Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft
File:                     6UWUa-c3BQO-r75A4REVudyVO8M.mft (raw, json)
Hash identifier:          jX2Gnjt2SPCWbaOIcXoeNP5oO88LSm0TdbOeYBdD/Rc=
Subject key identifier:   B7:F5:54:0E:2F:CE:0C:61:9B:41:D4:D8:6D:41:4B:DA:1A:20:73:0E
Authority key identifier: E9:45:94:6B:E7:37:05:03:BE:AF:BE:40:E1:11:15:B9:DC:95:3B:C3
Certificate issuer:       /CN=e945946be7370503beafbe40e11115b9dc953bc3
Certificate serial:       01991F1DBE3856C5CD4F87D072FC7BA1AE70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft
Manifest number:          0E7E
Signing time:             Sat 06 Sep 2025 13:01:06 +0000
Manifest this update:     Sat 06 Sep 2025 13:01:06 +0000
Manifest next update:     Sun 07 Sep 2025 13:01:06 +0000
Files and hashes:         1: 6UWUa-c3BQO-r75A4REVudyVO8M.crl (hash: BHSYywk705VTBxsUhUkmHTaliscGUFJ532lsKkZ03Sw=)
                          2: QPTMBPa1R1iyVMpj2m0ksKZtNe4.roa (hash: zRiBFcC8k+QThl68UQZBhw2tExgPORwu8ZM6Z3ofO4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 11:14:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1f:1d:be:38:56:c5:cd:4f:87:d0:72:fc:7b:a1:ae:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e945946be7370503beafbe40e11115b9dc953bc3
        Validity
            Not Before: Sep  6 13:01:06 2025 GMT
            Not After : Sep  7 13:01:06 2025 GMT
        Subject: CN=b7f5540e2fce0c619b41d4d86d414bda1a20730e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bd:f3:4a:80:7c:a1:2c:5d:16:90:53:49:27:
                    70:09:25:0d:fc:31:c8:1f:10:34:a1:52:4f:17:d8:
                    53:64:7a:19:42:62:21:96:73:7c:8e:aa:49:75:c8:
                    27:44:3b:03:f1:2b:09:02:7d:49:aa:55:99:0b:48:
                    08:ec:70:68:11:03:79:34:23:fb:84:d3:64:a1:a3:
                    53:00:23:8e:fa:a5:5e:a8:b8:d8:ba:cd:a4:5e:fe:
                    0c:e4:6f:96:ed:de:3c:84:03:04:4e:9b:84:1f:a3:
                    c8:3c:f4:c0:9a:c7:25:2e:94:ac:7d:8a:a7:bc:4c:
                    9b:a4:9a:f0:4c:6c:e5:97:e2:f8:6c:f6:7a:c5:5e:
                    65:da:bb:27:81:7d:87:3c:00:88:73:b1:df:a2:24:
                    47:d1:a8:a5:e6:c1:dc:57:8e:9d:99:5f:3f:d2:aa:
                    d6:e1:9e:f7:1d:96:81:23:33:81:9e:e2:f7:7f:36:
                    49:e8:16:40:8b:87:9e:af:5f:dd:9c:89:5b:5f:2f:
                    e2:65:40:91:21:da:e0:9f:f1:e0:e9:10:bc:45:91:
                    cc:a0:93:7e:16:b9:89:5e:75:c9:4c:d6:86:4d:f2:
                    59:11:9e:7c:37:03:df:45:4f:c5:45:27:47:4e:22:
                    d1:8f:ac:71:47:65:a0:5f:91:f1:58:a4:ee:de:bf:
                    2d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F5:54:0E:2F:CE:0C:61:9B:41:D4:D8:6D:41:4B:DA:1A:20:73:0E
            X509v3 Authority Key Identifier:
