Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
File:                     6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft (raw, json)
Hash identifier:          cz5rC+5q6ma+/4STbc8eJP1YbZ7a172lp5TqFNpId+o=
Subject key identifier:   26:4C:D1:EF:53:5C:85:51:89:D1:05:46:57:3D:65:53:2E:32:10:97
Authority key identifier: E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68
Certificate issuer:       /CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68
Certificate serial:       01992331563BF69295A0EF93B722DCB83F72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
Manifest number:          05BC
Signing time:             Sun 07 Sep 2025 08:00:59 +0000
Manifest this update:     Sun 07 Sep 2025 08:00:59 +0000
Manifest next update:     Mon 08 Sep 2025 08:00:59 +0000
Files and hashes:         1: 6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl (hash: ZNu2gUEiTYmXj55587PC7LQQslzjyqGGftW/77c7vJU=)
                          2: kRbJM0r9hkR1wq3RdsUFiL0HT7Q.roa (hash: TB8ehbBKofWhXL0zKQ3+dh6paWgo+N+m/aat6bTAmec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:31:56:3b:f6:92:95:a0:ef:93:b7:22:dc:b8:3f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68
        Validity
            Not Before: Sep  7 08:00:59 2025 GMT
            Not After : Sep  8 08:00:59 2025 GMT
        Subject: CN=264cd1ef535c855189d10546573d65532e321097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9f:5e:49:e3:3f:22:4d:3c:48:de:dd:8f:e6:
                    3b:5e:fc:66:3f:0a:ed:7b:d8:45:11:4e:98:4f:26:
                    0c:03:06:a2:f3:ee:20:23:09:f8:b2:14:ff:27:73:
                    30:bf:12:96:42:39:a7:98:95:a0:67:bc:2f:25:0b:
                    5c:39:a2:be:78:31:cd:83:e5:dd:b0:52:87:65:70:
                    c2:52:99:f3:65:d0:ae:c0:fb:c8:8d:32:62:9c:00:
                    a8:be:63:96:c0:b7:b2:65:95:a9:57:ff:4f:89:3a:
                    83:b7:9b:38:59:46:2f:97:ee:3a:fe:72:1b:05:c2:
                    b4:fd:b1:0b:1d:82:43:5a:b7:3e:eb:ac:60:a8:4a:
                    2a:66:f8:75:4f:4c:bb:84:95:6a:10:69:23:c0:99:
                    d6:90:5b:37:c0:5a:46:52:de:ad:ed:2a:52:44:ef:
                    c1:87:ea:b4:24:11:b0:36:ed:5f:c7:ff:9d:d0:ad:
                    34:f6:3f:41:c7:df:97:60:a6:55:9b:43:f8:58:e6:
                    9b:9c:4f:2f:05:60:ce:81:23:ce:82:eb:8d:5d:28:
                    3e:78:dc:e1:ba:33:75:e1:3d:cf:c1:3f:2f:91:c8:
                    d1:f1:b1:cf:db:ec:b2:a8:17:69:a7:0c:66:ff:dc:
                    4a:b2:cf:16:9b:4b:57:5b:a8:4b:f4:5f:31:e2:93:
                    06:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4C:D1:EF:53:5C:85:51:89:D1:05:46:57:3D:65:53:2E:32:10:97
