Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
File:                     bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft (raw, json)
Hash identifier:          q/e7ikF4dornD1Md9L72ODCoq5eLDBsSR4MSYMfSMOs=
Subject key identifier:   9F:D6:15:EA:65:76:FB:98:BD:31:96:4D:4B:03:FD:05:9D:F4:0F:C7
Authority key identifier: 6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74
Certificate issuer:       /CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74
Certificate serial:       01983CF324F248F75D4521D98C8060825799
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
Manifest number:          02B6
Signing time:             Thu 24 Jul 2025 15:00:24 +0000
Manifest this update:     Thu 24 Jul 2025 15:00:24 +0000
Manifest next update:     Fri 25 Jul 2025 15:00:24 +0000
Files and hashes:         1: MYDLO2vvDKfPNW5B_jde2eQkJYg.roa (hash: wV9kbvDo8W5gfhdwsvfFoAGi3mrp4nPR/cUxhX5vacM=)
                          2: bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl (hash: 1P9XU7f9RryCpdxlKRoHpsfrQrTn9uWb9PZ0vyq+1v0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 15:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3c:f3:24:f2:48:f7:5d:45:21:d9:8c:80:60:82:57:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74
        Validity
            Not Before: Jul 24 15:00:24 2025 GMT
            Not After : Jul 25 15:00:24 2025 GMT
        Subject: CN=9fd615ea6576fb98bd31964d4b03fd059df40fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:22:f3:b0:c8:70:53:2e:b7:95:55:c0:f7:f1:
                    07:5b:70:fa:35:e4:35:db:3e:7e:b7:ed:b8:57:0e:
                    c2:ab:ad:01:5b:8c:b7:82:7a:81:14:e9:b3:4e:fb:
                    8e:a1:d3:3f:38:87:57:c4:04:39:d4:82:e3:ad:ac:
                    88:8b:5a:6a:ab:80:84:62:16:71:f2:54:85:49:0c:
                    eb:4d:d2:d1:b4:a8:9c:5d:5e:5b:74:75:3f:b5:31:
                    07:a9:d8:f1:e1:c6:cf:21:9c:2f:01:50:87:7f:5d:
                    e1:78:0c:96:55:9c:e2:44:e2:a1:bf:ef:41:63:01:
                    af:cb:e1:6d:2c:a8:9d:fb:dc:d2:9e:92:99:45:68:
                    b5:7d:43:59:1e:96:67:ee:e2:03:0d:37:f9:fa:e2:
                    53:ef:7c:50:a9:46:37:17:62:89:28:69:d2:6d:9f:
                    a9:25:5c:e7:66:b2:cf:f7:e3:d3:0d:ef:f0:52:31:
                    37:a0:2b:55:98:61:6f:cd:9b:77:9c:d9:36:60:17:
                    e7:a8:a2:95:55:5a:a9:c6:dd:99:d1:ce:aa:62:63:
                    be:c4:00:f2:12:3f:c8:d7:e7:c9:b6:34:32:d2:a9:
                    44:b6:d0:75:da:6d:50:7d:a6:67:6d:f3:f9:34:91:
                    9d:73:00:f2:0c:a1:30:98:bf:4f:4c:04:9a:4c:35:
                    87:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D6:15:EA:65:76:FB:98:BD:31:96:4D:4B:03:FD:05:9D:F4:0F:C7
            X509v3 Authority Key Identifier:
                keyid:6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:9d:74:dc:14:17:05:b3:4e:41:0e:bd:93:fa:c9:16:df:7c:
         2f:2e:46:da:3e:84:b4:1f:57:9f:95:b5:ad:6a:f0:4e:ef:78:
         d3:a6:5f:43:b2:a2:06:f7:3f:25:a3:df:74:da:52:17:9f:cf:
         35:8a:12:c1:0e:97:6d:8b:1f:f2:ce:7c:26:fc:a0:89:13:c9:
         02:85:f7:d7:be:b4:0d:10:2e:52:05:9b:b2:58:0f:d2:1f:c9:
         bd:5c:00:ae:57:24:8e:b2:a8:06:8d:99:11:82:40:db:01:9f:
         ad:fe:46:91:6c:e8:64:01:98:41:d0:ca:96:cf:8a:e2:31:a5:
         3b:5d:d1:38:5b:af:d2:0f:4a:4b:b5:a0:f5:a1:7d:e8:8c:64:
         4e:ab:2d:d2:69:e4:02:80:f3:81:8d:c9:a9:62:e6:c6:09:b5:
         12:b2:43:40:04:76:76:e7:56:2b:02:d6:8e:4a:7c:75:d6:d6:
         8e:d4:b8:6e:20:e9:7a:76:00:78:74:e2:2f:45:98:23:a3:8c:
         5c:4c:05:90:d1:1b:92:9e:42:4b:d1:3d:77:40:52:5c:e1:e8:
         ab:e4:8f:67:3f:a4:0f:2d:cf:01:c6:e1:3c:1f:03:7a:e2:f0:
         f3:aa:a4:7f:49:7b:87:ef:fb:7a:13:bd:19:6a:f1:ea:1b:09:
         f0:f6:3c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:37:07 2025 by rpki-client