Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft
File:                     t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft (raw, json)
Hash identifier:          WrRSy3LDW1hJgkqAkMlh/9TuPl+JIegjtnlOERenMxg=
Subject key identifier:   C0:FF:2B:75:70:E7:5D:CC:8E:2C:47:2F:10:A3:CE:EE:A6:CC:8D:8A
Authority key identifier: B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB
Certificate issuer:       /CN=b7a670e51c96419fc52028b12e45655ef914ddbb
Certificate serial:       019846D1EE91EB46A4A6B2009908CA671A95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft
Manifest number:          1403
Signing time:             Sat 26 Jul 2025 13:00:19 +0000
Manifest this update:     Sat 26 Jul 2025 13:00:19 +0000
Manifest next update:     Sun 27 Jul 2025 13:00:19 +0000
Files and hashes:         1: NsZjsu2WDCD4J07ujcjp4ji-VOU.roa (hash: VU4MSu0eDWsfOu4NUIfDAf48zntyybA1JsYveD+Po8w=)
                          2: gwXTY0LJ22_8yhfOOeJP7JMePkA.roa (hash: C8Ad/tS32eCjtx+fJLVbrf6IcLPHhfeHNWH2HlHojI4=)
                          3: t6Zw5RyWQZ_FICixLkVlXvkU3bs.crl (hash: pAyktUdOeJdBKcfHS29WPdTNhelDGp1GoEXFU5JHce0=)
                          4: tYoEMyoFgANiNY7nw4zfzPaPtkI.roa (hash: PX+Kyq98vaXV0wz8tTuZQEWdK7K2Hq3OD8ndatlexb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:d1:ee:91:eb:46:a4:a6:b2:00:99:08:ca:67:1a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a670e51c96419fc52028b12e45655ef914ddbb
        Validity
            Not Before: Jul 26 13:00:19 2025 GMT
            Not After : Jul 27 13:00:19 2025 GMT
        Subject: CN=c0ff2b7570e75dcc8e2c472f10a3ceeea6cc8d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:46:10:82:26:15:71:9e:7a:bd:96:eb:cc:ad:
                    d8:5b:c6:f3:af:08:86:ed:d0:37:9c:a2:49:54:37:
                    b4:9a:d4:49:02:b4:61:04:20:5e:c8:dd:0f:fc:0e:
                    70:71:b6:8d:f5:c2:09:c0:95:b6:df:c5:af:e3:d3:
                    19:f9:98:e3:91:2c:8f:32:ed:6e:81:24:c7:89:bc:
                    54:aa:e3:49:49:71:59:ab:d8:e5:15:87:4d:4c:a4:
                    74:32:bf:9d:5b:45:ac:ac:2c:49:66:cf:41:e3:ec:
                    20:fd:35:98:3e:0b:39:de:dd:b2:6e:33:47:7c:8b:
                    11:9b:11:ff:03:99:fd:9b:20:2d:97:c4:03:12:dc:
                    03:31:ec:83:a3:0e:16:ec:9c:08:66:3c:b3:88:32:
                    db:df:07:d8:af:8a:49:52:d7:b5:5c:cf:02:68:14:
                    0f:96:ff:28:3e:a2:48:5f:69:90:43:6b:ba:3e:93:
                    3f:5f:cd:b9:ec:31:b3:9b:f3:14:15:63:02:b2:24:
                    be:0b:80:62:ab:ff:a7:dd:c0:3c:f8:14:d1:2e:38:
                    19:ae:bf:2c:a7:86:ee:b3:34:37:6e:6b:01:2c:9c:
                    5a:3d:ad:4d:bb:60:b0:35:25:06:e5:23:49:77:26:
                    71:20:7e:68:c6:e0:3f:24:88:32:59:94:f2:5c:e1:
