Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
File:                     p6dweK84e0jXCBDrFgTfCt4Rj9o.mft (raw, json)
Hash identifier:          bDbknf9VdygS1ciZoe26mQKVM2sBEaKFQi/41+3XkA8=
Subject key identifier:   E6:E2:AD:BB:69:02:63:62:91:AB:52:C5:2A:A6:E8:55:E2:6E:89:D7
Authority key identifier: A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA
Certificate issuer:       /CN=a7a77078af387b48d70810eb1604df0ade118fda
Certificate serial:       0198477838B8A2A218F942D01BBCE384E7B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
Manifest number:          1240
Signing time:             Sat 26 Jul 2025 16:01:57 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:57 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:57 +0000
Files and hashes:         1: 9xMeWe1NRlriC37gII2JZoSHiUQ.roa (hash: v9S3o8GCSV8SJhwMOSoO5rVmagcl/wlT4/BQbEi4mBI=)
                          2: p6dweK84e0jXCBDrFgTfCt4Rj9o.crl (hash: CRJMp+XPW0aa0RDRSGgcreTbEM5XijXD4M+ujKeAgIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:78:38:b8:a2:a2:18:f9:42:d0:1b:bc:e3:84:e7:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a77078af387b48d70810eb1604df0ade118fda
        Validity
            Not Before: Jul 26 16:01:57 2025 GMT
            Not After : Jul 27 16:01:57 2025 GMT
        Subject: CN=e6e2adbb6902636291ab52c52aa6e855e26e89d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:78:09:c1:84:00:2d:a1:aa:5b:04:52:89:51:
                    f4:6d:c0:70:17:51:d5:36:98:2c:4a:91:5b:06:a6:
                    34:da:fb:0b:72:fd:57:5c:cb:7a:da:7e:9f:69:47:
                    32:00:14:50:17:b0:4e:e0:db:1b:9a:bb:d0:9b:ff:
                    40:63:63:e4:f3:ba:9d:23:44:00:53:1f:ee:c9:c1:
                    07:45:2e:fe:49:18:09:e1:15:56:c2:f7:98:bb:0f:
                    5f:c6:a8:4f:ce:a0:13:84:cd:59:9d:60:37:2c:bc:
                    66:13:1e:f8:df:b4:5c:f4:d7:72:d3:76:e3:ec:25:
                    2b:ba:71:70:40:ca:78:df:d3:e6:0d:c9:09:f2:78:
                    a3:16:47:f1:84:91:9b:dd:6e:91:28:f0:9b:1a:e6:
                    bf:05:04:64:13:e5:63:eb:80:a2:15:3c:e5:0d:d5:
                    31:1d:01:4f:06:a7:8d:52:04:3d:56:f9:b9:77:90:
                    a8:c2:56:c5:8b:eb:4e:b4:86:f4:fd:5f:2b:cc:bb:
                    bd:f5:dd:c5:11:cc:e8:0d:85:1f:d5:ee:2b:c1:dd:
                    d0:15:91:d7:2b:7c:c9:37:3c:97:b3:17:ab:0a:3a:
                    9f:91:6d:ed:7f:42:c9:50:56:c4:29:07:5b:e5:fd:
                    5d:96:35:2f:2a:bd:51:3c:a8:d9:e2:5d:d4:d0:74:
                    70:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E2:AD:BB:69:02:63:62:91:AB:52:C5:2A:A6:E8:55:E2:6E:89:D7
            X509v3 Authority Key Identifier:
                keyid:A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:ea:70:c4:6f:92:ac:39:d8:18:52:1e:88:a4:a6:3a:8e:01:
         e7:fb:88:af:fc:20:f0:d1:b9:26:c8:93:c6:d8:63:3c:08:a8:
         7b:1f:51:65:28:19:b8:7f:98:d8:c1:27:07:36:2d:10:e5:c9:
         c1:47:60:f4:ac:c0:46:a7:33:05:a9:be:44:7f:69:b1:40:2a:
         e1:f3:cc:a8:54:00:f8:53:8b:8e:39:ec:60:ef:df:d7:16:a0:
         4d:9a:5e:48:43:ae:82:01:6f:95:9b:6f:62:ad:12:2a:f1:a4:
         86:64:c4:81:de:4f:1c:e5:48:1b:86:0e:02:bc:17:19:7a:6e:
         ee:76:5a:c8:52:23:ff:1e:2f:be:a8:4c:d8:0b:d3:8d:c5:4c:
         51:6c:bb:16:94:74:70:9d:9c:8e:20:60:8b:24:18:4a:4e:93:
         cf:05:f8:f7:d8:71:e8:b7:bf:0e:bd:72:93:77:88:21:da:9b:
         39:eb:ec:48:5f:16:12:3c:57:7d:93:53:b9:3f:1f:9b:9e:ba:
         92:2a:91:0f:51:e6:57:27:49:89:33:20:f6:92:2d:29:c8:51:
         e5:6a:73:27:59:10:97:a4:a7:c5:bd:f6:6f:92:15:8c:ee:5f:
         d3:f0:68:28:14:2b:15:88:1e:52:64:cc:c9:08:2e:10:d8:c1:
         c8:f3:d9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:59:08 2025 by rpki-client