Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
File:                     6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft (raw, json)
Hash identifier:          /gipTDR6in8W7GGu10y24a87kuuew7TEX1Qgn/+4ygo=
Subject key identifier:   F3:73:96:5C:2E:B6:F6:CF:75:BC:FF:83:A0:66:46:A8:84:04:F0:FE
Authority key identifier: EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
Certificate issuer:       /CN=ea0f5b221f6af32098f3064d68251b617892ac92
Certificate serial:       0198C6B68024B3525985FCFC0C784213C608
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
Manifest number:          0B90
Signing time:             Wed 20 Aug 2025 09:01:45 +0000
Manifest this update:     Wed 20 Aug 2025 09:01:45 +0000
Manifest next update:     Thu 21 Aug 2025 09:01:45 +0000
Files and hashes:         1: 0XabXlC7deISiRQU33Gmn1-hwRM.roa (hash: XChkodvgKF7pFZfRd54zjJi0OLTiUwtDb3v0CScHm/A=)
                          2: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl (hash: 1CYUn3iWGFCFL7Pr/AG1jgBF4YUrFhvbmPj3QHOTGXI=)
                          3: Jkdiv5bBO_BKcgc0OerouNuGE1k.roa (hash: VbBTlFGzjAjrvA9wRAtB5k6JdTD926ZHlAXAShcRc2U=)
                          4: RG7fXecCgltP9RGkiJ-aVXS-wsM.roa (hash: qs5jUi+jVQdO/5VzCetY5ouvlERqA5awKhxjDrx/XnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 09:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:c6:b6:80:24:b3:52:59:85:fc:fc:0c:78:42:13:c6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea0f5b221f6af32098f3064d68251b617892ac92
        Validity
            Not Before: Aug 20 09:01:45 2025 GMT
            Not After : Aug 21 09:01:45 2025 GMT
        Subject: CN=f373965c2eb6f6cf75bcff83a06646a88404f0fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:de:aa:f4:46:fa:61:be:e9:d2:a0:27:c8:ae:
                    4d:5b:4c:1b:d9:8f:51:43:5c:6e:9e:84:78:1f:b6:
                    4b:15:b4:b2:dd:05:d8:8c:73:1d:f8:d9:6d:e7:8d:
                    e6:e3:5b:ec:c8:d4:0e:bf:f4:89:90:c6:37:90:ae:
                    02:42:f5:6b:4f:a1:7a:a2:4d:8e:e1:b4:1b:9a:85:
                    6e:98:16:25:be:23:8b:bb:0a:42:ac:60:71:2a:62:
                    1c:e6:9c:c2:32:b1:bc:86:7d:57:1f:ac:26:18:d4:
                    81:b0:e7:39:c2:1f:05:fd:0b:55:3c:a8:12:85:3b:
                    83:75:9d:e7:0d:a6:e5:35:a6:79:65:48:d6:cf:20:
                    78:e2:3a:3f:3b:72:f2:f4:05:f5:22:8f:da:4a:ff:
                    ab:98:7d:c0:9c:00:d5:a3:d8:05:ec:6e:a9:0c:92:
                    60:9f:bf:1a:e6:57:f9:46:0d:b3:fa:e4:1c:4d:17:
                    78:30:7a:59:26:c8:35:bc:79:0a:01:00:1f:9e:7d:
                    54:f8:42:03:46:9b:70:9c:77:50:83:5e:c9:e3:14:
                    69:cf:d8:be:56:ca:7d:38:07:b3:b9:16:cc:c7:cd:
                    da:17:09:82:ef:6a:9b:05:7d:86:e6:17:32:53:3c:
                    1d:6a:20:01:72:9c:b6:db:15:33:9c:9d:70:f5:f1:
                    11:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:73:96:5C:2E:B6:F6:CF:75:BC:FF:83:A0:66:46:A8:84:04:F0:FE
            X509v3 Authority Key Identifier:
                keyid:EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:7e:8a:86:ce:8e:2a:81:20:07:eb:c2:77:25:0b:fb:00:6e:
         8a:98:33:48:32:95:71:52:9c:4a:90:5c:2d:34:d2:76:e8:d7:
         be:ed:fe:68:9a:4d:9b:59:91:94:9a:40:04:4d:82:bd:e0:02:
         d1:49:3d:77:0f:40:2a:53:a7:ac:ef:37:c2:3e:86:09:9a:8f:
         45:ab:2b:bd:18:ae:19:b6:01:71:c2:7c:ec:a8:96:c2:ec:80:
         18:6f:8b:cf:3d:24:25:34:bd:a8:3d:47:8c:62:48:66:76:f6:
         0c:54:0d:7d:76:d7:f8:32:d7:23:83:2e:4f:10:9d:5a:c1:a5:
         b8:e6:67:f9:b7:f1:45:04:5d:90:99:d6:08:b4:4c:ef:44:06:
         5b:f6:85:b9:65:3c:44:9d:d7:c2:79:92:29:98:f7:ec:01:dd:
         b1:61:57:ac:0f:26:09:13:5c:3d:ec:62:cb:b3:1c:a6:06:86:
         0d:00:73:14:58:fb:60:cd:16:32:87:fb:57:fa:5d:a2:b8:72:
         a4:54:81:c9:86:72:cd:42:8f:f8:b3:ca:dd:38:b4:7f:1c:75:
         3c:cc:44:88:f9:8e:46:5e:8c:ac:91:4b:e7:f6:40:06:07:42:
         ed:bc:ab:a5:3e:5e:e3:a2:31:cb:ff:f6:9a:4c:88:e3:1c:2d:
         75:4e:ac:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 17:24:13 2025 by rpki-client