Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
File:                     b9M_nmhWjdYFvJKvwe9raeEnq9g.mft (raw, json)
Hash identifier:          AvkdOoa9OlsuGLGPe2mNVw9pNLi6aq+mDRbrv8VHLkA=
Subject key identifier:   8C:4C:26:B0:6E:38:76:D3:FF:61:EC:C1:F6:E9:CC:F2:8F:F0:EB:06
Authority key identifier: 6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8
Certificate issuer:       /CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8
Certificate serial:       01984A77A56639018C2DDAD7BC681109098F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
Manifest number:          0F6D
Signing time:             Sun 27 Jul 2025 06:00:11 +0000
Manifest this update:     Sun 27 Jul 2025 06:00:11 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:11 +0000
Files and hashes:         1: QgZP-cnsGLbXLiB8i-j6fiH8Sys.roa (hash: S2EGBlisrDeYdPuuPvmxq5XQnasXOcn30j5uFZy7zjM=)
                          2: b9M_nmhWjdYFvJKvwe9raeEnq9g.crl (hash: rZ1gae5yrgR1NpbG71aHtUzC8L+n5s2a7AvH1L/SCDU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:77:a5:66:39:01:8c:2d:da:d7:bc:68:11:09:09:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8
        Validity
            Not Before: Jul 27 06:00:11 2025 GMT
            Not After : Jul 28 06:00:11 2025 GMT
        Subject: CN=8c4c26b06e3876d3ff61ecc1f6e9ccf28ff0eb06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a8:8a:ad:09:5e:93:c2:38:40:01:e4:25:3b:
                    8d:77:24:db:da:15:2e:f7:69:71:42:df:48:4d:9d:
                    41:9a:fb:d0:be:ed:a5:3e:2c:b4:1e:d7:ed:42:b9:
                    6d:4b:f0:e8:e0:c4:0e:75:43:4f:2d:00:8b:59:31:
                    3d:f6:ee:c1:f0:7d:b0:3f:ce:d6:4d:1c:78:6a:ae:
                    75:f0:11:37:8c:8a:46:76:ed:57:2c:3b:1b:c8:9d:
                    a1:96:07:e5:a8:49:a8:46:af:cb:f9:80:7d:c4:a0:
                    6d:3d:fd:28:2b:21:de:47:34:37:c1:07:5f:00:cf:
                    90:a2:19:97:f2:a8:bf:05:03:09:93:69:24:18:4f:
                    44:e7:b2:df:c7:e8:4a:60:5b:6f:74:d4:bd:92:4f:
                    aa:79:2a:49:02:3f:b3:60:cb:9e:a9:74:d8:07:bf:
                    1c:b2:c7:b6:3e:e1:4b:c9:0e:c3:17:2e:ec:32:fe:
                    39:45:78:7d:f8:ab:9e:4e:b1:fb:cf:3e:e7:de:16:
                    8b:5c:4d:e0:cf:96:bb:23:6d:21:be:9d:4d:76:e6:
                    54:9a:3f:a2:2f:71:8d:0f:8f:7e:fa:6d:80:37:f0:
                    60:f4:24:08:29:a2:e0:93:2a:61:a8:17:ff:91:b5:
                    62:37:71:9e:7c:fb:15:84:68:c1:a4:1f:95:82:c3:
                    73:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4C:26:B0:6E:38:76:D3:FF:61:EC:C1:F6:E9:CC:F2:8F:F0:EB:06
            X509v3 Authority Key Identifier:
                keyid:6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:52:1d:ce:a9:a9:06:81:15:9f:07:5b:87:ad:61:18:ec:2c:
         d7:b2:03:75:f9:00:f1:00:ed:44:eb:4a:b1:51:08:9a:b3:72:
         8f:83:26:56:31:73:4a:8b:6e:07:89:73:91:31:33:1e:c5:12:
         b0:4e:eb:a6:0a:a6:10:f8:a3:4a:06:e9:64:bd:ee:e3:fc:cf:
         63:30:14:50:08:83:da:7e:d7:5a:fb:22:d5:a2:ac:34:fb:d0:
         48:6f:18:a4:c3:24:19:4f:31:68:07:3a:33:2f:bd:82:e5:f0:
         02:61:ae:96:ec:95:65:b8:d2:84:05:c5:42:e4:32:40:c4:28:
         86:9b:4e:eb:3f:59:e7:c4:4a:62:93:8d:9a:2f:5e:90:0d:1f:
         21:c4:a4:40:ab:6a:05:af:7e:76:04:53:f7:3a:fd:04:60:60:
         5d:a6:d1:14:d0:84:5a:c2:2b:ef:ac:2b:2d:9f:0f:06:78:bb:
         2d:6c:a1:ec:85:9a:c8:11:8a:09:14:91:94:58:f5:97:d3:7b:
         65:9d:5d:40:15:f2:1c:fc:41:31:39:e7:7d:e9:d1:2f:18:1c:
         e9:a3:9b:08:c9:b6:24:f8:43:ca:24:64:54:b6:a1:b1:a4:94:
         d9:0f:c6:9f:25:ca:d2:8d:e7:e4:7c:3f:8c:a6:02:11:f6:70:
         3c:22:62:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:59:19 2025 by rpki-client