Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
File:                     6EpS3W883rR4C7KZj1AWYMybiP8.mft (raw, json)
Hash identifier:          Dpg8KDudXeIyHCfpEvg7usll93gT5aQQaa9LPUbPWY0=
Subject key identifier:   42:29:DA:B3:93:7A:BF:E0:DB:0D:B1:4B:6D:B4:AA:14:06:DA:78:F6
Authority key identifier: E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF
Certificate issuer:       /CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
Certificate serial:       01987D8BCFA72988C96A3EE0640EE6515D6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
Manifest number:          0935
Signing time:             Wed 06 Aug 2025 04:02:51 +0000
Manifest this update:     Wed 06 Aug 2025 04:02:51 +0000
Manifest next update:     Thu 07 Aug 2025 04:02:51 +0000
Files and hashes:         1: 6EpS3W883rR4C7KZj1AWYMybiP8.crl (hash: dwZNXnzdv4z3FGa192kyivtKx4U/BlpqIlNpQ4eiJ4w=)
                          2: k-C92F5fBC7tzidpGResaRP_3Y8.roa (hash: cCgzC2CyBMRCMgCeDBY61Xy0TGv8/RtXgzQi7ffbn8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8b:cf:a7:29:88:c9:6a:3e:e0:64:0e:e6:51:5d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
        Validity
            Not Before: Aug  6 04:02:51 2025 GMT
            Not After : Aug  7 04:02:51 2025 GMT
        Subject: CN=4229dab3937abfe0db0db14b6db4aa1406da78f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:38:8f:58:1d:91:65:ce:db:2c:76:f8:6a:f0:
                    97:09:9f:4b:a8:54:d5:a5:a7:4c:dc:40:ee:3a:05:
                    4f:64:41:54:aa:e0:1b:31:fb:9c:42:56:df:af:a9:
                    fd:08:41:3e:5e:ab:a5:fb:94:11:4b:67:41:89:85:
                    bd:9d:fd:f2:27:2c:f9:8d:64:0d:7a:47:8f:46:d1:
                    ae:c5:1a:bd:6e:2f:bd:38:48:45:92:2b:0c:da:7b:
                    87:dd:6d:68:72:32:8f:fa:bc:88:48:2f:20:cf:c0:
                    ec:1c:53:82:89:73:7d:82:2e:ba:f1:4c:a2:05:74:
                    61:1a:83:1d:9d:dd:98:98:ed:e1:c7:12:25:d7:01:
                    06:75:20:86:5c:21:1c:69:2b:46:6a:99:b9:94:7b:
                    92:eb:96:62:a2:64:ac:38:1b:07:97:ad:23:c2:a2:
                    7a:78:89:26:92:d9:4b:68:de:81:cb:a5:29:c7:11:
                    08:91:69:3b:3c:b3:89:8d:7e:6c:d4:91:1c:9e:43:
                    28:5e:c7:87:eb:ec:5d:c5:a6:90:92:1d:0d:50:b1:
                    aa:ef:0f:ed:ce:12:e0:76:c6:34:1a:e4:c0:d4:90:
                    d5:46:c4:ce:11:a2:8c:6c:b9:76:97:c3:d1:c1:4b:
                    6d:c4:a2:2d:3a:b7:21:8f:9f:61:44:52:da:51:84:
                    c0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:29:DA:B3:93:7A:BF:E0:DB:0D:B1:4B:6D:B4:AA:14:06:DA:78:F6
            X509v3 Authority Key Identifier:
                keyid:E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:e4:50:13:fc:9e:53:b1:00:e6:27:db:01:96:3f:0f:db:42:
         62:d7:42:62:3f:df:d4:ca:25:d4:88:1b:87:c9:23:a0:46:a1:
         d1:d6:34:77:60:e0:fe:a0:2b:e4:bc:5a:f2:43:43:be:a1:5e:
         49:d7:01:64:98:06:74:fa:4d:2f:6d:10:83:51:32:5e:23:a8:
         3e:64:74:53:bf:d5:14:83:1e:a6:e3:43:d2:4f:fd:e5:ab:dc:
         0b:4a:01:8a:a0:ff:4d:9a:e5:1d:81:4d:60:ab:3e:55:9b:38:
         52:c8:68:bf:35:75:4e:a6:3d:3d:48:82:b7:c1:ef:75:54:42:
         55:e7:56:f4:4f:ff:f5:61:69:f0:82:44:f2:bb:bb:e7:b4:f3:
         73:a3:63:73:07:d7:da:f6:31:f5:e1:d7:71:06:29:50:13:9f:
         eb:9a:a2:54:6e:74:a5:0a:3e:48:c1:d3:74:bb:46:c4:bb:d1:
         fa:1f:bc:8f:06:3c:42:8e:f5:92:9e:c1:3d:f8:a6:b8:f3:06:
         37:45:61:01:c7:eb:20:da:3b:3a:c9:be:d0:30:f2:04:99:b2:
         e5:34:32:30:fc:fa:67:67:e3:ff:c4:91:27:1b:39:91:98:0e:
         86:8c:4b:32:ae:1c:01:32:af:9f:5d:d9:e8:a6:52:6c:88:9c:
         12:1e:0e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:23:29 2025 by rpki-client