Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
File:                     A6bcLyZo69z4a2wCWKgYfl984nA.mft (raw, json)
Hash identifier:          VGsktKEjXgTeuIcg0QDKDoqr8ZqkE3vwlnaE/7019Vs=
Subject key identifier:   BB:E7:18:FA:0F:9C:A6:49:E3:77:37:9C:7C:FF:76:6D:C1:76:8F:CB
Authority key identifier: 03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70
Certificate issuer:       /CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
Certificate serial:       019922552F5478A97A3C6297C47C36350194
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
Manifest number:          075E
Signing time:             Sun 07 Sep 2025 04:00:31 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:31 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:31 +0000
Files and hashes:         1: A6bcLyZo69z4a2wCWKgYfl984nA.crl (hash: pROHd+u2/9w8ogZ84Txo++knicRLV/+gHtKey2z46so=)
                          2: dd8av2mxTwjOvzgQCyuc1wPNBmI.roa (hash: jwwVY2pCMQyTKSG87HTCJ5bltMafN2RGopv4GJtWPmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:2f:54:78:a9:7a:3c:62:97:c4:7c:36:35:01:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
        Validity
            Not Before: Sep  7 04:00:31 2025 GMT
            Not After : Sep  8 04:00:31 2025 GMT
        Subject: CN=bbe718fa0f9ca649e377379c7cff766dc1768fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:75:17:be:e2:9c:0b:5e:e7:05:49:06:5b:35:
                    ec:22:04:5b:f0:fb:1e:1c:fd:95:75:86:6f:d5:d7:
                    35:c5:fa:73:6f:9f:58:b7:0a:d4:65:3b:8f:c3:0b:
                    6b:54:f8:4e:7c:9f:8f:a3:ca:ac:86:ae:57:e6:44:
                    80:37:b0:ea:ca:67:9b:99:78:c0:0c:ec:62:bc:f4:
                    a6:7e:e5:0a:58:06:72:9b:63:99:b9:51:b3:b2:70:
                    c0:dd:4b:74:89:b4:fd:e2:54:20:84:c1:e4:97:24:
                    4a:5d:88:bd:3d:b6:8d:0a:c8:b6:e5:91:2d:cd:c0:
                    bb:0c:c2:50:81:28:7f:d0:73:9f:2d:ca:f5:a2:48:
                    11:bc:7e:a4:a1:06:ca:e6:26:a0:20:1b:d2:26:fd:
                    c1:74:44:72:2b:25:6b:3a:c0:3d:77:7e:c7:f0:f7:
                    55:1e:4e:2f:e1:bb:4b:88:78:f6:49:d4:75:66:73:
                    bc:d0:e9:da:8e:50:c4:b3:37:1a:71:5a:01:05:3f:
                    a6:77:4a:8b:b4:2e:6d:35:47:68:b6:55:cf:25:ae:
                    3d:80:2d:86:b2:02:f3:fb:73:29:df:e6:3a:20:aa:
                    85:f9:4d:2c:14:35:fd:e3:85:32:65:50:37:56:dc:
                    a4:b3:7f:57:ee:c6:1b:04:4a:7c:ec:20:4d:2e:58:
                    9b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E7:18:FA:0F:9C:A6:49:E3:77:37:9C:7C:FF:76:6D:C1:76:8F:CB
            X509v3 Authority Key Identifier:
                keyid:03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:dc:40:8c:2a:58:7d:a3:39:bb:79:8d:7f:08:e8:6e:d6:68:
         32:14:40:e5:d4:f9:2f:1d:dc:5e:ca:4d:74:33:38:e7:29:d2:
         be:e4:c2:cd:66:14:00:c1:18:2f:5c:e5:86:6c:6d:11:d9:6c:
         ad:d9:17:b2:1f:42:a7:b6:24:d3:b0:32:17:91:f1:25:1d:d7:
         c1:35:29:3a:4a:a0:bf:55:a8:6c:50:70:11:a4:ea:45:39:3c:
         b2:df:81:d8:ec:c4:1a:fa:73:12:c2:d9:da:2a:3d:be:47:81:
         54:dd:49:27:82:3b:56:ef:82:93:81:58:81:d1:78:d2:67:ea:
         54:5e:a7:fe:f1:6d:71:23:89:f2:6e:ba:11:cd:65:59:fd:b0:
         c1:d2:2d:e9:2e:ef:bb:a4:71:a0:6f:73:4f:bc:55:4c:39:67:
         03:45:44:bf:b2:93:04:ad:f5:1b:9f:2d:b3:ae:3e:bf:b7:5e:
         11:1e:bf:c2:cb:df:ce:32:8c:e1:46:a9:f1:3a:a5:4b:38:d6:
         a8:1d:b5:4e:70:28:a9:49:a6:ba:59:5f:1f:4c:40:3e:3f:2e:
         0d:f7:8b:84:5a:8f:9d:0d:d7:8e:08:71:cb:18:f1:c4:36:f6:
         ca:25:c2:dd:91:b1:67:69:8e:06:47:01:5c:85:58:fe:3a:fd:
         a4:42:2b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:39 2025 by rpki-client