Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
File:                     6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft (raw, json)
Hash identifier:          cydhsI0sSJ4N1+g0i4teUHmnAwqeuSiLoL5+VY7FyuA=
Subject key identifier:   FB:6A:ED:84:BC:72:09:29:AC:F2:D0:7D:6B:BD:88:9B:56:C3:C2:AE
Authority key identifier: E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
Certificate issuer:       /CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Certificate serial:       01988DA1AFF6D343F6DB9243E85A2B06E5A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
Manifest number:          0B82
Signing time:             Sat 09 Aug 2025 07:00:40 +0000
Manifest this update:     Sat 09 Aug 2025 07:00:40 +0000
Manifest next update:     Sun 10 Aug 2025 07:00:40 +0000
Files and hashes:         1: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl (hash: o07G7nzgMGiBXlIshwtMY1IGdxGLGN1BwOEQXaeHAr0=)
                          2: 9SpuyxwY5s_DY9H2HuXrbxGl_AE.roa (hash: 8TyA+krjmjGFWghMXqG0FTTJGiUwEj3FhItOTxb8jEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:a1:af:f6:d3:43:f6:db:92:43:e8:5a:2b:06:e5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
        Validity
            Not Before: Aug  9 07:00:40 2025 GMT
            Not After : Aug 10 07:00:40 2025 GMT
        Subject: CN=fb6aed84bc720929acf2d07d6bbd889b56c3c2ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:53:8b:f0:cd:4d:91:09:68:3b:07:e0:13:cd:
                    c3:cd:8d:e2:dd:90:89:83:72:6f:bd:a4:f1:52:27:
                    2c:d7:07:e6:4c:8e:fb:eb:3e:59:a3:ae:c0:dd:fb:
                    36:60:c1:80:66:72:66:33:a8:ac:f9:10:82:ea:5b:
                    c7:cf:04:a4:9d:45:fe:c4:a9:80:aa:54:3d:82:6d:
                    8a:24:97:ae:c2:58:aa:2d:0d:ee:bf:b4:d4:ae:96:
                    01:a3:a9:85:49:b3:97:b2:1b:46:e9:1a:8f:cc:75:
                    9a:b3:70:59:d8:4d:59:45:d3:3f:67:3d:9c:9b:5e:
                    c7:3c:ab:3e:52:29:26:5d:2d:4d:e5:00:b9:d5:db:
                    43:fc:b7:95:38:0e:26:61:e5:1a:0f:08:1d:f1:d9:
                    36:42:20:fb:6b:42:ff:93:aa:01:7e:4b:3e:c3:2e:
                    15:d8:21:8b:1d:06:60:ff:24:da:b7:6e:8b:32:b4:
                    8d:7c:06:ad:bf:ae:0d:f3:42:ca:54:93:4f:75:d2:
                    da:e3:8d:d7:bc:c8:7c:fd:2c:4f:73:84:4c:d6:53:
                    86:b6:8a:78:b3:c0:00:7e:8a:e8:76:29:42:03:60:
                    31:b9:a5:b0:f1:9e:fa:a5:25:14:8a:87:28:55:7e:
                    5f:5d:ac:9b:f5:7c:9a:53:c7:ec:63:0c:6e:34:3a:
                    d6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6A:ED:84:BC:72:09:29:AC:F2:D0:7D:6B:BD:88:9B:56:C3:C2:AE
