Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/09f968-781d-4d78-99f5-e8b0a9520660/1/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.mft
File:                     r6qlN6pmc2ESn3Y4lPyL_L_eqW8.mft (raw, json)
Hash identifier:          nTpoK5vZwhPdGJIJwvNvW7Qb+FPnIExkjTWo3cyHZaA=
Subject key identifier:   18:A2:8B:A3:33:89:88:6D:FA:2C:58:F3:2F:CA:FA:1F:FF:8B:D6:D4
Authority key identifier: AF:AA:A5:37:AA:66:73:61:12:9F:76:38:94:FC:8B:FC:BF:DE:A9:6F
Certificate issuer:       /CN=afaaa537aa667361129f763894fc8bfcbfdea96f
Certificate serial:       019938DF551C2B7F426D2E0FE9B5335215C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/09f968-781d-4d78-99f5-e8b0a9520660/1/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.mft
Manifest number:          07B4
Signing time:             Thu 11 Sep 2025 13:03:04 +0000
Manifest this update:     Thu 11 Sep 2025 13:03:04 +0000
Manifest next update:     Fri 12 Sep 2025 13:03:04 +0000
Files and hashes:         1: KSdUtfJ37XAaJBcShHmQ5uaPNaM.roa (hash: VsY/uDTyeEAnbIF/MEQHUfpM957cF5t4aRsKUs0MUOM=)
                          2: r6qlN6pmc2ESn3Y4lPyL_L_eqW8.crl (hash: yfP8eW6gdMPbS6f3sLSkZ5V0RVxo4PvOwvvsYb/g/WY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/09f968-781d-4d78-99f5-e8b0a9520660/1/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/09f968-781d-4d78-99f5-e8b0a9520660/1/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 13:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:38:df:55:1c:2b:7f:42:6d:2e:0f:e9:b5:33:52:15:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afaaa537aa667361129f763894fc8bfcbfdea96f
        Validity
            Not Before: Sep 11 13:03:04 2025 GMT
            Not After : Sep 12 13:03:04 2025 GMT
        Subject: CN=18a28ba33389886dfa2c58f32fcafa1fff8bd6d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7f:ce:2a:62:4c:c6:58:2f:b6:5d:ed:c2:03:
                    2f:24:29:91:66:2f:3e:63:bb:66:27:69:24:db:97:
                    c7:3c:50:0b:d7:3c:82:23:3d:99:26:5b:58:11:19:
                    d1:72:24:4d:52:f6:10:7b:35:b8:8c:b6:05:eb:f1:
                    9e:a1:58:1a:97:a5:ac:e0:ce:bb:36:16:17:4a:d1:
                    7c:28:7e:93:e3:73:2f:ae:3b:31:bf:c7:c8:30:45:
                    e3:4e:2b:2b:e0:f7:f2:4d:1b:66:a5:49:98:c4:e8:
                    db:22:64:76:32:9b:38:a0:eb:84:18:ec:5c:44:2a:
                    3e:c9:6a:9e:14:80:9d:5b:54:62:0f:35:2b:01:06:
                    0e:6c:fc:87:e6:60:c7:dd:c7:d0:d4:37:51:88:b3:
                    53:23:77:20:95:fd:98:1e:e1:01:af:ba:7c:98:ad:
                    b2:a8:a7:0b:9a:ad:1d:07:4c:60:5e:aa:7d:0c:c7:
                    94:ea:e6:ca:f6:57:82:05:c5:01:af:b5:ab:33:df:
                    6b:f1:7a:17:20:06:c3:e3:4d:08:dd:d3:bb:d2:3d:
                    b8:9d:c8:c0:74:8a:05:8f:97:9f:76:8b:12:5b:6f:
                    a1:08:9d:65:93:e7:a8:44:75:ef:c2:75:b7:15:42:
                    fe:55:1e:3e:2c:8f:44:6d:83:ce:df:39:18:c3:bd:
