Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
File:                     b6rlVhP8iVhve9beDtygl7hhWmo.mft (raw, json)
Hash identifier:          qPNGeXP3VXeSx7f/+hkk0DyhEzj+jTUk1GEdjzUURS4=
Subject key identifier:   A0:3D:65:4E:4C:83:BB:9A:0E:D2:09:45:4D:F7:7E:5A:BC:52:6D:3B
Authority key identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
Certificate issuer:       /CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Certificate serial:       01984889B91017F7D7B1657EDAE44C684C56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
Manifest number:          096B
Signing time:             Sat 26 Jul 2025 21:00:41 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:41 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:41 +0000
Files and hashes:         1: aOtm6U59mShACrUP4z50hrZCIxk.roa (hash: 8fQIVCesiryqBUIZoQ97a4j4i55DYNAa5i2DNRlMQ5M=)
                          2: b6rlVhP8iVhve9beDtygl7hhWmo.crl (hash: uzvnKUxv4FRHZRy4sNKmwNS6WMw9ZUCENw8GwwCvUOQ=)
                          3: y4zgX7Lvz7a-J26BXsPiVoxb_IM.roa (hash: NtJpJ4/+lfRrM4AtabmrS2+ljg+xewyFLniZOgVUMdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:b9:10:17:f7:d7:b1:65:7e:da:e4:4c:68:4c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6faae55613fc89586f7bd6de0edca097b8615a6a
        Validity
            Not Before: Jul 26 21:00:41 2025 GMT
            Not After : Jul 27 21:00:41 2025 GMT
        Subject: CN=a03d654e4c83bb9a0ed209454df77e5abc526d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9e:09:05:47:c5:b3:08:85:70:b4:8d:3f:2a:
                    93:3c:17:2c:fc:16:cd:43:49:b2:7e:6a:da:94:29:
                    91:9c:30:07:bb:5b:19:c1:74:8e:e9:3e:41:66:69:
                    25:e6:4d:c9:cc:df:8f:43:50:06:8d:a8:a4:d0:02:
                    8f:21:6e:4f:93:85:0f:89:b2:5d:b2:02:05:05:2f:
                    9d:5a:7c:46:08:59:ad:04:81:78:74:50:66:df:c9:
                    7f:1f:f9:dc:38:1b:32:f4:30:1f:fe:17:ce:77:15:
                    61:4e:72:f3:11:ce:b8:c7:75:ea:bc:15:c5:2f:14:
                    9a:f4:32:30:c5:fc:48:f4:c7:ed:88:1c:f6:68:c5:
                    60:cb:60:4f:a0:df:35:bd:f1:91:c6:3a:c2:6b:a2:
                    60:c0:d3:60:4d:32:80:25:3f:c2:0f:42:9c:a4:48:
                    66:e3:e9:1e:a4:b1:d2:23:a6:5e:57:b3:28:0d:13:
                    28:14:60:d8:95:22:04:43:98:c8:c9:66:f5:7c:02:
                    a8:eb:83:7b:d4:e4:25:16:8c:91:f9:48:a9:d3:dd:
                    ec:90:da:6e:3d:8b:03:8b:33:e6:bc:c2:c2:b0:60:
                    2f:a9:e7:ed:23:a7:44:01:d6:da:00:2b:95:38:ce:
                    79:15:a0:f7:ee:41:d4:63:04:05:96:41:d6:99:2f:
                    f9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3D:65:4E:4C:83:BB:9A:0E:D2:09:45:4D:F7:7E:5A:BC:52:6D:3B
            X509v3 Authority Key Identifier:
                keyid:6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:1b:fd:f6:58:f5:db:ac:b3:fa:ef:03:a4:aa:23:18:9b:7c:
         22:a1:5c:9c:08:0f:34:84:fd:28:e8:87:45:dc:8b:5c:0b:8b:
         35:5c:47:39:ab:22:9e:f6:13:60:c6:1c:97:15:21:28:86:55:
         11:47:9f:b0:76:b9:15:b4:e6:8c:6d:78:ee:e2:47:e4:d4:e6:
         37:57:21:6f:a5:75:94:b3:5d:e8:ee:cd:c5:b3:5f:70:92:92:
         06:a0:1c:b6:93:fe:f9:df:97:6c:4e:30:ae:62:9f:66:44:2a:
         ac:2c:03:70:90:6e:6b:88:2c:07:d9:8b:ee:a2:8d:84:ca:56:
         f8:ec:90:c2:58:50:5f:88:ad:4e:76:a4:5e:de:c8:6d:ad:7f:
         6c:52:15:ce:5c:82:9e:a6:e6:7d:35:46:30:51:13:92:00:b1:
         0b:34:68:81:6f:81:40:0c:97:09:f1:fc:dd:49:f2:ca:d6:3c:
         72:19:b5:28:8d:7f:c8:e9:e3:00:68:1a:b0:20:37:9b:d7:ad:
         15:75:42:48:54:d6:f6:a8:cb:c0:f7:28:ff:8c:6e:61:db:7c:
         5a:e6:5a:a9:a8:9a:e2:98:86:d2:ee:99:a8:c6:57:12:44:6e:
         be:b5:e8:ef:b1:6c:ef:2b:a2:da:1c:eb:2c:9b:e9:84:63:c0:
         a6:c0:e6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:46:57 2025 by rpki-client