                keyid:E9:45:94:6B:E7:37:05:03:BE:AF:BE:40:E1:11:15:B9:DC:95:3B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:1f:a9:48:21:01:3f:d1:27:1d:44:b6:00:9f:50:10:ea:df:
         2e:08:c8:88:71:98:89:2d:59:33:ed:0e:08:f3:c8:e9:75:bf:
         e5:d7:89:09:2c:d6:9f:ab:e6:69:57:f0:d5:e2:c2:e6:f1:99:
         4e:8e:b6:a3:94:cd:c1:e5:ff:07:4a:06:3f:99:df:fd:c4:f6:
         ed:4e:f5:a5:19:26:7f:9c:c1:55:43:d6:d2:5c:ce:33:6c:1c:
         5d:60:d3:f4:d4:b9:2e:ff:48:52:50:fb:0b:2e:a2:00:a8:f8:
         1f:35:e4:ab:e4:71:b3:c9:ef:e0:50:c9:d3:a6:41:21:e7:71:
         65:23:53:27:df:45:14:8d:cc:2b:92:8e:b2:85:43:1f:5b:53:
         1e:81:32:63:b0:86:e9:c2:f8:9f:b1:e1:a3:fc:cc:27:f3:81:
         4d:8f:09:37:23:b4:db:e7:80:ed:73:d1:2c:28:4e:ad:ed:6a:
         d7:08:27:d4:a6:4e:b0:81:3e:92:40:d5:38:e6:e8:41:ab:9c:
         7f:87:4b:3d:08:61:98:ae:b4:7d:8e:0c:78:13:c1:8c:f2:c9:
         3f:d7:ec:d0:33:7d:6d:58:b8:24:1d:de:62:2f:d0:5b:1a:bd:
         b1:a0:cf:ce:3b:e6:68:94:76:c3:40:75:d7:16:f7:a0:fe:a0:
         bf:95:cd:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkfHb44VsXNT4fQcvx7oa5wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NDU5NDZiZTczNzA1MDNiZWFmYmU0MGUxMTExNWI5ZGM5
NTNiYzMwHhcNMjUwOTA2MTMwMTA2WhcNMjUwOTA3MTMwMTA2WjAzMTEwLwYDVQQD
EyhiN2Y1NTQwZTJmY2UwYzYxOWI0MWQ0ZDg2ZDQxNGJkYTFhMjA3MzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb3zSoB8oSxdFpBTSSdwCSUN/DHI
HxA0oVJPF9hTZHoZQmIhlnN8jqpJdcgnRDsD8SsJAn1JqlWZC0gI7HBoEQN5NCP7
hNNkoaNTACOO+qVeqLjYus2kXv4M5G+W7d48hAMETpuEH6PIPPTAmsclLpSsfYqn
vEybpJrwTGzll+L4bPZ6xV5l2rsngX2HPACIc7HfoiRH0ail5sHcV46dmV8/0qrW
4Z73HZaBIzOBnuL3fzZJ6BZAi4eer1/dnIlbXy/iZUCRIdrgn/Hg6RC8RZHMoJN+
FrmJXnXJTNaGTfJZEZ58NwPfRU/FRSdHTiLRj6xxR2WgX5HxWKTu3r8tQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLf1VA4vzgxhm0HU2G1BS9oaIHMOMB8GA1UdIwQY
MBaAFOlFlGvnNwUDvq++QOERFbnclTvDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlVXVWEtYzNCUU8tcjc1QTRSRVZ1ZHlWTzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81ZmYxOTktZGFmMC00YTdlLThlNWQt
NjZkM2Q4YmE1MzlmLzEvNlVXVWEtYzNCUU8tcjc1QTRSRVZ1ZHlWTzhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC81ZmYxOTktZGFmMC00YTdlLThlNWQtNjZkM2Q4YmE1Mzlm
LzEvNlVXVWEtYzNCUU8tcjc1QTRSRVZ1ZHlWTzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABh+pSCEB
P9EnHUS2AJ9QEOrfLgjIiHGYiS1ZM+0OCPPI6XW/5deJCSzWn6vmaVfw1eLC5vGZ
To62o5TNweX/B0oGP5nf/cT27U71pRkmf5zBVUPW0lzOM2wcXWDT9NS5Lv9IUlD7
Cy6iAKj4HzXkq+Rxs8nv4FDJ06ZBIedxZSNTJ99FFI3MK5KOsoVDH1tTHoEyY7CG
6cL4n7Hho/zMJ/OBTY8JNyO02+eA7XPRLChOre1q1wgn1KZOsIE+kkDVOOboQauc
f4dLPQhhmK60fY4MeBPBjPLJP9fs0DN9bVi4JB3eYi/QWxq9saDPzjvmaJR2w0B1
1xb3oP6gv5XNHQ==
-----END CERTIFICATE-----
Generated at Sat Sep 6 16:00:33 2025 by rpki-client