Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
File:                     6Zam_9rVzrJiZhe9btnE7FcdDzo.mft (raw, json)
Hash identifier:          fLjKGrSI1xYAqW+VW5N1x5fj1mkDD6Q5RNhhjxQ4WZM=
Subject key identifier:   8E:57:0C:A4:EF:02:83:3F:80:3F:EE:E7:6D:53:E0:85:6C:C4:D3:40
Authority key identifier: E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A
Certificate issuer:       /CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
Certificate serial:       01991808F7F5C8026CE2F3433C816C2FEDA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
Manifest number:          1067
Signing time:             Fri 05 Sep 2025 04:01:04 +0000
Manifest this update:     Fri 05 Sep 2025 04:01:04 +0000
Manifest next update:     Sat 06 Sep 2025 04:01:04 +0000
Files and hashes:         1: 0DP07uLmhCaYUKz4-De4vVyiQvU.roa (hash: tLlgxWvlov28mbUFOnnNCCYCPUkvTsTiijysrOZYrbM=)
                          2: 6Zam_9rVzrJiZhe9btnE7FcdDzo.crl (hash: oGN9WfQohDpovZFE7mRsCk5K4Rtm3Yd2QTGSI87cfa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:18:08:f7:f5:c8:02:6c:e2:f3:43:3c:81:6c:2f:ed:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
        Validity
            Not Before: Sep  5 04:01:04 2025 GMT
            Not After : Sep  6 04:01:04 2025 GMT
        Subject: CN=8e570ca4ef02833f803feee76d53e0856cc4d340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7e:3c:13:95:08:b2:9f:64:74:3e:7a:de:e0:
                    85:e3:6f:78:f6:71:ef:96:9d:0f:44:ec:16:f3:63:
                    5b:97:c5:d0:55:5b:18:e6:cc:45:c9:42:c2:9c:2a:
                    df:4c:ad:20:8b:e4:87:a2:cd:ca:cc:65:62:bd:cc:
                    91:89:1d:48:9b:d1:51:bd:c2:ce:e5:9c:89:39:83:
                    46:db:37:22:cc:32:0a:72:f5:48:61:10:94:72:eb:
                    55:c9:6c:6f:f8:1b:a8:10:7e:4d:69:ac:d3:1f:15:
                    fa:7f:6a:6e:0c:64:a5:e7:26:3a:38:6f:6c:28:b8:
                    e7:38:cd:08:51:bc:70:45:7e:cf:ff:c5:58:bc:f0:
                    ba:e0:59:ac:9c:9c:c0:4e:66:23:d1:b4:87:40:0c:
                    76:c8:0b:b6:be:18:04:57:92:a8:57:15:6a:38:f1:
                    b9:51:3e:82:69:65:d0:79:79:0b:51:15:b9:7d:3d:
                    13:18:0b:4c:ef:71:5c:1d:f3:5e:39:ae:7b:c6:58:
                    78:40:f2:8a:8a:5d:27:f2:23:c5:4a:6d:06:32:b9:
                    17:7b:e6:0d:bb:af:37:4f:07:b0:1a:89:62:30:0f:
                    bb:58:af:c5:6c:94:48:45:f1:59:cc:7d:7e:b7:1a:
                    d7:e3:dd:7a:c8:08:48:b4:95:fd:8b:01:87:58:aa:
                    2d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:57:0C:A4:EF:02:83:3F:80:3F:EE:E7:6D:53:E0:85:6C:C4:D3:40
            X509v3 Authority Key Identifier:
                keyid:E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:7e:87:0a:86:57:17:3b:64:73:4a:0d:b1:60:e5:0c:bb:d9:
         d8:ae:b2:2d:d4:66:33:2b:94:2e:7c:b0:3c:1b:ea:32:af:8b:
         18:e5:d0:6e:24:6e:06:72:7a:a4:b2:91:1c:fe:3c:8b:f0:fb:
         8c:a8:cd:c3:f2:c0:e2:1f:08:7f:08:c3:7a:d4:9d:a1:79:67:
         02:c7:af:ff:78:75:09:60:b5:ef:d3:16:dc:65:59:33:70:b9:
         1f:5a:fb:a9:7f:b9:04:7d:77:00:d9:93:9a:b8:ca:39:e0:f6:
         a8:5e:6e:42:aa:05:a4:75:d5:6a:7b:42:60:a8:18:66:bf:4e:
         49:05:56:05:4a:79:a0:34:21:f9:83:f2:7f:1d:88:66:ca:52:
         ea:56:9e:fe:95:18:60:e9:b8:9c:eb:30:81:db:2e:e0:3b:c1:
         ce:c0:a9:58:e8:65:3c:5c:00:7a:f2:ee:34:b5:a2:c3:73:c6:
         80:6b:76:1b:c1:86:7c:3c:1f:36:12:b9:7f:6b:82:4a:28:a1:
         a5:d9:20:22:45:6b:f2:94:b4:e0:ed:fb:80:60:d0:52:9a:81:
         f0:25:7a:d8:e0:65:45:94:a1:71:ea:85:59:ff:9b:f6:ad:ce:
         cb:ab:36:02:3b:37:36:4c:72:4b:e2:69:f2:d2:d6:e5:00:c1:
         c5:62:40:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:05:24 2025 by rpki-client