Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
File:                     6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft (raw, json)
Hash identifier:          Pmz6kUAfpOpLJxQtjE3XAzNpmdxXlrHHe3YSWZoF7lA=
Subject key identifier:   A8:C8:59:17:6B:46:33:76:C7:2E:01:5D:5B:38:F5:16:EF:14:05:4E
Authority key identifier: E8:CF:AB:B2:B5:D7:8F:F9:FB:BD:C1:E3:7D:D3:7B:6F:C3:4F:11:D9
Certificate issuer:       /CN=e8cfabb2b5d78ff9fbbdc1e37dd37b6fc34f11d9
Certificate serial:       019828C82711ED028BE44B16716C0CA3B6E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
Manifest number:          08
Signing time:             Sun 20 Jul 2025 17:01:02 +0000
Manifest this update:     Sun 20 Jul 2025 17:01:02 +0000
Manifest next update:     Mon 21 Jul 2025 17:01:02 +0000
Files and hashes:         1: 6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl (hash: I537mfYee7126Zfn40tFFoz6dN4iT5+GLD6V7hEboO8=)
                          2: 8PxOvmgBEGk1dvdpAuCMyuAS_zU.roa (hash: IZyNSWwzA8kml+4/83o4BNcAjIyr4gruiC7sv+HeyL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:28:c8:27:11:ed:02:8b:e4:4b:16:71:6c:0c:a3:b6:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cfabb2b5d78ff9fbbdc1e37dd37b6fc34f11d9
        Validity
            Not Before: Jul 20 17:01:02 2025 GMT
            Not After : Jul 21 17:01:02 2025 GMT
        Subject: CN=a8c859176b463376c72e015d5b38f516ef14054e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:69:54:4b:f3:92:0e:1f:2d:18:19:f1:1a:e9:
                    16:8d:a9:72:31:34:91:ec:fc:08:d4:0f:fb:c7:8f:
                    04:d0:2f:7c:04:ac:8f:a6:8b:88:20:71:6e:67:20:
                    ec:85:2f:c2:2e:fa:70:b2:26:43:53:55:87:2b:97:
                    aa:1b:36:62:17:05:28:d6:60:e0:ff:80:8a:fd:83:
                    b7:0f:59:4a:c2:0a:97:04:89:ab:95:a5:3b:4d:4b:
                    d5:0f:b7:6c:cc:9d:1f:9d:e9:6b:d1:20:01:5c:c6:
                    de:2c:b4:aa:b2:03:65:15:f2:11:d8:b2:31:ef:e8:
                    99:30:cb:82:b1:a2:e4:83:5f:f3:06:7d:02:29:b5:
                    d9:0b:e6:0d:eb:ef:3f:f2:ac:25:cc:08:89:22:c1:
                    ba:71:98:86:d4:c0:d7:27:9e:05:10:06:bc:c0:d7:
                    0c:52:bd:63:bb:77:63:97:8d:14:9e:4d:d5:63:b8:
                    dd:8d:e3:08:33:3f:56:84:b0:ff:84:a5:c2:bb:16:
                    53:ab:70:c6:5e:bc:0f:93:f8:47:2e:1d:40:c8:db:
                    70:97:e9:dd:1d:2b:88:f7:f9:03:f1:a5:1b:de:84:
                    e7:ae:53:24:f1:ee:93:fb:4c:08:59:44:c1:17:7a:
                    ac:0b:f2:86:df:dd:2b:c8:3b:ae:be:86:aa:0e:af:
                    04:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C8:59:17:6B:46:33:76:C7:2E:01:5D:5B:38:F5:16:EF:14:05:4E
            X509v3 Authority Key Identifier:
                keyid:E8:CF:AB:B2:B5:D7:8F:F9:FB:BD:C1:E3:7D:D3:7B:6F:C3:4F:11:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:e4:4c:e1:c8:91:8d:e0:78:81:6d:a4:60:b5:d1:00:2d:ad:
         56:ad:6d:12:e7:55:fc:98:54:fa:f4:93:e2:68:0a:a5:6a:e3:
         52:57:31:7b:8f:53:1d:05:23:65:fb:b9:a4:f3:6a:8f:25:ba:
         96:73:5c:5b:cf:31:8f:2d:53:8c:22:6f:f6:dc:94:93:2d:36:
         df:97:59:ee:d5:e5:07:2e:e8:08:09:f1:7a:96:cd:38:5f:6f:
         17:ae:09:cb:4f:0e:b1:d9:53:5e:08:cd:2e:ab:58:4a:d6:fc:
         36:6b:6e:3f:1b:e4:57:08:7c:8b:b5:f9:aa:f8:3e:9e:90:7e:
         9f:ff:5a:5d:47:e5:02:ff:ae:3a:7c:6d:f4:d3:1c:5f:ab:4a:
         74:16:bb:0f:b9:d1:2b:5f:f0:40:24:bb:5b:a1:04:9c:aa:29:
         ff:b3:b1:a6:65:16:b5:28:d5:16:fe:d3:0f:1a:90:4e:c9:45:
         a3:98:ec:6f:80:12:3f:44:4d:bf:ea:0b:93:0c:c8:0b:af:16:
         d1:d2:95:6b:0e:3f:85:01:a3:a4:e1:fd:4c:50:c9:59:a8:01:
         a9:f9:cb:49:27:39:05:1e:2d:a7:cc:53:83:01:bc:2c:3d:95:
         e7:d5:0a:fb:88:34:89:5c:e3:8c:18:0e:a2:ea:d2:43:81:a7:
         74:ef:be:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:13:43 2025 by rpki-client