                    b6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FF:2B:75:70:E7:5D:CC:8E:2C:47:2F:10:A3:CE:EE:A6:CC:8D:8A
            X509v3 Authority Key Identifier:
                keyid:B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:cc:62:31:e9:fd:96:5c:bb:51:cd:05:68:b4:a0:47:3b:d3:
         ac:ab:51:1f:48:9f:d8:a6:fa:23:27:92:43:f2:18:f4:e1:60:
         dd:cd:a8:2c:e4:71:60:9d:d2:0d:30:58:fb:89:a2:50:6c:9e:
         c0:a7:73:44:a4:6a:04:47:cb:a1:c6:83:fb:2f:14:1e:81:12:
         55:f0:2d:b0:ec:78:77:14:09:f7:70:7b:83:18:b5:31:d8:7b:
         a6:82:a4:57:43:04:bb:44:8c:ee:5b:44:30:68:11:cf:39:cc:
         c7:69:b4:7d:3e:4a:7c:51:51:22:c5:a4:e7:dc:dd:93:fc:a2:
         28:83:2d:38:38:43:51:76:19:68:16:33:38:d6:83:2f:70:c2:
         af:6e:81:19:4a:f1:ab:d1:56:07:ca:84:9a:e9:9c:1f:4e:83:
         19:cc:5e:09:aa:ff:51:04:ac:90:33:c3:bf:99:71:5d:52:69:
         a1:3d:d3:ae:de:0a:14:06:c4:ba:43:57:2c:0f:28:d3:93:e5:
         e4:99:7c:3f:a9:a4:85:27:e4:22:0c:b1:19:99:fd:a2:5d:06:
         9c:90:e9:99:03:98:5d:cf:73:cd:37:16:1b:3e:da:ab:6b:b2:
         14:50:8f:44:85:a7:02:f3:f6:38:23:f2:ef:c7:26:23:8f:6b:
         24:c6:ef:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhG0e6R60akprIAmQjKZxqVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YTY3MGU1MWM5NjQxOWZjNTIwMjhiMTJlNDU2NTVlZjkx
NGRkYmIwHhcNMjUwNzI2MTMwMDE5WhcNMjUwNzI3MTMwMDE5WjAzMTEwLwYDVQQD
EyhjMGZmMmI3NTcwZTc1ZGNjOGUyYzQ3MmYxMGEzY2VlZWE2Y2M4ZDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkYQgiYVcZ56vZbrzK3YW8bzrwiG
7dA3nKJJVDe0mtRJArRhBCBeyN0P/A5wcbaN9cIJwJW238Wv49MZ+ZjjkSyPMu1u
gSTHibxUquNJSXFZq9jlFYdNTKR0Mr+dW0WsrCxJZs9B4+wg/TWYPgs53t2ybjNH
fIsRmxH/A5n9myAtl8QDEtwDMeyDow4W7JwIZjyziDLb3wfYr4pJUte1XM8CaBQP
lv8oPqJIX2mQQ2u6PpM/X8257DGzm/MUFWMCsiS+C4Biq/+n3cA8+BTRLjgZrr8s
p4buszQ3bmsBLJxaPa1Nu2CwNSUG5SNJdyZxIH5oxuA/JIgyWZTyXOG2VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMD/K3Vw513MjixHLxCjzu6mzI2KMB8GA1UdIwQY
MBaAFLemcOUclkGfxSAosS5FZV75FN27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDZadzVSeVdRWl9GSUNpeExrVmxYdmtVM2JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jNGNhOWQtNWQzMi00ZWZkLThlMWIt
MTMyOTM3ZDM5Y2VhLzEvdDZadzVSeVdRWl9GSUNpeExrVmxYdmtVM2JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9jNGNhOWQtNWQzMi00ZWZkLThlMWItMTMyOTM3ZDM5Y2Vh
LzEvdDZadzVSeVdRWl9GSUNpeExrVmxYdmtVM2JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsxiMen9
lly7Uc0FaLSgRzvTrKtRH0if2Kb6IyeSQ/IY9OFg3c2oLORxYJ3SDTBY+4miUGye
wKdzRKRqBEfLocaD+y8UHoESVfAtsOx4dxQJ93B7gxi1Mdh7poKkV0MEu0SM7ltE
MGgRzznMx2m0fT5KfFFRIsWk59zdk/yiKIMtODhDUXYZaBYzONaDL3DCr26BGUrx
q9FWB8qEmumcH06DGcxeCar/UQSskDPDv5lxXVJpoT3Trt4KFAbEukNXLA8o05Pl
5Jl8P6mkhSfkIgyxGZn9ol0GnJDpmQOYXc9zzTcWGz7aq2uyFFCPRIWnAvP2OCPy
78cmI49rJMbvfA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 15:02:52 2025 by rpki-client