Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
File:                     b_xyU8DaFbVuAJVzGhDCu61sEX4.mft (raw, json)
Hash identifier:          rl+kbX3udLztZfHxJdRSk2fjBdliUsejc5JnefkdC9I=
Subject key identifier:   AE:2E:D1:EF:BC:7A:28:DE:D9:3E:C0:AB:C3:93:20:BA:3B:B9:DB:EC
Authority key identifier: 6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E
Certificate issuer:       /CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
Certificate serial:       0198D5835DCC1965DBCF4745260F486AE404
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
Manifest number:          04A0
Signing time:             Sat 23 Aug 2025 06:00:12 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:12 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:12 +0000
Files and hashes:         1: ViU3nx0KMvyzkw-cFoaI3YiJf24.roa (hash: 2MVqhG3jfXK0CnKSuEcQLvgpRXs6MX1MKLdphJMDw6E=)
                          2: b_xyU8DaFbVuAJVzGhDCu61sEX4.crl (hash: uftOImDhy6/kWZwFa8hY+PaMraNBSMkEX7HNRRXpB7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:5d:cc:19:65:db:cf:47:45:26:0f:48:6a:e4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
        Validity
            Not Before: Aug 23 06:00:12 2025 GMT
            Not After : Aug 24 06:00:12 2025 GMT
        Subject: CN=ae2ed1efbc7a28ded93ec0abc39320ba3bb9dbec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6a:33:18:e2:f8:18:d0:2a:84:1c:12:5f:6e:
                    f2:6c:8a:92:bb:b5:1e:70:2a:66:11:8e:f6:f6:32:
                    83:2a:ee:2b:f6:37:06:ad:13:28:9e:3a:86:d4:3f:
                    13:f5:98:4c:8a:11:a1:f9:12:b7:c8:59:fc:2c:fa:
                    13:18:bf:27:e7:a8:8b:ab:c0:72:23:27:09:e2:6e:
                    27:bf:2b:cd:fb:28:09:3b:b5:e0:63:6c:0c:9c:6d:
                    c3:94:9e:87:a7:2a:0b:04:31:80:26:26:54:40:e2:
                    2f:77:2f:0d:c1:87:74:bc:49:b6:49:6b:5e:bc:c4:
                    4c:e6:a0:86:47:61:b8:d0:bc:85:b1:a8:2a:88:8c:
                    98:eb:83:cf:56:0d:c2:8b:46:b0:87:fd:59:61:e7:
                    cc:8b:3e:74:a5:37:3d:e7:1e:6c:3d:c4:5d:be:7a:
                    4a:5a:c3:8a:7c:42:99:b8:3f:1c:d4:23:71:a4:94:
                    f2:05:0f:2b:de:3f:ca:e4:87:3c:3b:12:04:9b:08:
                    ef:f0:19:fa:e4:d1:e3:01:e8:0f:d6:93:c2:23:69:
                    27:e2:57:b9:2b:c4:ac:36:1b:14:15:4e:76:2e:b5:
                    f3:ee:31:cc:77:4e:6c:2a:8c:7b:48:f5:4b:8b:61:
                    b6:ce:52:dc:c6:94:f9:dd:02:d2:03:e6:8d:1a:5e:
                    b5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2E:D1:EF:BC:7A:28:DE:D9:3E:C0:AB:C3:93:20:BA:3B:B9:DB:EC
            X509v3 Authority Key Identifier:
                keyid:6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:90:92:53:25:96:92:cb:c6:04:4a:2d:9d:b4:0c:61:02:a9:
         92:38:1d:3c:27:9c:82:ca:3c:69:6b:7b:80:15:f7:7c:f4:df:
         67:2e:da:de:3e:d0:ee:2f:98:81:b8:99:5f:7c:f6:7f:86:54:
         8e:f1:1d:84:0c:71:1e:d6:b5:b1:2d:3c:23:75:61:34:62:f0:
         57:0d:f5:89:ba:d6:e2:54:7e:66:10:22:5f:8a:db:e1:8b:5f:
         60:68:e4:9e:5f:3d:f2:81:6a:7f:fa:c6:6e:81:1e:40:25:60:
         31:60:60:97:97:c4:94:3c:67:2e:b3:0f:bc:86:d8:12:58:12:
         54:c5:69:60:d0:4f:8c:c2:13:d4:02:00:39:6f:c8:71:b4:da:
         5a:3a:37:1e:82:eb:c5:07:fa:ab:60:a0:d1:0c:7e:30:c1:99:
         39:fb:d3:c5:05:07:b0:6a:f5:df:ef:d8:cf:f1:e7:c5:22:39:
         ea:f5:56:e4:b6:3b:f6:be:cc:3c:40:1c:0b:81:2d:6c:d9:86:
         8d:d8:0a:a6:d4:df:d8:94:31:65:64:df:0c:5a:67:d2:ea:b7:
         72:53:db:b0:34:2d:f1:57:9c:08:c6:57:1b:fe:27:6b:29:60:
         88:b0:b7:e8:24:4d:29:05:e6:57:e5:b3:15:f6:44:ac:67:60:
         4d:7e:f2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:30 2025 by rpki-client