Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft
File:                     PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft (raw, json)
Hash identifier:          hBLP+9ZQM+1vLFYfeg1MjSihIQSPDkc1gy5jWIRsCpw=
Subject key identifier:   EB:A5:BD:91:C3:FA:3C:0A:FF:02:61:25:02:36:DD:25:2C:F8:78:64
Authority key identifier: 3C:0E:BF:B4:CA:E5:66:9C:49:F3:04:BE:03:5A:A4:57:B8:D3:59:21
Certificate issuer:       /CN=3c0ebfb4cae5669c49f304be035aa457b8d35921
Certificate serial:       0199221E90A04B33BF0664062F26C7F07503
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft
Manifest number:          EF
Signing time:             Sun 07 Sep 2025 03:00:52 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:52 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:52 +0000
Files and hashes:         1: PA6_tMrlZpxJ8wS-A1qkV7jTWSE.crl (hash: YhSq9mtL6KKF8xL7ZhCTqj02EMgrdL6bzQJyTZ5GB7I=)
                          2: sWJaYxR8QxeFykRG1T7Dyn5LRfw.roa (hash: gT5e4Ztf/S3QhI6J9gtGfZQnZoP1YRQUOZiUmNVTEo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:90:a0:4b:33:bf:06:64:06:2f:26:c7:f0:75:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c0ebfb4cae5669c49f304be035aa457b8d35921
        Validity
            Not Before: Sep  7 03:00:52 2025 GMT
            Not After : Sep  8 03:00:52 2025 GMT
        Subject: CN=eba5bd91c3fa3c0aff0261250236dd252cf87864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:79:b1:01:11:a2:29:03:84:cb:5e:64:dd:e1:
                    31:26:1e:28:c0:0f:39:4e:fe:df:35:86:ed:20:e8:
                    57:af:ca:85:3e:c6:53:a6:fc:5b:9b:fc:0f:cb:56:
                    ba:73:db:a9:f3:af:0f:1d:aa:74:ab:73:24:9b:14:
                    5a:11:32:71:53:b3:38:2a:da:d6:b5:1c:24:92:37:
                    ca:b1:49:8b:1c:e4:a8:8b:77:93:cc:2d:00:6f:e9:
                    0f:4b:d6:53:e0:a2:dc:62:d5:14:94:83:d8:5a:0f:
                    87:b4:7e:6f:12:71:b4:f8:d3:60:a3:fe:e0:44:aa:
                    09:aa:3d:25:aa:a6:35:4f:9e:c2:b7:46:f7:6c:08:
                    72:fa:7c:57:03:21:76:4b:74:33:30:e5:11:3e:ba:
                    34:f5:64:a0:f0:8b:3f:6f:00:38:d3:07:41:35:e5:
                    42:0d:1e:06:68:82:6a:f1:5b:ee:0c:3a:6f:bf:5f:
                    bc:ec:2b:85:fa:ad:be:58:d5:c7:42:86:af:38:57:
                    e2:24:bb:90:cd:55:ae:e5:51:4f:08:3d:03:f3:07:
                    16:43:7b:b4:8f:a1:01:9a:9f:f7:11:84:4e:4e:2b:
                    db:a0:ce:3f:6c:57:fb:b0:48:9f:7c:a7:89:f0:41:
                    f1:23:ff:60:c4:47:bf:bb:ae:2f:15:d7:99:b4:fe:
                    0d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A5:BD:91:C3:FA:3C:0A:FF:02:61:25:02:36:DD:25:2C:F8:78:64
            X509v3 Authority Key Identifier:
