Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
File:                     6vauX7W-PpqblzGcevhQK76JOjc.mft (raw, json)
Hash identifier:          mh6WQhYM8zluyu3TFi57Aknc8CEJKZXtmQWbuih38j0=
Subject key identifier:   4A:3A:6F:DA:AB:85:C5:E8:81:0E:72:0D:23:D9:D1:71:DA:09:EC:6A
Authority key identifier: EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37
Certificate issuer:       /CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
Certificate serial:       0198D51562BCC69E6CBEEE519F3486181905
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
Manifest number:          15E9
Signing time:             Sat 23 Aug 2025 04:00:05 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:05 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:05 +0000
Files and hashes:         1: 6vauX7W-PpqblzGcevhQK76JOjc.crl (hash: cR2ovpdB3mvPjx+QsasfE0YgMpVRs2KbEm+lFGI8T/c=)
                          2: Ahvmv48ngf-KjVDLWWBDTBDASd0.roa (hash: 7ZyR7Sl5BjMwCkDy0XgoHIL8hy/aGuAql4BiOWVa8/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:62:bc:c6:9e:6c:be:ee:51:9f:34:86:18:19:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
        Validity
            Not Before: Aug 23 04:00:05 2025 GMT
            Not After : Aug 24 04:00:05 2025 GMT
        Subject: CN=4a3a6fdaab85c5e8810e720d23d9d171da09ec6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b9:e2:17:a0:5a:5e:bf:80:ec:3d:fd:5e:d2:
                    c2:c2:ce:b3:9c:34:b4:53:18:ea:4f:31:3d:f8:fc:
                    a2:34:89:05:7a:cb:c4:4e:39:ff:d6:35:c0:8c:4a:
                    eb:28:17:95:0a:f8:72:ef:7c:a1:13:12:94:02:6d:
                    a2:1b:a9:a4:9d:ef:88:e6:ea:f6:27:9c:54:13:29:
                    88:f7:c0:88:a1:38:2b:27:f9:99:74:89:cb:60:07:
                    8f:26:0a:75:6f:1f:f0:59:27:b1:86:04:a6:01:bb:
                    ae:0f:40:82:24:8c:85:cc:fe:ae:52:bd:35:75:02:
                    2b:09:2f:8c:57:a7:89:b3:60:5a:5b:ae:ea:ac:b5:
                    1a:90:30:57:fa:ea:4b:08:87:a0:a4:57:96:4a:d2:
                    a9:13:20:b3:fe:c9:3c:65:6e:6f:45:33:3d:3c:44:
                    d4:65:27:20:4e:c9:66:2e:99:d7:af:ea:81:7c:09:
                    18:26:12:0e:a0:d6:2c:cb:16:12:a3:e5:40:40:4c:
                    87:93:bb:4d:08:da:a8:b1:93:30:7b:fd:29:a5:c4:
                    7b:c0:85:91:b5:30:0f:97:82:0a:74:3e:88:fb:d6:
                    78:3f:16:7f:96:33:5e:a1:58:dc:fd:4e:a7:a5:ab:
                    a4:61:a5:ce:10:b9:ff:cb:3a:1c:39:a0:18:9c:59:
                    f0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3A:6F:DA:AB:85:C5:E8:81:0E:72:0D:23:D9:D1:71:DA:09:EC:6A
            X509v3 Authority Key Identifier:
                keyid:EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:fe:e2:13:f4:00:56:f6:1b:11:75:5b:29:d4:6a:8f:ca:4d:
         59:d1:a9:e5:93:d8:9b:87:2b:94:3b:eb:59:14:07:60:7f:ba:
         dd:ad:cf:a9:05:0c:8d:c7:9b:87:2f:8a:05:d1:3f:ed:5b:d0:
         9c:11:40:48:d0:b0:4a:d5:40:1a:9e:e5:b4:05:75:b7:08:48:
         b6:c8:76:d9:a8:bd:64:96:4f:05:65:03:05:9c:72:21:6e:12:
         66:f2:ae:ad:95:c1:a1:74:e9:ec:11:be:a1:3a:56:ee:11:ff:
         ff:5a:2b:0b:a0:32:1e:f2:99:15:ac:62:74:aa:8b:d8:cf:d9:
         2a:51:7d:6f:e9:c0:ab:5a:b6:c4:d7:95:e2:62:96:a4:2f:70:
         32:56:18:93:04:97:25:45:6a:21:8b:7d:73:8c:1e:6d:e5:31:
         44:44:97:1c:1c:8f:8d:92:86:9e:96:3e:c7:77:9a:4b:43:8b:
         72:45:19:96:c3:33:f9:8b:d3:08:75:ff:d3:50:88:b6:7a:64:
         10:5f:36:5a:40:b3:cb:f5:20:5b:5b:58:27:2b:42:0e:18:3a:
         4b:16:a2:00:f5:97:9b:d4:84:42:1c:10:0b:a3:27:bc:21:49:
         ea:b0:24:6b:f5:de:ae:90:0c:da:cd:a1:1f:3d:5b:da:fb:c3:
         e5:20:eb:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFWK8xp5svu5RnzSGGBkFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhZjZhZTVmYjViZTNlOWE5Yjk3MzE5YzdhZjg1MDJiYmU4
OTNhMzcwHhcNMjUwODIzMDQwMDA1WhcNMjUwODI0MDQwMDA1WjAzMTEwLwYDVQQD
Eyg0YTNhNmZkYWFiODVjNWU4ODEwZTcyMGQyM2Q5ZDE3MWRhMDllYzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobniF6BaXr+A7D39XtLCws6znDS0
UxjqTzE9+PyiNIkFesvETjn/1jXAjErrKBeVCvhy73yhExKUAm2iG6mkne+I5ur2
J5xUEymI98CIoTgrJ/mZdInLYAePJgp1bx/wWSexhgSmAbuuD0CCJIyFzP6uUr01
dQIrCS+MV6eJs2BaW67qrLUakDBX+upLCIegpFeWStKpEyCz/sk8ZW5vRTM9PETU
ZScgTslmLpnXr+qBfAkYJhIOoNYsyxYSo+VAQEyHk7tNCNqosZMwe/0ppcR7wIWR
tTAPl4IKdD6I+9Z4PxZ/ljNeoVjc/U6npaukYaXOELn/yzocOaAYnFnw7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEo6b9qrhcXogQ5yDSPZ0XHaCexqMB8GA1UdIwQY
MBaAFOr2rl+1vj6am5cxnHr4UCu+iTo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnZhdVg3Vy1QcHFibHpHY2V2aFFLNzZKT2pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9jN2RiZGYtMWUyYy00ZmJhLTg0MTEt
YzY3ZDcxM2NkYWJjLzEvNnZhdVg3Vy1QcHFibHpHY2V2aFFLNzZKT2pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9jN2RiZGYtMWUyYy00ZmJhLTg0MTEtYzY3ZDcxM2NkYWJj
LzEvNnZhdVg3Vy1QcHFibHpHY2V2aFFLNzZKT2pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQf7iE/QA
VvYbEXVbKdRqj8pNWdGp5ZPYm4crlDvrWRQHYH+63a3PqQUMjcebhy+KBdE/7VvQ
nBFASNCwStVAGp7ltAV1twhItsh22ai9ZJZPBWUDBZxyIW4SZvKurZXBoXTp7BG+
oTpW7hH//1orC6AyHvKZFaxidKqL2M/ZKlF9b+nAq1q2xNeV4mKWpC9wMlYYkwSX
JUVqIYt9c4webeUxRESXHByPjZKGnpY+x3eaS0OLckUZlsMz+YvTCHX/01CItnpk
EF82WkCzy/UgW1tYJytCDhg6SxaiAPWXm9SEQhwQC6MnvCFJ6rAka/XerpAM2s2h
Hz1b2vvD5SDr3A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:22 2025 by rpki-client