                    2c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A2:8B:A3:33:89:88:6D:FA:2C:58:F3:2F:CA:FA:1F:FF:8B:D6:D4
            X509v3 Authority Key Identifier:
                keyid:AF:AA:A5:37:AA:66:73:61:12:9F:76:38:94:FC:8B:FC:BF:DE:A9:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09f968-781d-4d78-99f5-e8b0a9520660/1/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09f968-781d-4d78-99f5-e8b0a9520660/1/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:cd:41:22:b3:68:df:8c:02:25:db:d6:96:4e:25:06:ac:f7:
         67:89:d9:3d:49:6c:70:5a:90:e0:aa:a3:a0:41:4f:29:8d:f8:
         b6:b7:81:94:a3:03:f3:9a:c5:13:fd:2c:58:79:a1:cb:84:54:
         89:da:58:c7:60:df:cf:df:b8:8a:25:c0:3e:b1:04:2a:e3:8c:
         e2:11:85:6e:5d:99:8e:1a:c5:6f:7c:3c:9d:9a:2c:36:3d:02:
         83:bf:d6:58:5e:4f:9f:f9:c7:ed:23:7a:cb:8b:16:2d:f4:81:
         61:d6:70:72:b1:04:4c:40:e3:6a:57:1f:7b:94:bf:bc:d0:b5:
         5b:19:ff:f1:31:9a:8c:5d:0a:3b:b8:4e:e3:4a:7b:09:17:6a:
         c9:75:8f:f3:81:aa:33:77:3f:7c:e8:03:ed:dd:ee:3f:3d:e1:
         44:aa:fb:03:cd:26:e6:d0:6e:64:0d:34:40:73:1a:45:18:b3:
         1f:ad:9c:69:fe:c6:3c:3c:cb:1e:a2:4a:c4:34:d9:86:55:c7:
         48:ad:df:9f:7a:91:7d:98:ed:0c:83:59:b2:db:13:af:9a:4d:
         56:32:60:a9:69:9a:b7:d8:e2:24:4c:61:37:c2:a2:b5:5d:db:
         71:57:e9:ea:43:60:34:83:1d:73:c4:40:3e:5b:ce:7c:c4:7f:
         c8:83:59:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk431UcK39CbS4P6bUzUhXDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYWFhNTM3YWE2NjczNjExMjlmNzYzODk0ZmM4YmZjYmZk
ZWE5NmYwHhcNMjUwOTExMTMwMzA0WhcNMjUwOTEyMTMwMzA0WjAzMTEwLwYDVQQD
EygxOGEyOGJhMzMzODk4ODZkZmEyYzU4ZjMyZmNhZmExZmZmOGJkNmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3H/OKmJMxlgvtl3twgMvJCmRZi8+
Y7tmJ2kk25fHPFAL1zyCIz2ZJltYERnRciRNUvYQezW4jLYF6/GeoVgal6Ws4M67
NhYXStF8KH6T43Mvrjsxv8fIMEXjTisr4PfyTRtmpUmYxOjbImR2Mps4oOuEGOxc
RCo+yWqeFICdW1RiDzUrAQYObPyH5mDH3cfQ1DdRiLNTI3cglf2YHuEBr7p8mK2y
qKcLmq0dB0xgXqp9DMeU6ubK9leCBcUBr7WrM99r8XoXIAbD400I3dO70j24ncjA
dIoFj5efdosSW2+hCJ1lk+eoRHXvwnW3FUL+VR4+LI9EbYPO3zkYw70sFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBiii6MziYht+ixY8y/K+h//i9bUMB8GA1UdIwQY
MBaAFK+qpTeqZnNhEp92OJT8i/y/3qlvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjZxbE42cG1jMkVTbjNZNGxQeUxfTF9lcVc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wOWY5NjgtNzgxZC00ZDc4LTk5ZjUt
ZThiMGE5NTIwNjYwLzEvcjZxbE42cG1jMkVTbjNZNGxQeUxfTF9lcVc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8wOWY5NjgtNzgxZC00ZDc4LTk5ZjUtZThiMGE5NTIwNjYw
LzEvcjZxbE42cG1jMkVTbjNZNGxQeUxfTF9lcVc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE81BIrNo
34wCJdvWlk4lBqz3Z4nZPUlscFqQ4KqjoEFPKY34treBlKMD85rFE/0sWHmhy4RU
idpYx2Dfz9+4iiXAPrEEKuOM4hGFbl2ZjhrFb3w8nZosNj0Cg7/WWF5Pn/nH7SN6
y4sWLfSBYdZwcrEETEDjalcfe5S/vNC1Wxn/8TGajF0KO7hO40p7CRdqyXWP84Gq
M3c/fOgD7d3uPz3hRKr7A80m5tBuZA00QHMaRRizH62caf7GPDzLHqJKxDTZhlXH
SK3fn3qRfZjtDINZstsTr5pNVjJgqWmat9jiJExhN8KitV3bcVfp6kNgNIMdc8RA
PlvOfMR/yINZDg==
-----END CERTIFICATE-----
Generated at Thu Sep 11 21:37:07 2025 by rpki-client