Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
File:                     R6guVXeaHqTvmWf4IdXMBbe9mek.mft (raw, json)
Hash identifier:          lyesP8EJnWF+bt9UEXirEjkEQAhTvCtJ/sn6LDsvvQM=
Subject key identifier:   3B:8B:B6:A2:78:7C:A9:AC:F9:3D:B3:A8:1E:7B:CE:45:9C:11:34:97
Authority key identifier: 47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
Certificate issuer:       /CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Certificate serial:       01987373DE7BD3F50E60618CFD032F290973
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
Manifest number:          1616
Signing time:             Mon 04 Aug 2025 05:00:30 +0000
Manifest this update:     Mon 04 Aug 2025 05:00:30 +0000
Manifest next update:     Tue 05 Aug 2025 05:00:30 +0000
Files and hashes:         1: CFUwFBzQtfgbafFzZOyLhQjWkGM.roa (hash: 97CGeBu3yLbE5oYRJj25Ylb6GhnLEinlvUvhqt045H4=)
                          2: R6guVXeaHqTvmWf4IdXMBbe9mek.crl (hash: GGzUBGGAkBCt34a+0WvZat5eI6Ma8ZfiXT3cY8r+kv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:73:de:7b:d3:f5:0e:60:61:8c:fd:03:2f:29:09:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
        Validity
            Not Before: Aug  4 05:00:30 2025 GMT
            Not After : Aug  5 05:00:30 2025 GMT
        Subject: CN=3b8bb6a2787ca9acf93db3a81e7bce459c113497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a4:da:bc:3b:d8:2d:23:98:bc:a3:c3:83:31:
                    e2:ee:39:3e:07:9f:f5:d9:87:92:75:fa:74:fe:8a:
                    68:3f:ba:5a:37:04:d5:1a:d8:c2:0e:16:33:97:96:
                    43:d6:ee:0f:44:94:a3:13:1a:05:ed:23:db:48:d6:
                    e9:6e:a0:27:a9:f3:00:81:6c:1e:8e:d1:22:57:ec:
                    7c:4a:f5:ae:11:bc:86:07:c0:e6:71:ed:67:97:a3:
                    64:51:da:f9:26:a8:ad:b8:bc:71:01:96:7d:78:0a:
                    4a:ba:98:db:74:69:70:ac:33:59:e6:b2:cd:8c:e2:
                    36:20:2b:33:9d:5f:c1:c7:fc:a9:be:47:cf:0d:e0:
                    f3:b0:bf:e7:ed:fe:a4:a6:6b:a7:40:fc:3c:b0:c6:
                    8e:5e:ba:4e:87:67:21:59:3e:62:0a:55:0d:8f:13:
                    e6:56:55:69:23:da:31:3b:8a:ec:8a:3d:f8:a1:8c:
                    5a:5d:32:a4:bc:3d:e0:1f:77:33:5b:98:27:43:0d:
                    0f:48:9d:98:04:9f:31:14:be:82:4f:f7:f0:42:28:
                    2d:27:1a:33:02:65:c8:57:3d:f8:c7:6d:45:b0:52:
                    91:15:71:a1:64:d1:41:b4:54:b0:1e:63:0c:a7:0e:
                    fa:f7:86:4c:e8:ce:b1:c9:95:12:75:14:df:06:ce:
                    41:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8B:B6:A2:78:7C:A9:AC:F9:3D:B3:A8:1E:7B:CE:45:9C:11:34:97
            X509v3 Authority Key Identifier:
                keyid:47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:00:0c:ae:c6:33:54:99:0d:be:c5:7c:5f:d2:2c:e2:8a:90:
         f4:59:ab:c8:2a:4b:59:db:26:57:3b:a0:4a:d9:d2:e4:2f:6d:
         47:ab:f4:5f:a4:84:cc:40:f0:3f:e0:c6:f1:df:9c:1f:f2:eb:
         13:bb:55:62:68:a8:66:d2:96:ad:2d:30:ed:1f:89:df:86:aa:
         24:66:08:06:8c:96:a8:0a:a3:65:ec:fa:af:b7:24:d1:b2:57:
         20:59:b9:e2:e1:28:cc:ab:88:c6:7e:8f:5a:30:42:47:01:36:
         f3:25:94:ca:3f:6e:7f:18:f5:56:82:19:b0:16:7c:b4:44:d6:
         0b:17:ee:c8:5f:55:ab:b2:54:2a:08:73:c9:61:62:23:89:9d:
         dd:51:26:1e:4b:6e:20:3c:07:d2:fa:e5:a6:ee:83:36:34:34:
         28:57:23:37:e6:a8:a5:61:cf:9d:50:fe:d3:90:35:85:41:a9:
         11:24:02:5b:86:3c:06:57:0c:38:b8:3f:b6:ff:a8:24:35:4d:
         ab:2e:74:b6:e5:9a:9e:b7:9c:f5:55:91:a2:39:12:a1:7e:52:
         aa:10:aa:2d:24:56:f1:1a:9d:63:48:62:58:11:ef:e0:7a:35:
         1d:7c:8d:a1:cc:39:3e:23:ef:e1:61:dc:08:fd:f5:9b:f1:81:
         56:a2:c0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:34 2025 by rpki-client