Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft
File:                     e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft (raw, json)
Hash identifier:          Rcd+Z9SQ9JZgTnef6JTYYXmRLJLO1xSc70edf9GYeZs=
Subject key identifier:   61:61:31:01:DA:98:D6:F3:47:19:77:9E:F2:87:8F:0F:84:D7:6B:5B
Authority key identifier: 7B:A7:FD:A6:A6:92:23:6C:22:3F:74:D6:3E:A7:BB:9F:EF:2F:12:74
Certificate issuer:       /CN=7ba7fda6a692236c223f74d63ea7bb9fef2f1274
Certificate serial:       019849663CA0504D9280AD198F866A8EEB08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft
Manifest number:          11BF
Signing time:             Sun 27 Jul 2025 01:01:33 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:33 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:33 +0000
Files and hashes:         1: 0m_FCYLNpCepQvgGxnt5Etr0-7E.roa (hash: KPGMzAKskMiHXfK0deJxIO7QjTi1yyfKU8relBE7uzY=)
                          2: e6f9pqaSI2wiP3TWPqe7n-8vEnQ.crl (hash: h/TK6IVzVzrPdVD4SjgPn73+EiEHmcTVig6sup0ziVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:3c:a0:50:4d:92:80:ad:19:8f:86:6a:8e:eb:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba7fda6a692236c223f74d63ea7bb9fef2f1274
        Validity
            Not Before: Jul 27 01:01:33 2025 GMT
            Not After : Jul 28 01:01:33 2025 GMT
        Subject: CN=61613101da98d6f34719779ef2878f0f84d76b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:99:8e:90:90:59:e1:8d:04:5c:a7:b7:d7:c6:
                    1d:4a:c9:74:0e:68:9f:c4:eb:67:61:85:27:d3:96:
                    57:f3:3b:01:14:94:0e:0b:97:43:92:e1:31:93:f1:
                    94:ed:d4:de:9c:e9:75:94:46:93:44:5c:e6:d6:f0:
                    6f:62:13:bb:df:47:72:83:a6:18:8f:4b:5b:71:b4:
                    0f:41:b3:57:4f:15:dd:1c:42:12:25:92:9c:08:2c:
                    9c:f9:11:c9:d4:16:b1:6f:84:1c:8b:f1:84:a1:0f:
                    53:d2:00:e2:52:93:ea:47:9e:31:5f:ba:84:f7:0c:
                    0f:f7:00:43:01:79:c9:ac:17:1a:e3:d1:e5:dc:bb:
                    d2:15:16:88:4e:07:2f:c1:ba:21:f4:78:06:c1:bd:
                    21:68:65:56:fd:3d:78:44:74:3a:0f:8c:d7:15:8f:
                    69:1f:4b:2a:24:14:e5:15:24:50:b4:4b:35:5d:4e:
                    7c:ae:e0:ef:cf:89:09:b3:0f:38:17:01:f6:b3:04:
                    1a:54:ae:80:cd:fc:59:8b:4d:47:57:d4:a1:14:11:
                    42:cb:89:63:03:d8:b8:cc:8c:57:c5:2f:c7:c7:17:
                    5d:ac:a7:f8:ca:22:97:fd:84:1c:ca:8e:05:33:78:
                    f3:3c:78:3c:6d:c1:83:9e:19:7f:da:86:02:3b:98:
                    c9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:61:31:01:DA:98:D6:F3:47:19:77:9E:F2:87:8F:0F:84:D7:6B:5B
            X509v3 Authority Key Identifier:
                keyid:7B:A7:FD:A6:A6:92:23:6C:22:3F:74:D6:3E:A7:BB:9F:EF:2F:12:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:19:49:d9:47:47:fd:fd:f4:54:ec:d6:ab:a8:cb:c3:f5:2b:
         43:56:a7:c3:dd:d6:72:97:e5:e8:18:b5:82:4c:96:49:e8:1a:
         e1:91:5d:e8:a5:37:02:11:36:fc:b6:12:38:3d:e4:59:92:98:
         b0:94:1b:99:c5:2c:46:78:88:ab:ed:2d:73:58:e8:ce:82:87:
         cc:ca:ae:69:79:37:56:4b:2f:4a:6c:58:bf:ff:3c:b9:90:8f:
         5e:62:be:42:af:0f:17:f9:f4:57:2f:35:f8:c0:12:e1:6a:76:
         2f:ac:ff:4e:39:b9:3a:01:24:27:19:e2:28:11:c1:b1:d2:ca:
         65:91:8d:1f:5c:70:6b:a9:de:72:33:b1:37:3e:7e:b9:6d:ab:
         9b:fc:25:99:cc:6b:d1:37:fe:60:8e:45:60:39:16:6a:5a:97:
         9d:3f:89:74:5c:26:4c:83:59:ea:cf:15:cc:e3:24:86:0e:4e:
         2c:57:71:e0:fb:93:2e:88:01:e5:d9:02:90:c3:cc:77:8b:ef:
         68:f8:3d:07:96:dd:0f:56:57:64:2f:3e:73:6d:24:17:c0:6e:
         08:62:23:d0:22:0e:f7:6a:e8:14:28:e5:74:c4:2e:60:fe:60:
         d1:ff:43:4c:51:1a:e4:50:89:a5:6a:7b:71:00:99:a2:ae:59:
         e8:d0:df:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:48:19 2025 by rpki-client