Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft
File:                     6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft (raw, json)
Hash identifier:          chNs83/7s0Z1GHnYVLES8V1sTtHdDuAdDn4sJ7fRHY0=
Subject key identifier:   50:76:FF:CF:5E:E8:98:AE:7F:9F:EE:61:17:8D:07:C7:97:77:0D:51
Authority key identifier: E8:B6:5F:1D:5E:97:0E:60:82:D2:CF:D6:F9:9E:F9:C8:17:4A:14:40
Certificate issuer:       /CN=e8b65f1d5e970e6082d2cfd6f99ef9c8174a1440
Certificate serial:       019922554BD21C7F9F34FD3D1F9F399D3BE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LZfHV6XDmCC0s_W-Z75yBdKFEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft
Manifest number:          1671
Signing time:             Sun 07 Sep 2025 04:00:39 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:39 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:39 +0000
Files and hashes:         1: 1-Gp-Aj6rXUl3rCcfTEV_zKX81GM.roa (hash: jcNgC8sUFB2sRMcieBCYPhWYxbrZslrozKmwIIc2sSY=)
                          2: 6LZfHV6XDmCC0s_W-Z75yBdKFEA.crl (hash: fK+YfQSV1D9R3Za22ZnmkytfBnsmzhMk4hyXluAxmhs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LZfHV6XDmCC0s_W-Z75yBdKFEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:4b:d2:1c:7f:9f:34:fd:3d:1f:9f:39:9d:3b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b65f1d5e970e6082d2cfd6f99ef9c8174a1440
        Validity
            Not Before: Sep  7 04:00:39 2025 GMT
            Not After : Sep  8 04:00:39 2025 GMT
        Subject: CN=5076ffcf5ee898ae7f9fee61178d07c797770d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b9:2a:82:9f:1f:a5:e4:f7:a5:a3:cc:c5:00:
                    c0:aa:eb:38:60:ba:e9:30:38:e4:da:64:4c:4e:d5:
                    0c:47:d2:62:5c:bf:0f:ad:f6:14:02:78:92:dd:6b:
                    8d:0c:50:40:84:eb:ea:b2:f5:0f:e2:49:32:24:22:
                    53:6e:19:b3:49:ff:c9:12:ec:6a:35:fa:fb:06:c7:
                    d4:99:fc:72:58:c9:36:82:83:2f:0f:43:14:bd:e7:
                    9b:68:8d:54:cb:e4:b0:e1:63:0b:7f:ad:ab:26:c1:
                    3d:a5:40:96:0b:0c:fa:a8:31:69:9e:b0:e7:56:33:
                    5b:54:1a:31:22:19:66:b1:fe:8b:6a:55:30:51:5d:
                    c9:fc:b6:b0:d0:b4:6f:ce:eb:1a:9b:b5:e3:d8:26:
                    89:8b:54:75:5a:0e:8e:9f:26:5c:86:4d:48:c4:a8:
                    a9:c0:03:96:db:a9:ff:c9:2e:75:eb:56:b8:3f:30:
                    1f:b0:4c:21:e1:6e:b1:9a:12:5e:d5:eb:87:c0:87:
                    57:64:97:28:a5:35:ff:f1:3b:2a:9b:f3:3a:84:48:
                    6a:97:d9:ab:e7:4d:a7:88:d4:8b:3c:23:ee:26:85:
                    12:de:28:f1:3e:44:33:58:2a:bc:75:f7:ed:87:77:
                    ae:9a:bc:68:a7:a4:99:fe:f1:fa:6a:40:96:a8:8d:
                    8f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:76:FF:CF:5E:E8:98:AE:7F:9F:EE:61:17:8D:07:C7:97:77:0D:51
            X509v3 Authority Key Identifier:
                keyid:E8:B6:5F:1D:5E:97:0E:60:82:D2:CF:D6:F9:9E:F9:C8:17:4A:14:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LZfHV6XDmCC0s_W-Z75yBdKFEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:6a:98:30:32:5a:75:ac:76:18:b8:32:ea:5b:8e:ef:67:14:
         b9:1b:5f:f9:b7:61:ba:97:63:87:6e:69:14:d0:8f:59:df:c4:
         9e:0d:55:77:73:0a:3a:10:a9:47:41:b9:d4:43:84:57:03:a3:
         cc:1f:12:9e:be:a9:92:35:7c:3a:cf:bd:5f:50:8d:c9:26:a1:
         41:5b:22:d2:0c:52:b1:53:c7:a6:ff:95:90:3b:f6:f8:4f:4f:
         fa:65:fd:fc:52:0f:92:39:68:f3:cb:d6:44:ed:a0:6e:4c:ee:
         a6:03:53:4e:6a:79:c7:a2:f3:6e:95:b9:58:77:12:78:c6:59:
         93:83:8e:5a:50:41:05:91:db:3b:a0:94:ac:61:f4:65:82:08:
         37:e2:4a:c8:2b:33:28:fe:80:26:c8:64:0b:9d:44:34:62:3c:
         a4:ef:a9:4d:1f:f7:1f:b9:1c:48:62:09:ce:1a:c4:36:13:5e:
         9b:cb:08:f0:a5:f3:ff:16:29:4b:69:10:46:93:2e:e4:7e:c2:
         34:2a:ef:31:63:cf:36:48:70:d2:f7:37:8b:39:22:ef:ed:a8:
         c7:d9:61:7a:ef:70:67:2d:e1:b2:65:87:ed:b6:43:f4:20:1a:
         5b:33:95:1f:1e:14:36:6f:dd:98:34:01:98:13:dd:46:d7:65:
         78:b7:04:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:22 2025 by rpki-client