Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
File:                     6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft (raw, json)
Hash identifier:          H/hPZO0bJKPVOFByj/w0HzJFZCybmPXWe3PeePzW+WM=
Subject key identifier:   8D:05:F0:9F:BD:E4:E2:41:65:90:2A:61:8E:32:B1:62:05:1E:41:99
Authority key identifier: E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
Certificate issuer:       /CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Certificate serial:       01984E8B620C891C925C18BC27AFF405F429
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
Manifest number:          158B
Signing time:             Mon 28 Jul 2025 01:00:14 +0000
Manifest this update:     Mon 28 Jul 2025 01:00:14 +0000
Manifest next update:     Tue 29 Jul 2025 01:00:14 +0000
Files and hashes:         1: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl (hash: eDIYKrxDq8jGnVyOdii8jhG5dOLdQ+0WUUlPyrnKlFI=)
                          2: rvzjyC9muvr4migx_xtUIzZ2FRM.roa (hash: 2jsltHZ+YtkUSfR/OVprtu2235QmWCtb64qQWKzazWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4e:8b:62:0c:89:1c:92:5c:18:bc:27:af:f4:05:f4:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
        Validity
            Not Before: Jul 28 01:00:14 2025 GMT
            Not After : Jul 29 01:00:14 2025 GMT
        Subject: CN=8d05f09fbde4e24165902a618e32b162051e4199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d6:14:e0:56:7d:ea:87:22:8e:f9:1a:18:64:
                    9e:4c:0e:dc:5a:af:ab:07:74:cf:45:ca:7b:0d:98:
                    c3:89:af:06:40:6d:e9:ce:5e:05:07:31:80:0e:22:
                    bd:2e:38:c4:0e:3e:38:09:0e:b6:66:7c:af:de:86:
                    c8:28:c2:63:d6:9a:8d:e3:bd:2b:de:05:ae:1a:e0:
                    e0:74:d2:60:d0:79:73:97:9b:ba:75:b6:3c:43:8c:
                    21:29:a6:5c:73:6f:ab:0f:a8:9c:2b:0d:e8:8f:86:
                    66:18:07:b3:e2:3a:c8:82:3a:e9:fc:d5:ce:f3:a2:
                    c3:a6:ea:ea:66:d0:2f:9c:c1:95:a9:7b:6c:76:28:
                    4f:6b:7f:b8:f4:c6:65:06:e9:66:c7:df:79:30:77:
                    36:73:3b:e0:0d:82:6c:65:f1:23:88:5c:8d:91:1b:
                    cb:21:72:bc:f8:26:6c:d0:0e:0f:0e:af:dc:a3:30:
                    36:be:10:fb:45:36:5f:a2:5c:44:73:2d:de:78:de:
                    68:f4:0a:6b:3c:e4:d0:14:38:4b:68:78:31:e1:91:
                    73:88:70:28:75:e4:a7:22:45:8c:01:52:9c:f5:50:
                    f3:28:31:9c:dd:ce:57:26:b1:ce:22:4f:1e:2f:12:
                    2f:0f:b2:4c:9f:94:86:e5:b7:65:bb:1a:aa:83:e9:
                    22:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:05:F0:9F:BD:E4:E2:41:65:90:2A:61:8E:32:B1:62:05:1E:41:99