            X509v3 Authority Key Identifier:
                keyid:E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:4f:08:1a:41:8e:63:62:87:44:07:06:58:e5:5e:1a:d0:25:
         ad:ea:a8:78:16:d1:fb:ff:fd:00:7b:62:10:e2:28:e9:f7:1c:
         fd:1e:f1:db:47:ef:74:2e:4e:6b:9f:8b:a5:c4:04:3b:88:5d:
         30:aa:66:8a:d3:2d:85:af:a2:41:f2:55:3c:e3:e4:a6:28:8a:
         c2:10:a3:78:93:d8:b2:61:30:21:6c:9b:e6:0c:b0:52:49:c9:
         f6:79:15:db:e4:d5:d1:03:60:35:db:4c:cc:42:0a:cc:57:3c:
         ac:6a:ee:9e:92:86:74:63:24:89:71:7d:46:20:65:5b:8d:b1:
         0c:2b:a6:64:42:e0:22:a9:eb:75:42:58:2e:02:62:3b:f1:e7:
         95:ca:87:53:50:d2:14:50:4e:17:b6:f1:cd:7e:d0:9e:dd:5c:
         ce:df:15:1a:53:4b:03:9b:b7:0e:26:7d:44:0b:77:f5:43:b1:
         2b:94:91:44:d9:b1:40:ef:04:78:37:06:ea:b2:9d:04:de:13:
         d4:e0:5c:05:e1:98:ce:b5:ce:51:8a:f5:cc:db:c8:91:aa:c8:
         24:9d:9d:de:3e:34:f4:f8:1b:7d:38:0c:61:7c:87:66:dc:38:
         d5:d5:42:a7:ca:e1:bc:4c:bc:51:fc:ce:bf:f8:bb:78:fc:b0:
         d4:5e:cd:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMVY79pKVoO+TtyLcuD9yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NWIyMWFmZTFiMDkxNmY1NWVlYTZkNWJkYzFkYmYyZTcz
YTNjNjgwHhcNMjUwOTA3MDgwMDU5WhcNMjUwOTA4MDgwMDU5WjAzMTEwLwYDVQQD
EygyNjRjZDFlZjUzNWM4NTUxODlkMTA1NDY1NzNkNjU1MzJlMzIxMDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA459eSeM/Ik08SN7dj+Y7XvxmPwrt
e9hFEU6YTyYMAwai8+4gIwn4shT/J3MwvxKWQjmnmJWgZ7wvJQtcOaK+eDHNg+Xd
sFKHZXDCUpnzZdCuwPvIjTJinACovmOWwLeyZZWpV/9PiTqDt5s4WUYvl+46/nIb
BcK0/bELHYJDWrc+66xgqEoqZvh1T0y7hJVqEGkjwJnWkFs3wFpGUt6t7SpSRO/B
h+q0JBGwNu1fx/+d0K009j9Bx9+XYKZVm0P4WOabnE8vBWDOgSPOguuNXSg+eNzh
ujN14T3PwT8vkcjR8bHP2+yyqBdppwxm/9xKss8Wm0tXW6hL9F8x4pMGoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZM0e9TXIVRidEFRlc9ZVMuMhCXMB8GA1UdIwQY
MBaAFOhbIa/hsJFvVe6m1b3B2/LnOjxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkZzaHItR3drVzlWN3FiVnZjSGI4dWM2UEdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC80YjQ3NDgtNWFmMC00NTEzLWFjYTkt
MGI0MTIzNGNiMGNlLzEvNkZzaHItR3drVzlWN3FiVnZjSGI4dWM2UEdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC80YjQ3NDgtNWFmMC00NTEzLWFjYTktMGI0MTIzNGNiMGNl
LzEvNkZzaHItR3drVzlWN3FiVnZjSGI4dWM2UEdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApU8IGkGO
Y2KHRAcGWOVeGtAlreqoeBbR+//9AHtiEOIo6fcc/R7x20fvdC5Oa5+LpcQEO4hd
MKpmitMtha+iQfJVPOPkpiiKwhCjeJPYsmEwIWyb5gywUknJ9nkV2+TV0QNgNdtM
zEIKzFc8rGrunpKGdGMkiXF9RiBlW42xDCumZELgIqnrdUJYLgJiO/HnlcqHU1DS
FFBOF7bxzX7Qnt1czt8VGlNLA5u3DiZ9RAt39UOxK5SRRNmxQO8EeDcG6rKdBN4T
1OBcBeGYzrXOUYr1zNvIkarIJJ2d3j409PgbfTgMYXyHZtw41dVCp8rhvEy8UfzO
v/i7ePyw1F7NHA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:10 2025 by rpki-client