Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
File:                     t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft (raw, json)
Hash identifier:          MVns+AziED+EMnSfv6PiE0/jcImUer4W4WHSEOU8p2M=
Subject key identifier:   7B:C7:EE:67:6E:AB:43:0B:1C:FE:D7:DE:A9:A2:1B:F9:41:98:00:52
Authority key identifier: B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5
Certificate issuer:       /CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5
Certificate serial:       019922FA32C43C36E1B09211A405767F9249
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
Manifest number:          A6
Signing time:             Sun 07 Sep 2025 07:00:46 +0000
Manifest this update:     Sun 07 Sep 2025 07:00:46 +0000
Manifest next update:     Mon 08 Sep 2025 07:00:46 +0000
Files and hashes:         1: t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl (hash: lWVXzYr5+U9eFDczD23FO4TPEbyJYnJ7nKCWAm5fh1A=)
                          2: vfts5VO11Lf49yWawFf1T10X7IA.roa (hash: o5JhQxo9WfUPfoKsbz0ZkfnOyZ6HVJldiK9KySDHufY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:32:c4:3c:36:e1:b0:92:11:a4:05:76:7f:92:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5
        Validity
            Not Before: Sep  7 07:00:46 2025 GMT
            Not After : Sep  8 07:00:46 2025 GMT
        Subject: CN=7bc7ee676eab430b1cfed7dea9a21bf941980052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:66:1a:50:5c:a5:b4:a1:c5:48:4a:80:62:d8:
                    2b:52:98:f5:b0:f2:5e:8b:5b:fe:6e:f8:fd:0a:cd:
                    87:45:d6:9b:00:9d:1a:8a:3f:ca:19:8c:52:c8:f8:
                    13:90:12:cd:75:3f:c7:30:9e:ee:ec:4e:dc:32:89:
                    8c:da:e1:95:c2:22:48:f6:90:a9:38:57:c1:81:74:
                    af:30:72:83:28:2e:20:2d:e2:15:1b:31:11:fa:f9:
                    e4:89:3b:fb:f1:cc:3f:f7:38:1f:3a:84:16:b0:c7:
                    fe:f7:4c:f7:78:31:3c:01:6a:c7:8e:0a:0c:b3:2f:
                    3a:c1:46:e0:0c:7b:13:28:10:f4:b6:87:3f:2d:bd:
                    de:0f:02:2d:77:9a:c0:c3:ff:37:f7:84:6f:af:10:
                    75:34:f0:ac:53:c5:3e:a0:6a:72:c1:d1:91:2f:f2:
                    15:d5:3c:29:cc:10:b7:40:b4:c3:37:4b:da:42:90:
                    ac:e0:6e:35:21:33:c6:98:f7:8d:9a:44:48:e6:44:
                    a1:04:2e:21:01:8e:77:21:e5:2c:5c:e0:d1:71:7c:
                    f4:dd:39:aa:b8:d3:3a:67:9d:7c:13:d1:fc:a6:ee:
                    9c:3b:cb:7b:40:51:fd:fc:2c:48:d3:3d:45:06:b1:
                    f5:45:0d:10:ae:71:21:44:d5:68:70:9a:fd:91:da:
                    aa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C7:EE:67:6E:AB:43:0B:1C:FE:D7:DE:A9:A2:1B:F9:41:98:00:52
            X509v3 Authority Key Identifier:
                keyid:B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:06:3a:04:47:f2:ea:fa:ea:ed:40:6b:c3:9b:3b:5c:e4:1c:
         cc:ad:46:03:7a:ef:29:f3:9d:88:e4:0d:a9:9d:86:46:db:9c:
         e1:c8:42:1c:9e:ec:ab:32:69:a2:60:a7:bb:af:97:45:1d:ef:
         b3:50:e8:9a:8a:9c:50:f6:e2:63:22:26:39:46:12:17:66:1f:
         58:14:67:63:13:0a:88:aa:2a:14:31:28:45:27:93:58:9d:b8:
         91:8d:e9:a3:5d:56:76:b4:84:ee:5c:df:0b:61:f8:44:a9:de:
         db:69:8c:f2:2a:2a:34:9c:fb:0b:66:86:05:88:95:44:01:e8:
         cb:7b:58:cc:cd:81:bb:63:dd:8c:a3:1a:3a:03:96:c3:f7:24:
         93:f9:50:7b:4d:da:c7:f6:a7:f8:e3:1d:bf:7d:f3:c5:d8:87:
         0b:26:3d:6c:22:63:8b:b8:fe:17:0c:e2:be:6f:6d:e3:28:4a:
         0e:32:80:67:19:e7:98:e9:83:7d:97:df:0f:40:45:78:76:d7:
         30:b6:e3:6b:40:d5:60:4f:95:f1:98:fe:0d:10:c7:41:d2:d8:
         fb:14:f3:a4:dc:f0:53:bb:c0:60:75:3b:e3:ab:63:58:b6:61:
         91:59:ae:df:01:52:1b:6d:54:1b:89:9c:a5:0c:52:35:94:8b:
         c3:f4:03:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:37 2025 by rpki-client