Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
File:                     6MpwwfyVubHp3Hd1RVutuSFPkdA.mft (raw, json)
Hash identifier:          4e1mpjK++4AAy6kZMUCTpqzJ9c35lObDuwPJjEAMe8s=
Subject key identifier:   FA:07:5F:BC:0D:EF:A8:6D:89:42:BE:50:9D:F3:1B:E4:71:68:73:9D
Authority key identifier: E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0
Certificate issuer:       /CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
Certificate serial:       01984AE57CCC53F4CE36E4AF061E6A35C5FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
Manifest number:          1508
Signing time:             Sun 27 Jul 2025 08:00:10 +0000
Manifest this update:     Sun 27 Jul 2025 08:00:10 +0000
Manifest next update:     Mon 28 Jul 2025 08:00:10 +0000
Files and hashes:         1: 6MpwwfyVubHp3Hd1RVutuSFPkdA.crl (hash: +hgD7YrO8n5zI8rmTNYuwxhePfZxXYIRxlmrDSEpQv0=)
                          2: h3MBCKUGhHfeEGJEjBUvFcZingY.roa (hash: Kf87fhJV7eWi54ATVvDhv4SnGp1TZLheM1w//OwPipM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:e5:7c:cc:53:f4:ce:36:e4:af:06:1e:6a:35:c5:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
        Validity
            Not Before: Jul 27 08:00:10 2025 GMT
            Not After : Jul 28 08:00:10 2025 GMT
        Subject: CN=fa075fbc0defa86d8942be509df31be47168739d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:38:e8:cd:21:9e:76:0f:53:e6:ee:b2:2d:41:
                    c2:1b:47:73:7b:61:b4:9e:b2:5c:79:62:f0:39:4f:
                    41:c9:0c:5d:c9:a9:c1:e5:7e:03:27:4d:f9:2e:ac:
                    67:51:8a:b5:7e:c2:39:ed:39:e3:ba:94:80:64:5d:
                    38:e6:27:8f:c2:b0:20:3f:9a:f8:46:7a:54:38:66:
                    21:79:1c:38:71:fa:01:ab:27:c5:cf:0d:a6:3c:a5:
                    94:28:b7:db:bb:b5:27:64:dd:8b:14:80:d7:73:51:
                    8b:69:ce:9f:66:17:a8:43:9c:ec:ef:f9:98:b2:99:
                    61:3d:4d:7a:e9:35:d1:3b:50:6e:68:5d:b2:a4:51:
                    45:55:66:08:de:63:81:1f:92:78:f0:30:63:d7:6d:
                    ca:63:b7:25:ab:64:f0:13:18:2e:f4:3e:7a:e3:11:
                    b6:c5:7f:32:1e:23:8e:44:d1:10:b7:f6:9e:4c:cb:
                    ab:0b:eb:a6:ff:ce:fc:d0:95:f9:b0:44:5a:c8:09:
                    21:ad:f7:38:7b:fd:32:8c:96:e7:09:fb:ae:71:9b:
                    83:a2:f9:ce:b5:49:6a:b5:56:da:1f:0f:1b:8a:69:
                    c4:d8:2e:e2:1f:05:06:45:36:a8:27:e0:89:4b:7f:
                    dc:dc:e5:c0:13:50:3b:a5:2a:a6:a6:35:66:8b:14:
                    56:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:07:5F:BC:0D:EF:A8:6D:89:42:BE:50:9D:F3:1B:E4:71:68:73:9D
            X509v3 Authority Key Identifier:
                keyid:E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:a3:4a:bd:94:0d:21:a2:43:0b:18:a4:94:5c:66:67:2e:95:
         2d:6e:f4:d4:92:6e:41:6a:87:92:7a:c6:7e:48:f2:73:da:3d:
         fa:1d:7f:82:64:95:72:15:88:e8:2f:3d:13:16:83:95:72:bd:
         3a:7c:8c:cf:23:79:3f:b1:34:93:5c:4c:c0:2a:ba:2d:4b:27:
         e2:f7:86:7a:c9:1e:97:ec:2f:85:83:e2:38:a2:9c:dc:fd:59:
         e5:40:46:db:38:4f:8b:77:6e:1e:64:5f:df:ca:17:29:46:06:
         17:29:29:de:9e:b8:79:3e:f9:c1:02:00:8f:48:bf:80:2a:6b:
         87:1b:e5:1b:18:37:33:88:d0:be:96:b9:ca:0d:2e:b2:d4:91:
         f5:fa:1f:15:11:57:4f:d7:20:e8:02:10:a7:d4:9a:5b:ca:bc:
         1f:18:64:20:1a:f5:6c:fc:1e:24:4a:27:5e:9d:78:a6:b8:2d:
         88:c0:c3:69:e8:51:f2:d0:0c:93:bb:5a:bc:63:c5:78:ac:56:
         62:d5:06:d8:5c:ac:a6:52:dd:3c:72:3e:dc:a5:9f:54:ae:94:
         2a:f6:e1:d4:0d:0d:74:a9:20:9e:18:8c:06:fb:54:16:72:a2:
         b0:e2:43:8b:ef:dc:52:d4:95:73:6b:72:55:a2:ed:07:46:0d:
         52:ba:ba:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:39:32 2025 by rpki-client