            X509v3 Authority Key Identifier:
                keyid:E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:46:82:9f:49:49:0f:ab:04:70:ce:ae:2a:54:97:a3:28:f8:
         a5:02:08:4c:86:39:ed:af:a1:45:91:1c:67:03:07:23:63:1e:
         b1:e7:52:0d:8e:58:c1:c3:38:b1:68:3d:f7:5c:26:7a:f8:ab:
         8c:71:88:48:78:46:0f:65:70:24:f2:c9:8a:9d:a9:42:73:97:
         55:f7:ab:67:27:27:c5:34:a5:af:a9:68:c3:df:38:80:f6:02:
         95:bc:26:38:52:83:8b:e6:c8:57:25:50:b7:5c:a7:1a:81:22:
         be:ab:29:e6:58:1d:cb:b7:6d:f1:e8:b1:00:1c:53:66:91:26:
         e4:7e:01:e3:06:00:34:de:73:7b:85:fd:47:13:ba:a5:02:d0:
         20:31:e6:42:bc:17:78:4d:e2:d7:b4:ff:55:c9:8d:ba:80:25:
         03:42:67:79:d7:d2:bc:bc:fc:c4:82:7f:3c:46:d9:a1:90:46:
         18:f5:30:15:c0:13:2e:bc:8d:df:15:a5:fc:ce:1e:e7:fb:8f:
         a0:48:39:e7:4c:da:2f:52:11:1d:df:1a:ca:8e:ac:08:ee:dd:
         16:0c:6d:c7:c8:29:04:32:79:2f:e3:f7:72:00:9d:80:84:89:
         5e:c9:3a:39:6e:ef:5d:b4:e2:54:a1:f2:ef:96:6f:68:09:fa:
         cd:0a:d4:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiNoa/200P225JD6ForBuWkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MWYyNzJiMTNjNzUwMTQzYzdlYzg3ZTBjODAyYWVhZDhh
YzZlMDcwHhcNMjUwODA5MDcwMDQwWhcNMjUwODEwMDcwMDQwWjAzMTEwLwYDVQQD
EyhmYjZhZWQ4NGJjNzIwOTI5YWNmMmQwN2Q2YmJkODg5YjU2YzNjMmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11OL8M1NkQloOwfgE83DzY3i3ZCJ
g3JvvaTxUics1wfmTI776z5Zo67A3fs2YMGAZnJmM6is+RCC6lvHzwSknUX+xKmA
qlQ9gm2KJJeuwliqLQ3uv7TUrpYBo6mFSbOXshtG6RqPzHWas3BZ2E1ZRdM/Zz2c
m17HPKs+UikmXS1N5QC51dtD/LeVOA4mYeUaDwgd8dk2QiD7a0L/k6oBfks+wy4V
2CGLHQZg/yTat26LMrSNfAatv64N80LKVJNPddLa443XvMh8/SxPc4RM1lOGtop4
s8AAforodilCA2AxuaWw8Z76pSUUiocoVX5fXayb9XyaU8fsYwxuNDrWuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtq7YS8cgkprPLQfWu9iJtWw8KuMB8GA1UdIwQY
MBaAFOkfJysTx1AUPH7IfgyAKurYrG4HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlI4bkt4UEhVQlE4ZnNoLURJQXE2dGlzYmdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNjJkMjItODJmMi00YjIwLWJhYzQt
NjAxYTcyNWEwMGY1LzEvNlI4bkt4UEhVQlE4ZnNoLURJQXE2dGlzYmdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kNjJkMjItODJmMi00YjIwLWJhYzQtNjAxYTcyNWEwMGY1
LzEvNlI4bkt4UEhVQlE4ZnNoLURJQXE2dGlzYmdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0aCn0lJ
D6sEcM6uKlSXoyj4pQIITIY57a+hRZEcZwMHI2MesedSDY5YwcM4sWg991wmevir
jHGISHhGD2VwJPLJip2pQnOXVferZycnxTSlr6low984gPYClbwmOFKDi+bIVyVQ
t1ynGoEivqsp5lgdy7dt8eixABxTZpEm5H4B4wYANN5ze4X9RxO6pQLQIDHmQrwX
eE3i17T/VcmNuoAlA0JnedfSvLz8xIJ/PEbZoZBGGPUwFcATLryN3xWl/M4e5/uP
oEg550zaL1IRHd8ayo6sCO7dFgxtx8gpBDJ5L+P3cgCdgISJXsk6OW7vXbTiVKHy
75ZvaAn6zQrUBg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:40 2025 by rpki-client