D3:CC:BE:0A:73:0B:2C:65:33:53
            X509v3 Authority Key Identifier:
                keyid:E8:4B:EF:96:61:6B:65:2D:C3:64:18:47:05:55:FE:8D:59:22:18:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:82:82:e5:8a:7b:bb:45:27:08:67:6e:b7:b8:43:47:3b:24:
         b6:64:0b:74:c0:3f:08:f1:06:0b:3f:bf:35:53:8b:81:f0:31:
         d9:d4:43:82:8e:86:63:66:1b:a6:51:c7:32:f9:07:1e:db:ca:
         82:8f:f9:09:03:3c:d0:9b:58:e4:b2:51:15:ec:28:75:3a:53:
         6b:5f:e6:5c:8f:00:81:6b:bf:67:b0:34:f9:c9:99:d6:7a:48:
         36:33:38:97:52:e8:da:05:02:59:3d:82:91:e7:2c:ee:9d:e4:
         63:9e:09:4d:61:5c:c8:1d:73:fe:ee:7f:d6:f8:a2:55:07:b2:
         fd:e4:5f:67:36:6f:07:4c:46:cb:47:df:5c:5f:2e:46:43:d9:
         84:6b:e3:6e:05:58:d5:23:1a:d3:b4:48:3f:57:3a:27:12:02:
         38:5b:b2:4e:0d:be:1e:40:09:64:c4:df:40:6f:f6:83:55:dc:
         87:3b:bd:ff:f9:b0:e1:f9:97:12:c3:1d:b7:ce:ff:1b:95:f0:
         57:5f:15:6a:26:04:82:56:f7:5f:cc:07:26:72:bd:ed:fe:93:
         83:f9:5a:d4:30:06:e5:1e:50:b6:45:63:56:2f:0c:55:b5:5e:
         12:7c:89:b2:4b:25:64:02:0c:bb:61:a1:8d:31:d2:a6:a2:51:
         1d:91:36:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdDxfsApdWMTGpY40Yt+WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGJlZjk2NjE2YjY1MmRjMzY0MTg0NzA1NTVmZThkNTky
MjE4ODgwHhcNMjUwODIzMDEwNDAzWhcNMjUwODI0MDEwNDAzWjAzMTEwLwYDVQQD
EyhjYmZhYzNlMzRlZmFjYjVjYWFjMGQzY2NiZTBhNzMwYjJjNjUzMzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8Q/t6OwG1BNs0EP7YKsoTbdWaCQ
lj3E/Xc/1Pl/rnonYuyyo5xKL3k5S1S+e0jVMigqmUcfU1grB64X2PDWYglc6HL9
TJHssLmeI5QfUYdFJE9W5VBqoHHd4IRn8F2gJTDeh4WOM87qSBmHAKuXPiFAw7aB
vphfzjEJEhE0hVkdIV7+4C0BfLFFvjCKSYLnsYlokk0+wzig9+tAeCX77+cXvNOK
k5/9piNcQF8apOXK2wNjEm5C0PAc2Tf0b42IuaVnFs8mMYeL/ZmgJ/WTsmo0Impz
nqK4ohuY/oOXMoRkd1TrQhroSDGVPWLHIS65/DffZTPrPeuYuMrfI/LHlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMv6w+NO+stcqsDTzL4KcwssZTNTMB8GA1UdIwQY
MBaAFOhL75Zha2Utw2QYRwVV/o1ZIhiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkV2dmxtRnJaUzNEWkJoSEJWWC1qVmtpR0lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jYzRkMDYtY2IxYy00M2UxLWFiNjgt
MDQ2ZjY4ZDcyMzI5LzEvNkV2dmxtRnJaUzNEWkJoSEJWWC1qVmtpR0lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9jYzRkMDYtY2IxYy00M2UxLWFiNjgtMDQ2ZjY4ZDcyMzI5
LzEvNkV2dmxtRnJaUzNEWkJoSEJWWC1qVmtpR0lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU4KC5Yp7
u0UnCGdut7hDRzsktmQLdMA/CPEGCz+/NVOLgfAx2dRDgo6GY2YbplHHMvkHHtvK
go/5CQM80JtY5LJRFewodTpTa1/mXI8AgWu/Z7A0+cmZ1npINjM4l1Lo2gUCWT2C
kecs7p3kY54JTWFcyB1z/u5/1viiVQey/eRfZzZvB0xGy0ffXF8uRkPZhGvjbgVY
1SMa07RIP1c6JxICOFuyTg2+HkAJZMTfQG/2g1Xchzu9//mw4fmXEsMdt87/G5Xw
V18VaiYEglb3X8wHJnK97f6Tg/la1DAG5R5QtkVjVi8MVbVeEnyJskslZAIMu2Gh
jTHSpqJRHZE23w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:58 2025 by rpki-client