                keyid:3C:0E:BF:B4:CA:E5:66:9C:49:F3:04:BE:03:5A:A4:57:B8:D3:59:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f1:7c:e6:d9:03:b2:23:60:6e:6e:71:4a:ae:a6:8f:17:2d:
         0b:57:1f:23:76:15:c8:c3:52:dc:b5:09:79:d1:7c:2a:7d:bb:
         9d:ca:79:99:23:46:2d:6a:c3:1b:61:a2:c4:36:0e:b5:e9:d0:
         1e:69:8c:03:37:c0:fe:c3:6d:95:01:76:e9:bb:8b:68:0d:9f:
         27:56:90:8d:09:b9:4e:3f:57:7b:38:b5:2a:4e:15:58:59:36:
         10:a3:90:f0:ed:aa:54:96:10:28:0b:22:54:70:6c:40:e1:48:
         89:bb:92:9c:2d:ee:df:02:70:b2:b1:39:52:e4:9c:a1:e0:a8:
         df:a3:82:be:b4:50:f8:da:09:f6:5a:a1:72:5e:9b:3c:43:e7:
         1c:96:3f:97:f7:ca:8c:88:e4:02:43:a7:8f:a1:fd:03:a2:01:
         b2:02:5a:d3:20:6d:8c:f6:4f:ce:5a:17:af:51:ce:74:96:7b:
         07:9c:fb:4e:7b:9f:cc:03:c6:99:7a:6c:e8:dd:ed:fe:1b:e8:
         ad:6f:42:79:fd:d6:f3:88:37:96:ca:be:ac:d5:ba:fb:81:91:
         39:50:f9:b7:31:cc:20:29:f2:1e:39:fc:d2:90:b8:7a:ca:f1:
         35:9f:c3:5b:55:16:56:d6:5b:72:8b:a2:30:cf:fa:d9:80:d6:
         bd:fa:e1:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHpCgSzO/BmQGLybH8HUDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMGViZmI0Y2FlNTY2OWM0OWYzMDRiZTAzNWFhNDU3Yjhk
MzU5MjEwHhcNMjUwOTA3MDMwMDUyWhcNMjUwOTA4MDMwMDUyWjAzMTEwLwYDVQQD
EyhlYmE1YmQ5MWMzZmEzYzBhZmYwMjYxMjUwMjM2ZGQyNTJjZjg3ODY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3mxARGiKQOEy15k3eExJh4owA85
Tv7fNYbtIOhXr8qFPsZTpvxbm/wPy1a6c9up868PHap0q3MkmxRaETJxU7M4KtrW
tRwkkjfKsUmLHOSoi3eTzC0Ab+kPS9ZT4KLcYtUUlIPYWg+HtH5vEnG0+NNgo/7g
RKoJqj0lqqY1T57Ct0b3bAhy+nxXAyF2S3QzMOURPro09WSg8Is/bwA40wdBNeVC
DR4GaIJq8VvuDDpvv1+87CuF+q2+WNXHQoavOFfiJLuQzVWu5VFPCD0D8wcWQ3u0
j6EBmp/3EYROTivboM4/bFf7sEiffKeJ8EHxI/9gxEe/u64vFdeZtP4N9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOulvZHD+jwK/wJhJQI23SUs+HhkMB8GA1UdIwQY
MBaAFDwOv7TK5WacSfMEvgNapFe401khMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEE2X3RNcmxacHhKOHdTLUExcWtWN2pUV1NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9mMWZjN2MtNDkyMi00OTFkLWE2MGQt
ZjJkMjNhYWU1MmM2LzEvUEE2X3RNcmxacHhKOHdTLUExcWtWN2pUV1NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9mMWZjN2MtNDkyMi00OTFkLWE2MGQtZjJkMjNhYWU1MmM2
LzEvUEE2X3RNcmxacHhKOHdTLUExcWtWN2pUV1NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfF85tkD
siNgbm5xSq6mjxctC1cfI3YVyMNS3LUJedF8Kn27ncp5mSNGLWrDG2GixDYOtenQ
HmmMAzfA/sNtlQF26buLaA2fJ1aQjQm5Tj9Xezi1Kk4VWFk2EKOQ8O2qVJYQKAsi
VHBsQOFIibuSnC3u3wJwsrE5UuScoeCo36OCvrRQ+NoJ9lqhcl6bPEPnHJY/l/fK
jIjkAkOnj6H9A6IBsgJa0yBtjPZPzloXr1HOdJZ7B5z7TnufzAPGmXps6N3t/hvo
rW9Cef3W84g3lsq+rNW6+4GROVD5tzHMICnyHjn80pC4esrxNZ/DW1UWVtZbcoui
MM/62YDWvfrhnA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:44 2025 by rpki-client