Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
File:                     X6e2rvC9JBEwTk88aVfILrJWfNM.mft (raw, json)
Hash identifier:          1+5a5CkVCfzqWgaPgV+daBD+s1xo3Ua6GonAOMCfyKw=
Subject key identifier:   9C:78:44:36:F3:FF:82:5D:1D:E7:98:4D:3D:02:C0:7B:36:BB:D2:D5
Authority key identifier: 5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3
Certificate issuer:       /CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3
Certificate serial:       0198D4732AFD178A66C521271F7D0A0D3332
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
Manifest number:          0A6F
Signing time:             Sat 23 Aug 2025 01:02:54 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:54 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:54 +0000
Files and hashes:         1: X6e2rvC9JBEwTk88aVfILrJWfNM.crl (hash: F0wWWTLD4cKkIoubFK5VH9wDRU6XR9SXn9sYjqq2plI=)
                          2: zbAgIhB9UBueLLgs2g8PDDqXLXM.roa (hash: Zu8ptrGKP7ppJOnD5tDff+kFIkcbbAr6zSQsVh6Ogok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:2a:fd:17:8a:66:c5:21:27:1f:7d:0a:0d:33:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3
        Validity
            Not Before: Aug 23 01:02:54 2025 GMT
            Not After : Aug 24 01:02:54 2025 GMT
        Subject: CN=9c784436f3ff825d1de7984d3d02c07b36bbd2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3a:d8:66:2b:73:3e:e3:e2:44:a6:1d:27:66:
                    0f:cc:e5:ec:5e:c8:4e:dc:cc:70:76:3e:f7:a2:0c:
                    1f:df:b4:aa:1e:02:34:2d:b9:09:7c:8f:c7:f7:89:
                    3d:6f:9d:c5:a1:41:60:c8:56:45:e6:2d:44:94:9b:
                    b5:bc:ad:71:2b:c0:47:f9:a0:6e:4d:c9:5f:e3:8f:
                    37:aa:36:c8:ef:05:7a:fc:0c:d1:4a:37:ad:2a:ff:
                    fe:58:99:d7:7d:a2:15:ab:8d:53:98:88:54:22:ff:
                    06:d1:59:f5:8c:4e:84:63:d0:72:ac:db:1d:24:38:
                    39:c7:e5:1d:7c:f2:9b:d3:2c:3e:fb:3a:27:76:cb:
                    a6:28:a7:96:19:c3:3a:7c:2a:f8:3e:ef:75:c4:22:
                    7d:d7:34:d4:a6:30:61:d6:b8:41:81:e1:4e:6b:fe:
                    d4:61:3b:8f:9f:a1:7a:69:47:e3:46:f4:69:66:bc:
                    e2:46:40:0e:8e:14:45:d6:99:2b:3c:94:a0:6a:1e:
                    59:86:18:94:ef:66:95:a2:6d:1b:2b:81:24:58:a9:
                    6e:c3:18:1c:10:4e:fa:d8:52:ea:05:4a:64:3b:6d:
                    ec:cc:b4:f8:6f:82:e0:db:1c:94:c7:a7:62:2f:c6:
                    d3:0c:34:0d:db:ac:39:78:59:4d:87:67:05:d0:be:
                    b4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:78:44:36:F3:FF:82:5D:1D:E7:98:4D:3D:02:C0:7B:36:BB:D2:D5
            X509v3 Authority Key Identifier:
                keyid:5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:00:02:68:c5:50:95:44:9b:b9:e3:0a:5f:57:df:fe:a1:81:
         52:d6:32:34:52:24:3e:e3:2c:85:f3:69:92:fd:32:77:58:c9:
         9f:55:46:54:f4:3a:36:07:31:89:2f:6b:bb:6b:46:20:5b:5b:
         1f:fd:8f:49:09:6e:c9:ec:4b:51:80:46:1e:6f:7f:4c:99:89:
         07:da:e9:0a:16:26:9c:a3:2d:33:ef:91:b8:46:ca:d8:5b:9b:
         cb:7b:04:32:1e:c3:7d:3f:e8:c1:53:7b:b4:8c:ec:e0:cf:b0:
         f1:e7:28:99:0c:cf:08:b3:e6:ba:c1:0a:d8:8f:78:43:52:3f:
         ce:75:4b:0f:44:46:4e:30:39:13:76:da:ca:35:ae:c5:47:04:
         3e:43:9a:33:ab:aa:1c:e1:6e:fd:75:50:f9:85:0c:7d:54:4d:
         c2:ea:f7:7b:88:cf:e1:57:2d:ea:09:00:23:b8:31:f2:37:9a:
         f0:81:9e:92:77:0f:be:f8:e4:28:3e:d7:58:d6:8c:1f:da:e8:
         56:a2:46:25:74:13:91:eb:53:b5:bf:cf:d5:ad:88:57:94:06:
         2d:53:73:1b:ed:ce:d8:ef:46:f1:35:d3:1f:7f:8f:6b:8e:db:
         f5:16:60:fe:07:3e:83:f8:09:f3:5f:ac:b9:88:d4:83:89:1a:
         69:d5:2d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:32 2025 by rpki-client