Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft
File:                     P6xpra8ADdd6SwAYd8JYoh0f9qA.mft (raw, json)
Hash identifier:          th1Ex+g4u/2jL8Mzdq8+T668/0US7WMLJn3YTpjWGjU=
Subject key identifier:   8C:A3:0D:A8:50:C2:99:DD:98:99:28:3D:9B:8D:F4:90:C5:82:6E:96
Authority key identifier: 3F:AC:69:AD:AF:00:0D:D7:7A:4B:00:18:77:C2:58:A2:1D:1F:F6:A0
Certificate issuer:       /CN=3fac69adaf000dd77a4b001877c258a21d1ff6a0
Certificate serial:       019849D2F45C80DFE31F7155ABBA76FE63B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P6xpra8ADdd6SwAYd8JYoh0f9qA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft
Manifest number:          0EFE
Signing time:             Sun 27 Jul 2025 03:00:18 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:18 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:18 +0000
Files and hashes:         1: P6xpra8ADdd6SwAYd8JYoh0f9qA.crl (hash: v4WYI5muIT9FA+odiCqRjHSHSpm+OIwOxh5IhUOI8Ps=)
                          2: pGti5NOwKPTLx4Ly3hXPkfnIdHY.roa (hash: hGj1ei60T0pZizrlmStFTjFUv40NzLgMUG+0J0UuEdw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P6xpra8ADdd6SwAYd8JYoh0f9qA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 03:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d2:f4:5c:80:df:e3:1f:71:55:ab:ba:76:fe:63:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fac69adaf000dd77a4b001877c258a21d1ff6a0
        Validity
            Not Before: Jul 27 03:00:18 2025 GMT
            Not After : Jul 28 03:00:18 2025 GMT
        Subject: CN=8ca30da850c299dd9899283d9b8df490c5826e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a1:cf:2b:43:de:2a:1b:9b:f2:a5:c9:af:66:
                    e9:a1:5c:00:ec:02:03:51:2d:1d:05:29:a6:93:78:
                    b8:3d:79:02:9d:19:4f:85:70:a8:34:ef:54:ad:06:
                    d1:16:18:62:c6:9c:4f:3d:56:24:b2:e0:3a:18:1f:
                    25:e4:cb:26:85:44:1f:fa:4b:65:96:24:24:91:77:
                    53:4c:28:09:1a:fb:65:58:1b:4b:d0:00:53:5b:22:
                    b3:2a:86:23:fa:62:4a:75:91:96:93:99:62:fe:9c:
                    89:9e:ef:36:18:27:e7:db:56:4a:7a:66:54:69:f6:
                    92:9f:c4:05:08:95:ff:b3:5c:56:2f:81:26:44:6b:
                    aa:6f:23:16:1a:20:b0:1c:7b:ac:d6:65:b3:2e:ba:
                    9a:45:80:a2:2b:94:64:27:00:61:69:7a:d3:bf:ed:
                    16:33:67:5c:e5:f7:92:00:a2:59:4e:f0:3b:23:86:
                    cc:70:5e:b8:9f:24:30:ef:ea:56:b7:a1:c8:98:74:
                    9e:d6:e8:03:23:08:7a:35:01:4a:5a:44:83:ff:a2:
                    35:ed:ae:d1:cf:f0:14:7f:22:60:9d:db:40:32:c4:
                    e4:be:ce:3b:a5:30:ed:17:b3:5d:a3:da:c0:16:73:
                    41:27:1d:0d:2a:3e:c3:f7:d9:68:03:4a:aa:2b:4c:
                    63:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A3:0D:A8:50:C2:99:DD:98:99:28:3D:9B:8D:F4:90:C5:82:6E:96
            X509v3 Authority Key Identifier:
                keyid:3F:AC:69:AD:AF:00:0D:D7:7A:4B:00:18:77:C2:58:A2:1D:1F:F6:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xpra8ADdd6SwAYd8JYoh0f9qA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:44:88:f9:45:24:43:43:c0:70:d2:88:be:ff:8e:fd:c5:bb:
         8e:7e:e5:44:b9:db:80:37:53:b8:34:25:ca:66:3b:fb:6e:7f:
         8b:79:70:e0:51:5f:a5:b7:5b:14:30:a1:ac:c6:02:d5:c5:7c:
         ca:8e:23:a2:14:a8:bf:d6:82:b5:fc:83:3a:4f:6a:ef:6c:55:
         a1:fb:6c:2a:72:4f:fe:a6:a4:12:39:01:16:8a:5e:fd:36:9c:
         07:90:d4:8d:77:7c:eb:bb:2e:0d:b7:e7:a4:5d:19:49:43:28:
         cd:ad:af:c1:61:02:4e:f7:f4:ab:40:e7:c3:d5:0c:88:9b:a8:
         8a:06:7e:61:9a:a3:87:99:6a:b9:21:38:5c:11:b5:3e:fc:e8:
         54:80:2c:fd:68:97:93:bc:56:2b:91:7a:c6:34:7b:c7:4d:d9:
         b4:38:e9:d8:dd:60:e8:ad:06:1e:81:a2:95:07:0e:14:6e:33:
         d6:e2:c8:c3:a7:e6:e8:4c:b1:e7:a5:ff:99:fd:f6:30:41:dc:
         96:91:a4:42:96:58:04:94:c4:08:00:1c:b4:bc:f9:89:be:af:
         b3:91:12:33:e4:5b:7e:f1:b2:2f:61:d9:a0:3b:83:0b:b7:12:
         38:e4:9e:f6:ce:53:ce:38:af:51:68:56:e4:84:5d:6f:f2:11:
         e2:ad:23:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:36:35 2025 by rpki-client