Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
File:                     _6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft (raw, json)
Hash identifier:          wnFiX576GeDUCGQvx1tx6+zJsUzlcCxb4sxUwPNn2Bs=
Subject key identifier:   D8:DF:E9:63:96:BB:E4:56:43:FE:F7:86:87:C5:15:F6:8A:B4:55:1B
Authority key identifier: FF:A4:1D:34:13:DD:AC:C9:1F:E0:F4:42:6A:82:86:81:CF:30:E0:FC
Certificate issuer:       /CN=ffa41d3413ddacc91fe0f4426a828681cf30e0fc
Certificate serial:       019849D2C018B86A1E60D0C4D47D176B31B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
Manifest number:          0CE6
Signing time:             Sun 27 Jul 2025 03:00:05 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:05 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:05 +0000
Files and hashes:         1: 8eIa-4UA2fnyQQyLs8y9bQIaWAM.roa (hash: SYGKUkvXI/obgdGVYKiFu2OylosInlCBmN7hXgRUyO8=)
                          2: _6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl (hash: oohI3UyKVjnuEtERh7j6N1KRRddHbAl9TdblFX4aYOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d2:c0:18:b8:6a:1e:60:d0:c4:d4:7d:17:6b:31:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffa41d3413ddacc91fe0f4426a828681cf30e0fc
        Validity
            Not Before: Jul 27 03:00:05 2025 GMT
            Not After : Jul 28 03:00:05 2025 GMT
        Subject: CN=d8dfe96396bbe45643fef78687c515f68ab4551b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9c:ea:fd:4a:aa:90:c9:16:3d:07:dd:21:98:
                    3d:95:64:13:8b:20:38:3e:d9:c6:d1:b0:cd:bf:fb:
                    9b:ce:d8:2a:77:cb:b9:78:35:aa:70:96:ed:47:c1:
                    c6:28:93:51:82:e5:09:fd:5c:be:03:b6:8a:c9:94:
                    ca:b8:5b:b5:3d:4e:ca:d2:15:22:38:42:99:12:dd:
                    c4:0c:45:64:aa:c5:fb:1c:07:42:e5:e3:16:51:e0:
                    56:f2:c6:04:7b:68:ff:d4:91:fb:8d:67:73:0c:98:
                    a9:f0:9e:53:d3:87:db:d1:df:56:5b:8d:24:da:4b:
                    33:11:c8:b1:83:a3:4b:9e:d8:93:7b:4c:05:7f:ca:
                    d9:79:12:a3:3a:d3:1f:55:9e:fb:54:f5:ab:4d:bf:
                    2a:0f:8e:5c:d4:bb:83:bc:0f:2b:4d:03:f1:9a:5d:
                    e3:9d:5b:fa:4c:89:6e:4c:ce:1a:77:2b:77:21:ed:
                    88:20:15:fa:c4:c9:3a:04:0a:e9:e1:27:59:ac:6b:
                    d4:8d:17:92:5b:bf:88:e5:60:87:6d:a0:d5:ea:d9:
                    d3:c6:70:34:3c:82:3a:de:3f:aa:5e:82:36:02:2b:
                    41:38:96:59:64:22:ff:76:81:0b:ee:67:97:99:f5:
                    80:34:5c:2e:c1:94:07:05:e3:2b:aa:9e:10:8a:84:
                    04:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DF:E9:63:96:BB:E4:56:43:FE:F7:86:87:C5:15:F6:8A:B4:55:1B
            X509v3 Authority Key Identifier:
                keyid:FF:A4:1D:34:13:DD:AC:C9:1F:E0:F4:42:6A:82:86:81:CF:30:E0:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:b8:ef:31:f5:59:3a:e7:2d:0c:63:31:e4:48:5a:d5:28:e8:
         fe:58:0c:01:55:47:b6:e0:9b:55:4f:b3:e4:bb:5b:82:a1:d7:
         f5:b6:15:3e:11:dd:66:b6:ef:40:4f:24:7a:69:02:88:68:cd:
         ab:b0:03:e0:04:93:04:f5:89:d5:6c:d8:51:54:ee:c7:00:0d:
         6d:55:f9:c5:b8:95:04:9d:43:45:a1:f3:b9:a9:da:fa:c4:32:
         56:41:40:9b:b9:14:cc:bd:cf:da:95:bc:d3:b2:18:4e:99:41:
         a9:13:90:38:94:cd:33:6f:8c:e7:7b:3b:c3:23:38:ac:48:15:
         f5:5c:77:f8:1e:0a:41:58:a0:c6:3f:ab:5b:27:15:88:eb:a8:
         68:62:06:d0:f0:74:53:7e:3a:8c:fa:6b:8c:03:62:06:33:55:
         df:95:e9:27:3d:1c:f7:33:38:da:52:8e:ef:b2:37:62:d6:67:
         66:08:19:88:b9:a4:af:11:6c:db:6b:bd:cc:e2:da:18:0d:9c:
         b8:0a:9d:57:a5:2e:9c:e3:86:73:91:75:de:bb:4d:c5:e0:14:
         ea:94:f7:9e:b1:97:18:b7:3a:ed:f1:7e:61:1d:7b:21:a3:f9:
         86:fb:46:08:71:22:52:f6:41:ec:4b:76:b0:a9:ff:c2:d9:b1:
         b7:73:fc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:34:03 2025 by rpki-client