Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
File:                     6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft (raw, json)
Hash identifier:          fRqbzjsUrQoaolhFDgb0F0OiyOu4LIuBJ+3Ooo6BFAA=
Subject key identifier:   F0:53:DC:5A:25:68:09:7A:58:4D:F5:63:DA:4D:BE:E6:A8:AF:0C:D6
Authority key identifier: E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41
Certificate issuer:       /CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
Certificate serial:       0198D65FB6C2DA5CBDC24AD098A02AD452A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
Manifest number:          1446
Signing time:             Sat 23 Aug 2025 10:00:53 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:53 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:53 +0000
Files and hashes:         1: 67cURHvE8N468SNY-596hMGCZrE.roa (hash: FN6Q1cZazUZE1w3lj4UC84iZc47H5rmnpO3kr+z0CXA=)
                          2: 6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl (hash: ykeoXkzLyYwMnQovugJ+t9M06VBj6473RjVUh7YtRv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:b6:c2:da:5c:bd:c2:4a:d0:98:a0:2a:d4:52:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
        Validity
            Not Before: Aug 23 10:00:53 2025 GMT
            Not After : Aug 24 10:00:53 2025 GMT
        Subject: CN=f053dc5a2568097a584df563da4dbee6a8af0cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e9:98:92:bc:dd:d3:3c:a5:8c:3c:ef:8a:e0:
                    c8:3e:50:67:d6:13:c9:e0:f0:f7:af:c7:b7:34:d4:
                    25:cc:cb:50:86:71:0a:d7:7f:91:c5:07:98:50:cd:
                    4d:8a:dd:86:6e:e0:5e:06:fd:d2:7e:f6:0d:29:9b:
                    23:bd:50:b9:92:0d:d7:bb:ba:59:c4:3f:c3:cf:87:
                    63:09:66:5a:ff:2e:de:72:1e:6a:5f:cb:01:c3:08:
                    db:7e:aa:53:09:d5:4e:81:d6:a0:22:9d:7e:b1:b1:
                    1f:75:fe:f7:81:9e:ac:2e:fc:a0:73:1b:4e:02:c6:
                    90:fa:6c:5c:8d:9d:5f:bc:bd:9b:f6:bf:e4:58:89:
                    7a:7e:f3:42:bd:dc:0d:58:66:39:be:8a:7c:32:27:
                    8b:a1:48:65:98:1a:38:57:e8:ad:cb:85:31:bc:ff:
                    31:89:b8:56:18:de:f2:30:5e:16:5f:80:6a:ea:ca:
                    e4:f1:50:e2:cc:3e:fc:2f:7b:a6:0a:bf:f8:80:a7:
                    74:64:8a:08:54:8c:ce:ba:90:49:69:b1:ed:7a:6e:
                    5f:07:e1:de:f1:1c:4a:dd:8f:8a:2c:58:1a:8f:44:
                    19:d1:c8:53:be:4d:77:16:12:ef:3e:43:84:b7:ee:
                    2c:18:99:b3:03:25:58:30:ea:5d:3d:ff:80:e8:6b:
                    9c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:53:DC:5A:25:68:09:7A:58:4D:F5:63:DA:4D:BE:E6:A8:AF:0C:D6
            X509v3 Authority Key Identifier:
                keyid:E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:71:53:35:3e:85:91:93:45:b7:9f:05:db:11:5c:b7:65:c9:
         1e:ec:ee:bb:13:44:9d:d1:f9:58:7d:49:1f:86:99:a0:87:13:
         2e:b1:15:62:92:44:61:00:94:09:16:64:52:07:00:b3:cd:af:
         8d:ed:a7:9c:ff:32:0a:49:31:d5:41:ac:69:1d:65:ef:cc:f8:
         9b:80:1c:a4:6e:e1:0c:33:c8:7f:1b:a4:73:a6:07:02:78:ea:
         2d:fb:37:be:71:90:06:23:b3:2e:94:eb:3d:0c:db:4c:c4:cd:
         dc:56:c0:1f:7e:7e:1e:96:6b:7b:d1:de:30:c7:57:8b:8f:b7:
         57:c4:f7:0a:b3:b5:15:23:b2:f1:70:b3:ec:a6:f5:62:9f:d5:
         7f:8f:d3:85:33:71:b8:3a:46:ec:36:32:42:fc:23:d0:c5:db:
         19:75:3f:e7:f4:f7:61:88:7c:c9:bb:b3:f8:eb:f0:fa:cb:2a:
         32:6e:11:8e:85:22:cd:df:03:de:06:d1:c3:4b:f3:c4:8e:dc:
         ac:e8:31:00:ce:29:b0:cc:36:49:1a:cc:9d:05:c8:e2:79:85:
         08:2e:b0:23:90:bb:4a:6a:9d:5f:e0:a9:67:24:5e:a6:9e:40:
         5f:cf:44:72:1d:6f:61:09:b1:f7:bd:b6:0e:18:f4:81:37:51:
         86:e9:61:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:43:40 2025 by rpki-client