Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
File:                     d6Hu06zg_C-KoADeaHpJvv0nkdg.mft (raw, json)
Hash identifier:          JRQPPHJyAeTQ42q/6YM5LStTbejJkeJ8Joboy3L83YQ=
Subject key identifier:   75:84:6A:20:DB:E2:DC:25:C3:90:55:C1:7A:8D:24:45:04:FD:7F:47
Authority key identifier: 77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8
Certificate issuer:       /CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8
Certificate serial:       019924437D60A4F49979F41A2A070D174413
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
Manifest number:          0F61
Signing time:             Sun 07 Sep 2025 13:00:26 +0000
Manifest this update:     Sun 07 Sep 2025 13:00:26 +0000
Manifest next update:     Mon 08 Sep 2025 13:00:26 +0000
Files and hashes:         1: 1tIKgu9zIxn-X__dh7X40Ez2yro.roa (hash: I7j76og90Bzenb6NN5y/FV3ZxjjrPcp5unqi/MuouAM=)
                          2: d6Hu06zg_C-KoADeaHpJvv0nkdg.crl (hash: lZ2v1L6oZHuX0NniaLU8AZnCLMCXLvuZqV/SZPQ8mYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:24:43:7d:60:a4:f4:99:79:f4:1a:2a:07:0d:17:44:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8
        Validity
            Not Before: Sep  7 13:00:26 2025 GMT
            Not After : Sep  8 13:00:26 2025 GMT
        Subject: CN=75846a20dbe2dc25c39055c17a8d244504fd7f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:10:ee:ed:1a:0f:d0:00:ad:30:8d:b6:be:fa:
                    ed:f2:47:9c:a7:40:53:c5:47:db:3a:ca:6b:be:a1:
                    c0:fc:43:84:86:c3:0a:ee:84:fc:35:ba:c0:6c:85:
                    a3:92:24:7f:7c:8b:39:eb:f5:89:12:4c:57:b2:df:
                    f4:85:37:56:cb:9e:6d:55:87:cd:ae:8e:83:6b:d5:
                    52:56:d7:c6:dc:7b:8c:cd:cb:65:bb:2a:2d:7c:ed:
                    a5:80:a5:83:b5:dd:03:b8:3c:eb:95:e6:02:eb:ef:
                    20:1e:ef:1a:bb:aa:d4:31:ad:87:42:ed:db:c8:c1:
                    7d:87:f9:22:20:aa:f1:0a:77:b5:36:f2:cd:fd:42:
                    30:5c:20:ec:9f:ef:54:2e:e3:86:24:fa:26:f9:63:
                    95:b2:69:e7:e1:46:70:ad:73:16:f1:d3:48:a3:fa:
                    e3:55:a4:97:af:27:84:ad:68:6b:bf:8d:c3:5c:b8:
                    dc:58:4a:85:da:74:e4:c7:26:b5:cc:97:6f:b3:da:
                    d3:1c:46:42:c4:8f:25:fc:50:1d:eb:b5:ab:a8:1d:
                    c9:9f:21:7d:f8:d6:8f:48:fd:ef:e7:db:6d:47:17:
                    78:1a:3e:6c:19:7c:9b:70:b8:83:f3:eb:92:94:7b:
                    fe:5c:eb:68:24:c9:68:ee:8d:45:7a:c5:7c:50:06:
                    bf:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:84:6A:20:DB:E2:DC:25:C3:90:55:C1:7A:8D:24:45:04:FD:7F:47
            X509v3 Authority Key Identifier:
                keyid:77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:f3:04:73:b3:43:07:09:a3:80:6a:3d:2f:41:62:f8:7c:0d:
         bb:16:52:06:78:87:1e:f6:fd:8e:a7:80:0a:c0:27:cd:4e:c1:
         47:fb:bc:e4:6f:e5:e7:0f:79:6f:d9:39:70:12:e4:24:5c:17:
         f3:fe:7b:20:13:1f:7c:68:15:48:66:c6:e9:5a:d6:58:56:5a:
         e9:c9:0e:e3:85:13:4a:3a:04:44:17:8c:94:7d:07:f1:3b:28:
         67:1d:8a:a4:3c:6c:ea:93:5f:83:f6:94:ad:a9:74:b0:e9:e5:
         e8:33:2e:3a:30:03:98:a9:97:62:c9:58:9d:58:ea:ac:60:00:
         f0:37:dc:fc:16:85:b9:2f:c7:8f:c7:89:27:e8:89:3e:aa:c9:
         14:d7:f5:66:78:eb:94:e7:fe:47:05:c3:d5:ea:9a:76:fa:a6:
         b2:0f:dd:26:c6:b2:b6:22:b2:c5:b0:23:e8:56:39:5f:ff:d2:
         69:3e:11:99:aa:d7:b8:a1:25:70:93:5c:74:22:9e:12:48:eb:
         3a:21:d4:94:63:33:2f:77:1c:17:cf:d9:68:db:e0:7a:60:7f:
         d3:3f:27:26:ed:f6:eb:86:c7:0b:e5:86:18:27:10:6d:cf:fc:
         9d:2b:ed:37:61:73:15:0b:53:41:4a:12:62:0b:59:2a:ca:07:
         cd:c9:0d:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkQ31gpPSZefQaKgcNF0QTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YTFlZWQzYWNlMGZjMmY4YWEwMDBkZTY4N2E0OWJlZmQy
NzkxZDgwHhcNMjUwOTA3MTMwMDI2WhcNMjUwOTA4MTMwMDI2WjAzMTEwLwYDVQQD
Eyg3NTg0NmEyMGRiZTJkYzI1YzM5MDU1YzE3YThkMjQ0NTA0ZmQ3ZjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhDu7RoP0ACtMI22vvrt8kecp0BT
xUfbOsprvqHA/EOEhsMK7oT8NbrAbIWjkiR/fIs56/WJEkxXst/0hTdWy55tVYfN
ro6Da9VSVtfG3HuMzctluyotfO2lgKWDtd0DuDzrleYC6+8gHu8au6rUMa2HQu3b
yMF9h/kiIKrxCne1NvLN/UIwXCDsn+9ULuOGJPom+WOVsmnn4UZwrXMW8dNIo/rj
VaSXryeErWhrv43DXLjcWEqF2nTkxya1zJdvs9rTHEZCxI8l/FAd67WrqB3JnyF9
+NaPSP3v59ttRxd4Gj5sGXybcLiD8+uSlHv+XOtoJMlo7o1FesV8UAa/YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWEaiDb4twlw5BVwXqNJEUE/X9HMB8GA1UdIwQY
MBaAFHeh7tOs4PwviqAA3mh6Sb79J5HYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDZIdTA2emdfQy1Lb0FEZWFIcEp2djBua2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80ZjNlMTEtZmQwZi00ZTcxLTkzNjkt
MjIwNGVlMjE3MjgwLzEvZDZIdTA2emdfQy1Lb0FEZWFIcEp2djBua2RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi80ZjNlMTEtZmQwZi00ZTcxLTkzNjktMjIwNGVlMjE3Mjgw
LzEvZDZIdTA2emdfQy1Lb0FEZWFIcEp2djBua2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/MEc7ND
BwmjgGo9L0Fi+HwNuxZSBniHHvb9jqeACsAnzU7BR/u85G/l5w95b9k5cBLkJFwX
8/57IBMffGgVSGbG6VrWWFZa6ckO44UTSjoERBeMlH0H8TsoZx2KpDxs6pNfg/aU
ral0sOnl6DMuOjADmKmXYslYnVjqrGAA8Dfc/BaFuS/Hj8eJJ+iJPqrJFNf1Znjr
lOf+RwXD1eqadvqmsg/dJsaytiKyxbAj6FY5X//SaT4RmarXuKElcJNcdCKeEkjr
OiHUlGMzL3ccF8/ZaNvgemB/0z8nJu3264bHC+WGGCcQbc/8nSvtN2FzFQtTQUoS
YgtZKsoHzckNcA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:35:44 2025 by rpki-client