Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
File:                     6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft (raw, json)
Hash identifier:          6pHGGdf2b5ZSFSZfONNw2LHvzAFUfSufUGDVRARnc4E=
Subject key identifier:   D3:43:93:55:67:B9:61:0E:04:1E:FF:10:6E:81:EC:31:66:69:43:E2
Authority key identifier: E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94
Certificate issuer:       /CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
Certificate serial:       0198906BBFC4507F003B29A30B0479B5A440
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
Manifest number:          10D0
Signing time:             Sat 09 Aug 2025 20:00:37 +0000
Manifest this update:     Sat 09 Aug 2025 20:00:37 +0000
Manifest next update:     Sun 10 Aug 2025 20:00:37 +0000
Files and hashes:         1: 1-lHFpavrRPAxi2mxTPDKpLPcy14.roa (hash: 2r+qTZtO07hGXOIWN+DFEL0ZIWfOdC+x8G7I0hOMy20=)
                          2: 6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl (hash: xpfm/7/XlBVGAa4j89h/HBMqn9QfYpGcvgCJ7xeDhcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:6b:bf:c4:50:7f:00:3b:29:a3:0b:04:79:b5:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
        Validity
            Not Before: Aug  9 20:00:37 2025 GMT
            Not After : Aug 10 20:00:37 2025 GMT
        Subject: CN=d343935567b9610e041eff106e81ec31666943e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:1c:2c:17:f6:7f:f7:f9:f4:92:f2:91:2e:
                    dc:b1:aa:71:89:dc:62:61:3d:ba:7d:80:08:11:78:
                    3f:74:d9:6f:fd:0f:dd:8a:09:10:7b:a3:8a:53:8c:
                    62:b9:77:fd:dd:f1:55:21:89:64:f7:0e:3d:03:d3:
                    06:8a:f3:ae:69:8f:f2:85:62:08:35:b0:d0:92:fd:
                    0f:d5:df:0c:be:5e:f0:47:00:ec:29:9b:54:95:fa:
                    21:ef:5c:81:94:c1:8f:54:5f:85:d7:f7:76:6c:71:
                    16:be:0a:24:2f:5c:f8:85:e7:fe:95:f6:cd:c3:91:
                    ce:65:04:62:c1:0c:2d:7e:4f:31:00:03:58:8a:10:
                    d4:bb:7b:27:dd:e2:4d:8b:37:64:98:0a:de:c9:3b:
                    ea:45:59:6c:09:cc:b2:3f:ea:5d:8c:22:bb:0d:56:
                    e9:36:91:3f:82:2c:8d:35:ee:4e:9c:c6:60:07:71:
                    bb:f0:3d:df:65:f8:b8:90:35:3b:66:c0:a0:64:46:
                    e5:d8:15:da:cb:f0:a5:1b:a2:eb:86:e7:9c:c8:95:
                    43:27:19:3c:6a:d6:01:81:40:c8:87:22:7f:a7:39:
                    18:ca:d1:b5:27:08:90:1f:20:23:85:d9:30:9c:20:
                    b5:fd:7f:2b:00:34:93:90:15:62:ce:02:ca:6a:b3:
                    74:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:43:93:55:67:B9:61:0E:04:1E:FF:10:6E:81:EC:31:66:69:43:E2
            X509v3 Authority Key Identifier:
                keyid:E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:8d:73:8c:a9:f0:83:78:0d:8d:dc:cf:a4:00:10:17:ff:5f:
         b0:14:a0:e0:0a:c9:a0:51:d1:5c:a3:02:cf:ad:b1:3c:52:b6:
         85:fd:db:b7:02:a1:d5:a6:47:f3:0c:f3:ba:7d:68:60:47:d6:
         55:15:3f:f3:36:9e:8d:f4:d1:82:b3:35:82:9a:cd:50:71:2a:
         ca:09:b9:e2:70:d0:0e:c5:d6:df:48:b9:60:88:55:30:d9:31:
         01:c1:c1:87:e1:f0:2d:54:9a:68:af:cb:54:e6:6b:1a:b0:df:
         9f:7a:d3:74:d2:e9:73:ca:c0:d1:1a:70:06:5d:79:ee:15:ce:
         39:af:00:41:62:74:f0:9a:e8:69:3c:a1:c4:3e:7a:61:0d:40:
         eb:5c:1a:81:c7:3b:a9:02:78:c6:f5:fd:a5:aa:0f:56:dc:ec:
         d8:0d:c2:f6:d3:f9:48:86:dc:4f:00:8d:d2:48:e5:db:0d:16:
         db:d8:13:cc:ec:c5:5f:ec:d2:56:50:73:c5:55:07:f9:c9:45:
         7b:7f:1c:67:ac:30:cc:8d:27:5e:b6:c7:61:17:98:33:01:08:
         46:88:a6:fc:9b:ef:c0:94:73:eb:d6:51:3f:ba:24:b7:b6:41:
         da:0b:18:54:4d:55:ef:cc:2e:a9:2e:79:e9:45:3e:cb:b0:88:
         49:73:be:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:37:40 2025 by rpki-client