Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
File:                     6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft (raw, json)
Hash identifier:          c3yx1zBf2Yav92PEIlEkGRKMKMONIQOQ2/Gi2ePglbc=
Subject key identifier:   B4:D8:7B:36:78:D6:97:E0:1A:5A:85:73:EA:0D:EA:53:0D:CC:22:83
Authority key identifier: E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87
Certificate issuer:       /CN=e8f239a70043734172d26378bf2106ae72552187
Certificate serial:       019848F73887715DC925518FFC55C19AB7BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
Manifest number:          1603
Signing time:             Sat 26 Jul 2025 23:00:18 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:18 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:18 +0000
Files and hashes:         1: 6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl (hash: vmGdtqwq+EqMyBFo2ezRn5oktIWpBQEEQ1/by1F1V34=)
                          2: _rOeYqbasUbg4wEPxQv2jbf1rDs.roa (hash: QqZ9iY31p0jdqPdmJMdj1h5d+9EiWy2N5/wKWyWJKZc=)
                          3: oWADFTlHdFGaImpVaeuI3PTES70.roa (hash: ocNMe2JAUFkx91R2NARDArJ9m07CtxuPNuzV6BlyWig=)
                          4: uoGc2nJpk2UpZyfHZzcx7uBg-dw.roa (hash: YbLz65VSnoZrUAyODriZg6tIX0t6U/Eu072okI1A/7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:38:87:71:5d:c9:25:51:8f:fc:55:c1:9a:b7:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f239a70043734172d26378bf2106ae72552187
        Validity
            Not Before: Jul 26 23:00:18 2025 GMT
            Not After : Jul 27 23:00:18 2025 GMT
        Subject: CN=b4d87b3678d697e01a5a8573ea0dea530dcc2283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:86:11:51:26:2b:ff:bc:75:a5:c4:f3:11:
                    51:42:c1:48:a8:97:1e:48:d5:1f:ac:c0:83:06:84:
                    e0:60:1e:26:ef:b3:25:a0:66:c3:89:7e:57:f7:37:
                    70:88:0c:d0:fb:ba:e8:5a:1d:b0:0c:9d:4e:0b:0d:
                    cb:5d:bd:c2:65:1a:e5:45:7a:a0:53:c3:df:94:36:
                    4e:18:5b:23:7f:05:cf:ca:cd:a0:20:f4:5a:7d:fc:
                    a3:13:40:cb:1d:80:a5:39:6c:a8:ad:6a:d0:1b:8e:
                    2d:0f:09:41:36:89:7f:ac:ff:c4:46:3f:75:bc:e0:
                    2f:50:99:75:f3:b2:fa:ff:dd:ec:0f:d8:d4:87:7b:
                    98:60:03:c3:1a:92:7b:d7:e8:33:76:8a:6c:18:1c:
                    c5:e3:8b:af:34:f7:4b:31:90:a3:fd:ec:00:2d:dc:
                    f4:d4:b4:cd:80:19:7c:39:1e:e9:95:48:3f:fc:76:
                    f2:7c:d1:a5:d4:ff:38:43:b8:6f:73:3c:b2:76:a7:
                    22:92:26:1f:24:30:44:b9:8a:7e:94:bb:96:c2:39:
                    43:0f:0f:f3:7d:3c:f9:cb:9c:59:31:87:cc:d2:8c:
                    57:0a:93:ac:85:b6:ac:95:99:5d:d7:68:5b:5c:bb:
                    d0:7f:12:ff:42:26:62:02:7d:3f:4f:b4:dd:93:c5:
