Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
File:                     6Y4gI4HByI2C87cPO-Booao3K50.mft (raw, json)
Hash identifier:          4qmAT1JfnFuRwDw74e6D6CWygxUOei4u098NCxLlPKA=
Subject key identifier:   DD:0F:80:78:94:4B:4C:C0:58:A6:14:55:CB:0F:D1:D0:33:3A:6A:88
Authority key identifier: E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
Certificate issuer:       /CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Certificate serial:       0198D54E3B179C20181B6FD113D3A3CE7B01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 05:02:10 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:10 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:10 +0000
Files and hashes:         1: 5EXO9UiepL6Zq1llBjLLIrL5oUg.roa (hash: f7qlXZI97BeR4x4m6/QuC0gLJcnSYhH/2MDokTxi6Pw=)
                          2: 6Y4gI4HByI2C87cPO-Booao3K50.crl (hash: e1s+ymerQghn545TOHL6lUxr8dzmoxeKTVdI+dtNZHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:3b:17:9c:20:18:1b:6f:d1:13:d3:a3:ce:7b:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
        Validity
            Not Before: Aug 23 05:02:10 2025 GMT
            Not After : Aug 24 05:02:10 2025 GMT
        Subject: CN=dd0f8078944b4cc058a61455cb0fd1d0333a6a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a8:37:18:fb:b0:fc:50:ef:1c:52:45:a9:f9:
                    bf:61:5e:dd:76:ce:0b:32:ca:47:fb:c3:d4:ea:4b:
                    83:b2:72:4a:e1:6f:6e:a0:0d:bc:d0:69:2c:95:2e:
                    d7:fe:34:03:ae:87:e1:18:c7:50:73:0f:50:a9:d7:
                    16:4a:99:87:cd:5a:37:3f:7e:00:c8:04:a4:64:05:
                    2b:d5:0f:3e:4f:76:f3:b5:45:09:03:96:bc:b2:e7:
                    c8:7c:63:40:03:eb:f4:9e:25:26:ba:38:ec:c8:9d:
                    6b:6a:fd:51:7b:9a:19:b9:d6:31:44:4e:75:51:b1:
                    60:8e:7c:90:d8:86:33:b5:20:eb:d0:fc:75:77:21:
                    36:72:82:f6:66:91:a7:07:c3:34:fe:66:3f:d7:e7:
                    52:ee:1d:a4:e1:4b:e9:2c:09:0e:41:1b:54:61:46:
                    49:a4:fb:b7:bd:2f:e0:0a:40:b3:a4:56:42:9c:1e:
                    03:3f:75:28:38:fc:c1:7f:fe:ac:2e:06:2a:07:85:
                    6f:43:a3:b5:1c:ae:0f:1d:92:b0:e5:7b:fb:02:00:
                    32:ca:8b:8b:5e:b9:b6:f6:8f:c2:44:73:45:3f:3f:
                    2e:8f:e0:2b:06:16:0a:0d:61:1e:ad:46:28:d3:da:
                    7d:bd:95:3c:86:88:74:17:f5:34:92:06:0b:29:b0:
                    f5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0F:80:78:94:4B:4C:C0:58:A6:14:55:CB:0F:D1:D0:33:3A:6A:88
            X509v3 Authority Key Identifier:
                keyid:E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:b1:83:30:b1:c9:e4:a3:75:ab:c6:d9:ac:43:40:54:8a:54:
         55:6a:18:12:ae:45:f8:f4:60:6b:ba:e6:32:e0:9c:86:65:d0:
         1c:ae:4b:24:10:8a:8a:f2:83:c7:f0:a0:c4:58:f3:47:90:52:
         0f:18:3f:b9:df:b6:46:48:1d:d7:12:df:28:92:62:c7:e7:aa:
         8e:90:28:27:81:0d:5f:12:81:ff:4c:ee:39:18:41:2d:61:00:
         5a:89:f7:63:e0:3b:4a:17:d0:26:a4:c2:df:35:14:59:47:9c:
         9c:ce:dc:bd:3e:24:65:f1:1f:aa:e1:b0:7b:34:b5:92:1a:40:
         49:18:ae:41:a0:7d:cb:9e:81:53:6b:37:45:44:fd:35:f2:f2:
         0c:d9:15:d4:50:70:5a:e7:e1:de:40:da:94:8d:5f:1b:37:eb:
         80:46:a7:65:41:80:6c:65:b1:c5:f4:b9:57:c9:36:b5:00:c4:
         08:a5:f2:6f:a9:bc:3b:33:49:3d:80:00:7e:4e:a1:fc:a3:9c:
         89:91:be:c7:5e:66:4c:2c:69:9a:9d:21:87:2b:5f:cd:cf:e3:
         a4:1e:5e:94:2d:66:4f:9f:5b:2e:ba:26:4b:2d:d0:88:51:4f:
         30:ea:18:b5:ca:a4:18:7d:cb:c0:23:7e:8c:85:06:17:57:46:
         3d:7b:0e:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTjsXnCAYG2/RE9OjznsBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5OGUyMDIzODFjMWM4OGQ4MmYzYjcwZjNiZTA2OGExYWEz
NzJiOWQwHhcNMjUwODIzMDUwMjEwWhcNMjUwODI0MDUwMjEwWjAzMTEwLwYDVQQD
EyhkZDBmODA3ODk0NGI0Y2MwNThhNjE0NTVjYjBmZDFkMDMzM2E2YTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqag3GPuw/FDvHFJFqfm/YV7dds4L
MspH+8PU6kuDsnJK4W9uoA280GkslS7X/jQDrofhGMdQcw9QqdcWSpmHzVo3P34A
yASkZAUr1Q8+T3bztUUJA5a8sufIfGNAA+v0niUmujjsyJ1rav1Re5oZudYxRE51
UbFgjnyQ2IYztSDr0Px1dyE2coL2ZpGnB8M0/mY/1+dS7h2k4UvpLAkOQRtUYUZJ
pPu3vS/gCkCzpFZCnB4DP3UoOPzBf/6sLgYqB4VvQ6O1HK4PHZKw5Xv7AgAyyouL
Xrm29o/CRHNFPz8uj+ArBhYKDWEerUYo09p9vZU8hoh0F/U0kgYLKbD1UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0PgHiUS0zAWKYUVcsP0dAzOmqIMB8GA1UdIwQY
MBaAFOmOICOBwciNgvO3DzvgaKGqNyudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlk0Z0k0SEJ5STJDODdjUE8tQm9vYW8zSzUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mNzg5MzctYWVkMy00YjZmLWFhMmQt
YzgzMmVkN2Q1ZmVjLzEvNlk0Z0k0SEJ5STJDODdjUE8tQm9vYW8zSzUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mNzg5MzctYWVkMy00YjZmLWFhMmQtYzgzMmVkN2Q1ZmVj
LzEvNlk0Z0k0SEJ5STJDODdjUE8tQm9vYW8zSzUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnrGDMLHJ
5KN1q8bZrENAVIpUVWoYEq5F+PRga7rmMuCchmXQHK5LJBCKivKDx/CgxFjzR5BS
Dxg/ud+2Rkgd1xLfKJJix+eqjpAoJ4ENXxKB/0zuORhBLWEAWon3Y+A7ShfQJqTC
3zUUWUecnM7cvT4kZfEfquGwezS1khpASRiuQaB9y56BU2s3RUT9NfLyDNkV1FBw
Wufh3kDalI1fGzfrgEanZUGAbGWxxfS5V8k2tQDECKXyb6m8OzNJPYAAfk6h/KOc
iZG+x15mTCxpmp0hhytfzc/jpB5elC1mT59bLromSy3QiFFPMOoYtcqkGH3LwCN+
jIUGF1dGPXsOZQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:06 2025 by rpki-client