Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
File:                     t6hswzTG4Oq4PyUr2D7ulWklykA.mft (raw, json)
Hash identifier:          BaCtDHTqK2TcCM0prnE0uvyr1UWYsOC0SP5xZSBIN4A=
Subject key identifier:   65:6E:6D:BB:13:BE:B8:CE:B4:83:3B:86:E2:0E:FB:00:7E:6D:05:EA
Authority key identifier: B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40
Certificate issuer:       /CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
Certificate serial:       019849D31EE92C2DC36A03FA827FC2D4CD02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
Manifest number:          15FF
Signing time:             Sun 27 Jul 2025 03:00:29 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:29 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:29 +0000
Files and hashes:         1: YDZQqJLg6f9-JdbHT4bYmgUJjh0.roa (hash: cInsk0zvLYwt9OlQZPLFwtQxycESn1Vx2ttrJFC0hi8=)
                          2: t6hswzTG4Oq4PyUr2D7ulWklykA.crl (hash: GvWsQdPtcbYLlgJsIuy2n5nPSxfOplFvuhDEfEKJphI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:1e:e9:2c:2d:c3:6a:03:fa:82:7f:c2:d4:cd:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
        Validity
            Not Before: Jul 27 03:00:29 2025 GMT
            Not After : Jul 28 03:00:29 2025 GMT
        Subject: CN=656e6dbb13beb8ceb4833b86e20efb007e6d05ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fd:88:5e:7b:bd:ea:e9:5c:c0:7c:e2:0b:96:
                    fb:8c:32:41:8a:f8:dc:5e:2a:dc:26:07:d3:7c:69:
                    4d:c0:b7:3e:80:41:00:db:ac:ac:8d:ce:8c:42:c5:
                    b7:14:7d:c2:b9:51:60:26:8e:d8:09:b8:e3:08:57:
                    45:77:d2:81:c7:f3:51:c0:fc:84:27:38:e6:4c:5b:
                    25:d1:2e:33:37:0f:5c:f3:76:2f:b5:ac:35:ab:37:
                    39:cd:46:9f:a7:84:95:1f:a6:49:46:d5:48:ce:55:
                    2c:e8:ca:a2:aa:ac:ef:fe:30:fd:31:d5:9b:1d:87:
                    04:a9:ad:40:d1:2f:3a:3a:6f:c5:c9:17:ee:ec:b9:
                    3b:54:df:24:08:e8:8a:dc:9e:c8:66:29:c1:78:57:
                    54:d0:b0:d5:17:ea:16:62:49:54:05:4e:8a:86:29:
                    09:23:0a:37:f7:72:4f:74:66:7b:7d:81:bc:68:da:
                    dc:82:b4:7d:d6:01:0b:e2:cd:c3:fb:fd:e5:bc:66:
                    1b:a6:c4:3a:18:c1:d5:77:66:d7:48:da:08:4d:20:
                    3c:df:f4:ce:f8:77:fe:c0:cb:54:16:99:bf:f2:f4:
                    b6:e2:d1:9b:fa:ee:44:c5:34:43:13:69:39:89:53:
                    81:69:cf:c1:de:7d:67:6f:8f:40:30:13:b9:4e:c9:
                    64:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6E:6D:BB:13:BE:B8:CE:B4:83:3B:86:E2:0E:FB:00:7E:6D:05:EA
            X509v3 Authority Key Identifier:
                keyid:B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d7:f9:86:9a:c9:4b:b4:6c:16:a5:ce:d9:4c:c8:9a:71:68:
         ea:0c:8e:ca:fb:38:f9:b8:62:e0:3f:74:f5:16:60:79:f3:76:
         c3:4d:b9:06:11:c9:e6:56:08:f0:db:fd:ea:44:53:4d:b2:0b:
         06:fd:74:29:03:e1:dc:6d:e3:f3:27:0d:7b:f7:67:ee:ff:74:
         5c:6d:6c:71:10:db:4a:02:b2:67:89:1b:35:71:aa:b3:80:1e:
         10:9e:a1:d6:8c:6d:3e:fe:c6:23:15:69:01:74:1c:51:fd:4d:
         39:cc:65:8e:72:cf:3f:69:0b:cc:bf:19:dd:f9:dd:3b:88:08:
         28:f1:d4:70:97:d0:0a:56:3c:8c:e2:e1:e3:5f:74:f9:96:19:
         a3:6f:4d:21:c5:32:41:a3:22:84:ba:90:36:23:85:fe:66:b7:
         4f:99:9c:97:06:ec:4d:95:fa:d1:5e:16:5b:e0:7e:85:32:4b:
         65:0f:2a:b9:0a:02:f3:f9:8b:d4:af:48:20:d0:b7:e6:23:4e:
         08:56:fb:aa:c6:3a:20:b1:21:59:d6:2c:b1:2c:e7:9d:e8:38:
         b1:5e:6f:ff:d1:c7:a6:e4:4e:9e:43:4e:d8:c7:50:be:c4:70:
         6c:8c:e4:82:7d:ef:08:8d:87:0e:cb:b8:cb:e8:96:53:f1:64:
         6f:1a:26:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:22:28 2025 by rpki-client