Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft
File:                     6DGCFvAxEBktn29i_-4ZDrvVxBs.mft (raw, json)
Hash identifier:          BsbAh0pxln9pESdZmcGnLzLAwODnncLNnI+3Ri22aU0=
Subject key identifier:   23:33:2A:98:2E:1C:50:E7:E9:E2:33:C0:F3:A0:ED:25:6A:C8:E9:C8
Authority key identifier: E8:31:82:16:F0:31:10:19:2D:9F:6F:62:FF:EE:19:0E:BB:D5:C4:1B
Certificate issuer:       /CN=e8318216f03110192d9f6f62ffee190ebbd5c41b
Certificate serial:       01992255EE5140F8B49227DD57166098511C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6DGCFvAxEBktn29i_-4ZDrvVxBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft
Manifest number:          B6
Signing time:             Sun 07 Sep 2025 04:01:20 +0000
Manifest this update:     Sun 07 Sep 2025 04:01:20 +0000
Manifest next update:     Mon 08 Sep 2025 04:01:20 +0000
Files and hashes:         1: 6DGCFvAxEBktn29i_-4ZDrvVxBs.crl (hash: qxCWioq71QtZmgtmK0SHiRiSC8RPaKHJCobfxc5cG14=)
                          2: 7rHBYtW6X1cejc9TILphrdP_TBk.roa (hash: fyAkynyCTru31PmwyHkLxs5s4xfquOrJnfeQ7K5zOpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6DGCFvAxEBktn29i_-4ZDrvVxBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:ee:51:40:f8:b4:92:27:dd:57:16:60:98:51:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8318216f03110192d9f6f62ffee190ebbd5c41b
        Validity
            Not Before: Sep  7 04:01:20 2025 GMT
            Not After : Sep  8 04:01:20 2025 GMT
        Subject: CN=23332a982e1c50e7e9e233c0f3a0ed256ac8e9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:85:ef:ad:eb:73:14:92:2b:93:2d:b1:04:bc:
                    c5:ba:8c:5e:0e:c2:af:7f:99:5e:62:a5:b8:64:f3:
                    da:11:1b:34:db:c2:56:3b:9c:dd:ae:d1:47:fb:52:
                    ac:ec:7a:6e:b8:b7:b0:14:f9:87:73:84:b9:ed:10:
                    6c:0c:a9:f5:11:a8:3b:16:b7:76:f9:58:2c:52:08:
                    82:aa:c1:73:d0:a9:0d:48:5a:c4:78:40:c4:3a:68:
                    01:67:a1:51:fd:7f:93:96:96:82:1a:65:64:50:8b:
                    da:8f:83:7b:0f:84:c2:18:c2:30:03:ca:0d:bd:97:
                    ac:34:51:dc:f0:e9:30:0e:9d:ba:ff:66:2f:a8:96:
                    af:c0:00:23:bb:1c:23:cd:ce:57:2f:6f:b1:d3:ea:
                    7f:d4:12:b6:d4:c4:91:c0:eb:c0:ab:cf:29:f1:c8:
                    8d:61:fc:91:07:12:00:e4:94:00:f7:49:78:44:cb:
                    56:b7:7d:40:29:ab:21:6d:86:96:f3:69:33:ca:08:
                    7b:55:54:7f:21:8d:78:87:9d:d5:49:3a:82:8e:98:
                    3f:b8:3b:d6:4c:ca:b8:dc:a1:10:bf:f8:2e:82:97:
                    b2:4e:f3:3b:91:10:f5:0b:03:af:8c:89:a5:3a:aa:
                    5b:fc:e5:fa:07:85:29:07:b4:81:cc:ce:38:29:9b:
                    5b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:33:2A:98:2E:1C:50:E7:E9:E2:33:C0:F3:A0:ED:25:6A:C8:E9:C8
            X509v3 Authority Key Identifier:
                keyid:E8:31:82:16:F0:31:10:19:2D:9F:6F:62:FF:EE:19:0E:BB:D5:C4:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DGCFvAxEBktn29i_-4ZDrvVxBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ba:e8:fa:34:3e:03:76:12:60:2f:04:87:fa:eb:86:14:00:
         d0:96:db:53:4e:c2:66:ac:7f:88:1b:c2:14:d4:87:73:e0:7d:
         37:8a:70:7c:7b:22:da:76:34:15:4d:d2:2c:11:2d:f3:7e:5a:
         88:26:19:4c:09:09:4b:f4:13:55:eb:df:80:4c:d8:cf:e1:8e:
         d8:89:30:6e:8f:c8:62:6d:8e:0c:92:13:bf:c3:9e:a0:c1:0d:
         72:30:a3:d2:27:62:bb:e0:99:fa:68:08:06:ac:68:fb:70:a5:
         ea:cd:45:7d:a2:2b:ad:38:5c:51:eb:9b:43:80:6b:03:c7:ef:
         b5:31:e8:14:9c:eb:7e:65:09:8f:5b:56:91:23:8d:a9:38:ff:
         06:da:08:15:2a:b9:06:01:d6:d8:69:dc:9e:ad:82:e0:e8:37:
         d1:e8:e7:46:04:9f:0f:f9:f6:73:30:9a:fd:33:cf:d8:2e:a8:
         ee:ef:31:8e:e5:b7:70:b5:11:42:3a:4e:b1:03:dc:5d:3a:92:
         33:c9:68:2e:24:a2:02:79:f5:52:09:89:76:89:f3:6f:19:d4:
         f7:6d:f3:89:35:42:fe:bd:a6:a1:f4:a9:44:c3:49:2a:5e:c9:
         b7:c0:3a:23:b5:28:f9:c6:f1:b4:46:be:05:79:79:36:c9:57:
         fa:b6:f0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:10 2025 by rpki-client