Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
File:                     dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft (raw, json)
Hash identifier:          i+vEhB+RMY7eAQRZCAxGfAtFmjbWeZu6s/n5exK3OEo=
Subject key identifier:   E0:30:7F:E3:52:3D:6B:76:5A:6E:F2:5F:B0:08:BE:41:78:50:F5:77
Authority key identifier: 76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
Certificate issuer:       /CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Certificate serial:       019960C6D440B2EFAE1C9B89B70C5D5D06B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
Manifest number:          1215
Signing time:             Fri 19 Sep 2025 07:01:07 +0000
Manifest this update:     Fri 19 Sep 2025 07:01:07 +0000
Manifest next update:     Sat 20 Sep 2025 07:01:07 +0000
Files and hashes:         1: JmRIXqWgLbHOS_DUn9tYXP3VwvE.roa (hash: 07OywnLuhNnV2ffg9k1J1SDz7HRBDcbP+ENwBGJ8ZCU=)
                          2: dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl (hash: v01rTYWUhpN9ntm9HUiVd+aaJV93242G6lFEdnHwZZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:60:c6:d4:40:b2:ef:ae:1c:9b:89:b7:0c:5d:5d:06:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765ea3400a3748c3b6c61268d492f8bf0a908239
        Validity
            Not Before: Sep 19 07:01:07 2025 GMT
            Not After : Sep 20 07:01:07 2025 GMT
        Subject: CN=e0307fe3523d6b765a6ef25fb008be417850f577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cf:10:5e:01:28:17:fd:f0:17:21:ce:18:76:
                    c4:84:d6:bd:70:85:94:fa:8c:7e:e6:90:f8:b8:81:
                    40:c7:f7:d5:1f:8e:70:cd:cc:df:49:1c:db:06:8f:
                    02:66:28:2c:70:92:3a:d8:36:fd:c7:22:a0:55:eb:
                    a7:f8:be:32:2b:37:a6:b1:68:64:2a:c3:ff:cc:af:
                    f1:9a:e1:7f:ae:67:60:78:53:1c:7e:32:00:c0:a5:
                    4d:b5:7e:37:3f:39:ed:88:b8:37:38:9c:3e:6c:27:
                    0b:1b:14:82:fa:86:88:6d:05:06:f5:d0:08:5a:1f:
                    35:c5:7f:f0:d7:a1:26:b0:93:42:54:1c:23:ed:90:
                    a6:85:7f:af:36:c1:79:2b:d8:0e:a7:b3:57:88:6e:
                    37:82:65:47:0d:84:e0:a8:2c:f3:97:73:53:88:19:
                    90:51:6f:e2:67:d3:3b:96:11:2c:15:1c:43:a7:fe:
                    da:1b:37:71:e3:96:03:4a:d6:82:a3:c0:5e:5c:3a:
                    4a:77:b3:9c:3c:8c:d3:71:c4:2e:58:49:73:19:16:
                    b4:c2:00:7a:5d:07:2f:6b:31:42:af:55:84:7c:7c:
                    63:06:ac:ea:3c:cd:1b:5d:d1:b4:8b:77:27:60:f7:
                    99:94:00:11:96:cf:3e:74:14:f8:d2:cf:c0:fb:2c:
                    4b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:30:7F:E3:52:3D:6B:76:5A:6E:F2:5F:B0:08:BE:41:78:50:F5:77
            X509v3 Authority Key Identifier:
                keyid:76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:e6:3e:17:ca:b6:f0:d9:3c:ce:9f:da:8b:76:25:a3:8b:43:
         cb:7b:8f:55:4f:8c:bf:ca:80:4c:1f:c8:21:eb:c5:d5:11:b5:
         cd:27:6b:38:a7:50:8b:65:a9:08:63:ce:1d:5b:16:35:17:00:
         89:82:14:ea:6f:f4:10:14:7f:6f:93:b7:f5:86:73:24:9c:46:
         43:ed:05:7d:3b:dd:e2:d6:95:65:09:0d:c7:27:ed:b0:ca:28:
         30:e2:9f:04:31:5e:46:a5:29:d4:a6:67:03:e9:f9:e0:4c:5c:
         2d:03:37:fc:7c:4b:14:58:67:7f:05:d3:2e:f8:db:f1:58:94:
         d5:55:1f:1d:cb:09:6e:17:10:d3:ef:14:4b:78:ba:7f:8b:93:
         f9:eb:a3:e2:21:4f:15:81:39:c1:10:e7:ce:8c:d2:4a:88:46:
         37:a5:0b:22:07:61:09:89:45:75:9d:6d:a7:27:8a:8b:13:42:
         ca:7e:21:25:ab:75:98:e2:ec:dc:f5:64:cc:5b:b1:4e:53:c8:
         5e:e2:d9:4d:f1:d3:07:02:f3:09:05:56:ab:ea:ab:c2:a7:f8:
         97:d8:c1:f6:40:ea:12:6f:48:b3:4c:47:b5:43:4d:c1:3f:2b:
         e5:a5:a4:66:78:3d:f6:4a:a2:b0:90:92:2a:72:9b:e9:8b:1c:
         a5:00:28:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:09:52 2025 by rpki-client