            X509v3 Authority Key Identifier:
                keyid:E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:6d:2e:d1:0e:0b:3b:a2:01:08:5c:ad:1d:bf:d7:94:61:2d:
         95:bb:e2:b7:a1:5e:8d:ed:14:a8:c0:f0:40:b9:dc:30:21:d3:
         80:50:34:9e:bb:8c:bd:28:36:25:10:51:0d:72:31:58:66:a1:
         af:a6:7a:b7:45:d6:c9:24:28:17:34:ba:c7:83:5f:59:09:0e:
         9a:af:20:4f:df:56:3d:b1:37:89:c1:6d:f9:da:ea:80:8a:82:
         a8:3a:b9:1a:94:70:c8:c1:9a:e4:4a:83:2a:05:57:ed:c6:90:
         d5:e1:2d:79:cd:3e:a4:d4:86:46:e4:33:5c:11:3a:51:32:25:
         6b:54:dc:e2:87:73:08:c2:ee:36:11:10:24:bb:78:fb:f0:ee:
         b3:a8:4b:73:82:49:8d:56:10:be:dc:92:eb:31:80:53:65:50:
         a0:bc:3a:23:d5:55:4d:59:e0:e7:86:bb:35:77:4a:a8:f9:9c:
         f6:5e:33:ba:e9:ac:0f:0d:62:bb:7f:4c:c1:8c:ee:97:9f:6e:
         d4:2f:45:a5:2a:28:2b:bb:c1:3c:fd:f6:4d:c2:81:29:49:23:
         cb:62:ad:cc:b3:25:89:e8:57:2a:d6:68:38:33:6a:70:c9:43:
         79:f3:87:62:90:10:00:ba:96:2d:b4:c7:ba:17:4b:6d:4d:07:
         ff:fe:47:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhOi2IMiRySXBi8J6/0BfQpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZWQ2MDJmZDBkNDZkMzhjZGUxZTczMmM2NTJlYTk5NThl
OTc2OTEwHhcNMjUwNzI4MDEwMDE0WhcNMjUwNzI5MDEwMDE0WjAzMTEwLwYDVQQD
Eyg4ZDA1ZjA5ZmJkZTRlMjQxNjU5MDJhNjE4ZTMyYjE2MjA1MWU0MTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tYU4FZ96ocijvkaGGSeTA7cWq+r
B3TPRcp7DZjDia8GQG3pzl4FBzGADiK9LjjEDj44CQ62Znyv3obIKMJj1pqN470r
3gWuGuDgdNJg0Hlzl5u6dbY8Q4whKaZcc2+rD6icKw3oj4ZmGAez4jrIgjrp/NXO
86LDpurqZtAvnMGVqXtsdihPa3+49MZlBulmx995MHc2czvgDYJsZfEjiFyNkRvL
IXK8+CZs0A4PDq/cozA2vhD7RTZfolxEcy3eeN5o9AprPOTQFDhLaHgx4ZFziHAo
deSnIkWMAVKc9VDzKDGc3c5XJrHOIk8eLxIvD7JMn5SG5bdluxqqg+kiuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0F8J+95OJBZZAqYY4ysWIFHkGZMB8GA1UdIwQY
MBaAFOjtYC/Q1G04zeHnMsZS6plY6XaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk8xZ0w5RFViVGpONGVjeXhsTHFtVmpwZHBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9iNjQwOWItMTYzOC00YzdhLTgxZjIt
OTRmOGZiMzAwOWYyLzEvNk8xZ0w5RFViVGpONGVjeXhsTHFtVmpwZHBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9iNjQwOWItMTYzOC00YzdhLTgxZjItOTRmOGZiMzAwOWYy
LzEvNk8xZ0w5RFViVGpONGVjeXhsTHFtVmpwZHBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI20u0Q4L
O6IBCFytHb/XlGEtlbvit6Feje0UqMDwQLncMCHTgFA0nruMvSg2JRBRDXIxWGah
r6Z6t0XWySQoFzS6x4NfWQkOmq8gT99WPbE3icFt+drqgIqCqDq5GpRwyMGa5EqD
KgVX7caQ1eEtec0+pNSGRuQzXBE6UTIla1Tc4odzCMLuNhEQJLt4+/Dus6hLc4JJ
jVYQvtyS6zGAU2VQoLw6I9VVTVng54a7NXdKqPmc9l4zuumsDw1iu39MwYzul59u
1C9FpSooK7vBPP32TcKBKUkjy2KtzLMliehXKtZoODNqcMlDefOHYpAQALqWLbTH
uhdLbU0H//5H0g==
-----END CERTIFICATE-----
Generated at Mon Jul 28 05:59:00 2025 by rpki-client