                    93:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D8:7B:36:78:D6:97:E0:1A:5A:85:73:EA:0D:EA:53:0D:CC:22:83
            X509v3 Authority Key Identifier:
                keyid:E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:4a:51:71:b3:c7:7b:e9:e5:0a:61:b6:11:9c:ab:70:67:79:
         0b:f8:4e:bd:c7:c0:06:c5:33:d4:3b:71:e2:d1:34:f6:4f:85:
         d3:3b:d6:93:34:14:25:c5:67:32:57:e3:94:c1:63:1c:7f:d4:
         25:6b:57:65:60:ef:49:eb:f2:ff:79:70:2c:39:17:c7:21:55:
         71:34:c4:60:ee:3c:15:de:38:be:26:4f:a1:20:ca:33:8c:70:
         ec:9b:b4:8f:3b:75:d5:40:0a:90:7d:f8:f6:d2:b3:28:95:c7:
         48:13:13:74:87:a7:b2:ce:0e:d7:11:c6:39:4d:6d:d3:9b:42:
         6c:62:ed:eb:b8:60:9a:45:bc:e5:4d:46:27:f5:82:d5:6d:95:
         d1:1d:0a:37:fe:ee:23:8e:02:8e:a4:69:48:c2:d3:f2:60:8a:
         34:c0:14:47:3e:9d:57:2b:dd:89:bf:e3:8c:f7:89:ff:52:d5:
         df:22:27:27:79:95:f2:b6:14:0e:06:04:3d:1e:6f:df:b8:63:
         d5:d2:0c:69:ab:c3:49:f5:ab:b0:60:be:fa:ec:8f:9d:6b:bc:
         55:c0:04:05:67:5c:e8:54:18:35:d4:bf:21:a8:13:b2:28:49:
         57:f0:1e:92:cb:96:e2:b5:eb:7c:bc:1b:d8:a5:ff:84:7a:ea:
         4c:94:20:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI9ziHcV3JJVGP/FXBmre7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZjIzOWE3MDA0MzczNDE3MmQyNjM3OGJmMjEwNmFlNzI1
NTIxODcwHhcNMjUwNzI2MjMwMDE4WhcNMjUwNzI3MjMwMDE4WjAzMTEwLwYDVQQD
EyhiNGQ4N2IzNjc4ZDY5N2UwMWE1YTg1NzNlYTBkZWE1MzBkY2MyMjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhiGEVEmK/+8daXE8xFRQsFIqJce
SNUfrMCDBoTgYB4m77MloGbDiX5X9zdwiAzQ+7roWh2wDJ1OCw3LXb3CZRrlRXqg
U8PflDZOGFsjfwXPys2gIPRaffyjE0DLHYClOWyorWrQG44tDwlBNol/rP/ERj91
vOAvUJl187L6/93sD9jUh3uYYAPDGpJ71+gzdopsGBzF44uvNPdLMZCj/ewALdz0
1LTNgBl8OR7plUg//HbyfNGl1P84Q7hvczyydqcikiYfJDBEuYp+lLuWwjlDDw/z
fTz5y5xZMYfM0oxXCpOshbaslZld12hbXLvQfxL/QiZiAn0/T7Tdk8WTvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTYezZ41pfgGlqFc+oN6lMNzCKDMB8GA1UdIwQY
MBaAFOjyOacAQ3NBctJjeL8hBq5yVSGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlBJNXB3QkRjMEZ5MG1ONHZ5RUdybkpWSVljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy80ZTkwMmEtMjk5Zi00ZGE3LTlhNmQt
NjY5YmQxMTNhMTc4LzEvNlBJNXB3QkRjMEZ5MG1ONHZ5RUdybkpWSVljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy80ZTkwMmEtMjk5Zi00ZGE3LTlhNmQtNjY5YmQxMTNhMTc4
LzEvNlBJNXB3QkRjMEZ5MG1ONHZ5RUdybkpWSVljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUpRcbPH
e+nlCmG2EZyrcGd5C/hOvcfABsUz1Dtx4tE09k+F0zvWkzQUJcVnMlfjlMFjHH/U
JWtXZWDvSevy/3lwLDkXxyFVcTTEYO48Fd44viZPoSDKM4xw7Ju0jzt11UAKkH34
9tKzKJXHSBMTdIenss4O1xHGOU1t05tCbGLt67hgmkW85U1GJ/WC1W2V0R0KN/7u
I44CjqRpSMLT8mCKNMAURz6dVyvdib/jjPeJ/1LV3yInJ3mV8rYUDgYEPR5v37hj
1dIMaavDSfWrsGC++uyPnWu8VcAEBWdc6FQYNdS/IagTsihJV/AeksuW4rXrfLwb
2KX/hHrqTJQgCQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 03:33:51 2025 by rpki-client