Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft
File:                     6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft (raw, json)
Hash identifier:          yw+sPOY2lJL3m33DMZCyo5hQIBhty1CilYVOZO2PkDI=
Subject key identifier:   90:45:C5:8C:6D:59:F3:21:AE:1D:B8:22:4B:77:E1:57:9B:A5:A0:EE
Authority key identifier: E8:CF:E5:B3:3E:E4:43:FD:E9:2B:D4:21:18:88:1C:A6:E8:26:3A:49
Certificate issuer:       /CN=e8cfe5b33ee443fde92bd42118881ca6e8263a49
Certificate serial:       0198D66178F65BE9B75AA3AB5905E3F11FCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft
Manifest number:          D7
Signing time:             Sat 23 Aug 2025 10:02:48 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:48 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:48 +0000
Files and hashes:         1: 6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl (hash: yIfG86l5tsEAAOSz4geow2AEFIyTodTUoj+DbLiSXHs=)
                          2: Yv4Nu-EN5zhL6KGxxs_xzdLAzPE.roa (hash: g3Z/I7jSdU5A7yhO2T69Xb/0yTPIA/OmlqPS3Q3yctw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:78:f6:5b:e9:b7:5a:a3:ab:59:05:e3:f1:1f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cfe5b33ee443fde92bd42118881ca6e8263a49
        Validity
            Not Before: Aug 23 10:02:48 2025 GMT
            Not After : Aug 24 10:02:48 2025 GMT
        Subject: CN=9045c58c6d59f321ae1db8224b77e1579ba5a0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:44:99:0b:9a:05:ea:b2:3c:a7:b2:6a:5a:73:
                    93:e9:dc:e8:88:32:3f:e3:c3:59:2c:51:7b:c3:b4:
                    e2:9a:48:0c:fd:84:61:ec:8d:a8:46:7c:48:b8:85:
                    94:d1:b8:0d:46:c2:4b:f7:93:5c:dd:24:49:2a:69:
                    85:0a:38:a1:74:7d:5e:4c:7a:ec:5a:37:ab:e0:f0:
                    20:63:d8:b7:aa:5c:90:d7:f7:2e:e5:7e:74:19:e7:
                    d8:fe:c2:55:8b:5f:4f:ea:0e:ae:d6:37:b5:cd:69:
                    84:45:f9:49:25:e0:b8:58:23:b3:c6:59:2f:c9:c2:
                    cf:9b:92:62:67:45:26:04:cf:2e:73:d2:e6:d3:d2:
                    d7:69:1d:8b:22:13:96:23:2e:63:d4:84:32:3e:a5:
                    b3:fd:78:8b:86:d4:b6:b7:3e:a4:eb:51:d5:bc:76:
                    ae:22:18:a5:c9:43:5a:71:b0:19:f9:ec:1d:85:2f:
                    21:25:d2:5b:a6:0d:59:f0:cc:f7:08:7e:cf:bd:ba:
                    31:e9:96:ea:61:b3:b1:0e:f3:a3:60:23:c0:42:8a:
                    01:33:c2:b4:59:20:20:d8:c3:17:d9:f5:ff:d0:27:
                    ee:d4:eb:05:c5:5b:01:7a:78:54:d7:4b:30:99:11:
                    92:67:24:02:ff:0a:58:25:53:a4:40:2d:b4:40:8c:
                    97:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:45:C5:8C:6D:59:F3:21:AE:1D:B8:22:4B:77:E1:57:9B:A5:A0:EE
            X509v3 Authority Key Identifier:
                keyid:E8:CF:E5:B3:3E:E4:43:FD:E9:2B:D4:21:18:88:1C:A6:E8:26:3A:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:1e:cb:f2:1e:50:8c:9f:07:b6:b0:a3:91:57:c3:c7:cf:a8:
         29:17:79:54:c1:82:6f:a5:24:25:20:b9:75:e6:12:78:f8:67:
         a2:eb:1b:90:d7:26:0d:2b:8e:1b:f5:3c:e1:d5:c0:9a:af:0c:
         76:67:c3:07:fc:23:1b:7c:fe:6a:43:6c:5f:8b:44:0b:64:ab:
         9b:52:3a:c0:98:d4:0d:2a:51:f3:07:a1:c0:84:96:0d:fd:cf:
         09:d9:6e:9c:97:47:2f:39:65:6d:8a:c2:14:c9:75:33:79:b5:
         cb:bf:90:1e:e7:da:ac:6e:96:0a:4a:f9:23:46:46:dc:31:25:
         33:2f:6f:45:ea:ee:19:6a:5f:56:8a:69:63:7b:71:46:fd:35:
         0c:54:17:1e:43:08:66:ef:82:95:59:ce:e4:3f:a9:f6:28:f4:
         f6:f8:67:a7:8c:aa:cd:bb:83:49:9f:66:8d:b5:84:64:c2:fc:
         90:2c:05:2c:07:7a:70:a0:97:76:00:e0:b1:2e:17:d7:66:01:
         9e:ae:83:5d:17:e2:b7:29:88:89:fe:04:5b:70:e8:b9:9b:a5:
         c1:4f:71:13:75:87:0c:36:b7:e6:48:f9:7b:91:b6:ab:46:72:
         3f:09:12:91:94:7d:98:3b:34:32:6f:d3:c4:ad:07:65:60:6b:
         9b:22:bd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:33 2025 by rpki-client