Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.mft
File:                     6b_QQQx787sddbGKyx6WOTrSGyY.mft (raw, json)
Hash identifier:          c/JGJ6jp/YI1E5AHQIqx4Oo5Zv9/xbLOJvbErjkSNpI=
Subject key identifier:   D5:03:61:E9:70:E6:A4:E8:45:D4:69:8C:3A:2B:7A:EB:D4:01:8F:15
Authority key identifier: E9:BF:D0:41:0C:7B:F3:BB:1D:75:B1:8A:CB:1E:96:39:3A:D2:1B:26
Certificate issuer:       /CN=e9bfd0410c7bf3bb1d75b18acb1e96393ad21b26
Certificate serial:       01984965752F928DDBD82339B0CB3D761F32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6b_QQQx787sddbGKyx6WOTrSGyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.mft
Manifest number:          0250
Signing time:             Sun 27 Jul 2025 01:00:42 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:42 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:42 +0000
Files and hashes:         1: 6b_QQQx787sddbGKyx6WOTrSGyY.crl (hash: um7QZbJ0INeQB4MkxhXbouzFqshFrua7nYwaJNw/bA8=)
                          2: GxL8fwk7MmwPNTtCp-ZrLwDGehU.roa (hash: lyYJo+TOxOK6xLDSZatPtZ0yRjTCazkuCS6AXT1948U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6b_QQQx787sddbGKyx6WOTrSGyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:75:2f:92:8d:db:d8:23:39:b0:cb:3d:76:1f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bfd0410c7bf3bb1d75b18acb1e96393ad21b26
        Validity
            Not Before: Jul 27 01:00:42 2025 GMT
            Not After : Jul 28 01:00:42 2025 GMT
        Subject: CN=d50361e970e6a4e845d4698c3a2b7aebd4018f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b7:fb:69:d5:ca:16:7f:a3:91:f8:3f:8a:ed:
                    e0:35:35:cd:cb:99:b4:9a:1a:c0:39:68:08:b8:9d:
                    2a:3e:a4:d2:fc:c3:6f:d5:56:9a:ff:96:da:77:21:
                    29:5b:9b:5e:e5:c2:42:7c:e9:32:77:6e:d9:ed:c6:
                    2b:aa:7a:25:8c:95:2c:4f:83:27:f6:f1:96:f9:29:
                    31:dc:ba:f8:50:e9:0c:92:83:bb:09:5d:a5:55:73:
                    b4:bc:97:2a:a1:ce:8e:57:e4:cd:4b:a5:bc:97:85:
                    03:e5:de:88:e0:5a:45:a2:72:cc:84:be:ae:50:7b:
                    99:dd:ab:cf:25:9a:c4:36:e9:c2:64:3a:9d:75:e1:
                    07:c5:be:41:fe:2f:66:5a:7e:7a:75:7f:ad:27:75:
                    a0:fe:ac:14:63:06:9f:13:77:cf:42:98:95:9f:bb:
                    0d:e4:2d:29:0a:86:39:d0:36:53:60:f8:20:95:e8:
                    8a:92:24:44:00:fe:70:4b:7d:66:39:2d:5f:8d:41:
                    23:8f:ed:24:88:d0:4c:a4:0f:33:57:7f:08:60:71:
                    24:0c:52:18:e2:a2:8c:11:c0:76:2d:72:67:6d:34:
                    ac:af:03:38:5c:8e:fd:a1:c3:61:4f:31:f4:94:98:
                    84:6e:f4:64:b8:45:d6:9d:f2:8d:72:c1:ca:22:0c:
                    2d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:03:61:E9:70:E6:A4:E8:45:D4:69:8C:3A:2B:7A:EB:D4:01:8F:15
            X509v3 Authority Key Identifier:
                keyid:E9:BF:D0:41:0C:7B:F3:BB:1D:75:B1:8A:CB:1E:96:39:3A:D2:1B:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b_QQQx787sddbGKyx6WOTrSGyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:a0:6b:d6:0c:3f:72:9e:56:44:8f:c6:ad:28:7f:3d:52:ba:
         f8:3c:9e:83:3e:c6:a0:16:e6:69:7d:bb:3b:94:84:24:f3:93:
         bd:61:d0:f0:95:56:a7:92:33:a1:dd:e1:e2:44:df:b7:db:8d:
         e3:70:c9:fa:b3:7c:fb:66:85:5f:63:b3:3d:2e:b2:4e:f1:5a:
         55:09:b5:5b:de:e2:c7:a8:05:3a:15:67:ad:d0:5a:10:e4:be:
         03:c5:5d:d0:86:3d:8c:61:dc:76:29:28:cd:f7:af:10:6d:dd:
         10:e7:39:ff:f4:f8:d1:21:cd:f3:c4:15:50:86:17:e4:50:ec:
         b7:21:16:0f:bb:52:2e:14:47:6f:54:3d:ef:ea:53:f1:06:01:
         35:f8:8b:38:58:00:1c:0f:e8:98:91:81:64:32:8c:64:eb:60:
         ea:dc:5d:0a:94:4f:f1:58:b5:e2:b2:91:d1:6e:09:84:2f:5f:
         6a:22:6e:67:2f:e9:3b:6a:8c:5b:d6:52:8c:3e:51:85:cb:ec:
         2f:40:53:10:d5:8a:08:01:60:1f:ec:14:64:b5:74:34:02:fd:
         2d:d1:e5:19:28:f6:64:32:cc:63:b8:fd:e6:b8:f9:67:bc:6c:
         1f:32:69:0d:6d:e8:84:04:4d:44:f1:c5:ed:10:f7:36:5b:2c:
         0c:44:c0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:14:45 2025 by rpki-client