Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
File:                     6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft (raw, json)
Hash identifier:          tb1oH+fzjRZluLI25h9JrfO3rWD1sW/NIt2HIAiw8Mw=
Subject key identifier:   FE:35:0F:E6:2E:BC:1E:6D:11:99:F5:53:D8:45:08:1E:B1:5B:46:4F
Authority key identifier: E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8
Certificate issuer:       /CN=e8d878aa53081893ba528524ef143ea9271392b8
Certificate serial:       01984A410D44BF97CE0697917393EFE42297
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
Manifest number:          1600
Signing time:             Sun 27 Jul 2025 05:00:33 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:33 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:33 +0000
Files and hashes:         1: 5sx0qR-B9y6mGDgRbtSLnw5KGsw.roa (hash: Nyr6wmMl755m5pBB7dzD6+3NgxbHjvOEn2wkeXz+Yqw=)
                          2: 6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl (hash: k94ExZdveoyzHBx8hu/CoD8nFIxq52VY5+1YmLR/knQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:0d:44:bf:97:ce:06:97:91:73:93:ef:e4:22:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8d878aa53081893ba528524ef143ea9271392b8
        Validity
            Not Before: Jul 27 05:00:33 2025 GMT
            Not After : Jul 28 05:00:33 2025 GMT
        Subject: CN=fe350fe62ebc1e6d1199f553d845081eb15b464f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9a:97:a0:28:c9:f6:30:b0:73:ae:cd:37:b6:
                    35:10:04:44:ae:fe:13:2f:2a:db:d9:a5:0f:0e:88:
                    66:5f:74:46:69:96:b0:d8:7f:88:ea:90:4a:6f:f6:
                    50:03:6e:ad:fe:22:8d:7f:26:b8:d3:92:21:f1:03:
                    52:0e:ba:76:a2:bd:68:f0:3d:4d:a8:d0:40:96:6c:
                    42:ae:40:31:5f:dd:14:51:29:3e:3e:e7:cb:ea:4a:
                    00:27:27:14:9d:3a:31:92:7b:41:d2:9a:76:0c:b3:
                    84:4e:da:53:a1:70:5a:47:20:23:76:0c:fd:40:67:
                    04:46:f5:2e:2a:9c:31:44:1e:02:ee:11:29:3e:d7:
                    84:17:a1:b4:18:2f:da:5c:aa:ae:9e:e7:5c:f8:3e:
                    c4:e4:fa:9c:04:25:6d:fb:f5:4b:05:64:7b:df:84:
                    ec:89:1d:38:12:e8:2e:7f:f9:f6:ac:96:bf:47:14:
                    07:de:e8:2d:0d:2a:59:23:86:c3:19:ee:9b:1e:c4:
                    84:76:b7:73:0d:a8:9c:83:84:71:c3:45:e9:bd:2c:
                    b8:da:5a:77:55:b0:f6:d2:e6:fa:c8:95:b6:80:8a:
                    52:6f:7a:5e:ff:72:7e:a9:ab:d5:1b:53:3b:53:43:
                    c6:20:e9:bd:6c:0b:82:ac:c7:8f:08:0d:e9:c8:82:
                    79:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:35:0F:E6:2E:BC:1E:6D:11:99:F5:53:D8:45:08:1E:B1:5B:46:4F
            X509v3 Authority Key Identifier:
                keyid:E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:7b:a7:7f:d0:44:11:b7:40:15:bf:63:ec:e5:d9:ac:94:e7:
         15:dd:4c:7a:39:f9:b3:cc:b0:29:c1:e1:d4:b7:5d:3c:29:26:
         ba:06:eb:5b:6c:15:fc:70:4e:2b:97:6e:a3:3b:05:70:85:fc:
         45:66:7a:28:55:dc:e5:57:4b:08:86:98:b7:f2:62:9f:fe:9d:
         b7:af:c7:b2:ed:8b:eb:a5:e4:44:ae:8e:a1:42:96:da:5b:ea:
         37:9c:1e:6f:fd:8a:2e:a3:9c:48:1d:71:8a:41:e6:7f:4b:68:
         ef:ec:84:82:4e:2d:08:da:61:ea:14:16:6d:1b:f6:ad:7d:89:
         3d:96:c0:48:a9:12:54:f5:ce:11:9a:dc:0b:3e:6c:f2:ae:e7:
         9e:69:7a:2f:0f:12:75:48:29:c7:f3:c9:87:6f:f0:f6:d6:df:
         a9:9a:0c:fa:5a:5c:16:01:d0:ce:71:0a:49:36:f2:17:5b:42:
         95:c1:3e:3d:2d:9f:86:09:4f:b5:ec:76:95:b8:48:a7:64:14:
         c4:b0:ed:9c:af:1d:ae:15:5e:fe:b8:9e:e0:25:02:c9:39:77:
         ce:89:d4:a2:8c:77:0a:f2:0c:c6:d2:96:22:13:92:d3:40:f4:
         b2:8d:eb:d8:14:6c:5e:28:af:39:b7:1d:bc:f4:70:9a:dc:05:
         25:d2:1e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:32:36 2025 by rpki-client