Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
File:                     dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft (raw, json)
Hash identifier:          djb0mbPSbBoiPPF7U7zYzVylogPdFkKr0zYna2jI8QI=
Subject key identifier:   5F:19:88:B7:82:D1:E1:C6:AE:8E:6D:57:4C:51:8E:48:03:6E:63:24
Authority key identifier: 76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
Certificate issuer:       /CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Certificate serial:       01988A6A10DD36AE8990CACA03DA41139DF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
Manifest number:          11A6
Signing time:             Fri 08 Aug 2025 16:01:03 +0000
Manifest this update:     Fri 08 Aug 2025 16:01:03 +0000
Manifest next update:     Sat 09 Aug 2025 16:01:03 +0000
Files and hashes:         1: JmRIXqWgLbHOS_DUn9tYXP3VwvE.roa (hash: 07OywnLuhNnV2ffg9k1J1SDz7HRBDcbP+ENwBGJ8ZCU=)
                          2: dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl (hash: GSc1HrJP0zKHalGBpvbaCbMiJHs+YrbfzXVTisj+Mts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:6a:10:dd:36:ae:89:90:ca:ca:03:da:41:13:9d:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765ea3400a3748c3b6c61268d492f8bf0a908239
        Validity
            Not Before: Aug  8 16:01:03 2025 GMT
            Not After : Aug  9 16:01:03 2025 GMT
        Subject: CN=5f1988b782d1e1c6ae8e6d574c518e48036e6324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3d:bc:36:4c:02:3e:17:7f:85:f3:18:09:e7:
                    51:91:ce:d0:08:af:28:ef:b2:6a:1d:bd:b7:93:4c:
                    af:14:a9:b2:11:6e:a0:92:02:1a:ac:e0:b7:c7:3e:
                    c5:95:da:c5:71:60:fa:de:4d:0e:42:e6:47:cd:28:
                    05:51:fa:4e:0a:c1:c2:0c:b0:17:19:85:63:3d:05:
                    c7:48:51:60:82:cb:aa:cc:c0:30:8e:14:6c:fa:8d:
                    db:18:76:ef:0c:89:7f:26:19:fd:93:f8:79:41:52:
                    eb:64:ae:b1:3b:52:4b:cd:c3:7a:a0:b7:81:e5:76:
                    00:0a:8e:7a:0c:cc:33:e8:ac:42:66:0e:27:75:c3:
                    94:cb:7a:db:25:20:12:d0:a5:22:43:8f:af:98:4f:
                    2c:24:77:a9:9a:c0:67:e0:c2:6f:a1:e6:ed:b8:5d:
                    4c:13:a4:39:3b:bb:76:67:0d:a5:6f:9c:57:9a:93:
                    96:70:1d:dc:a6:de:c2:7e:ad:f3:0d:7a:3d:3a:43:
                    22:9e:29:aa:5d:29:33:9e:fb:8c:03:a1:d8:c4:75:
                    da:20:55:dc:f5:d3:a2:b1:ba:48:4a:ed:7f:27:62:
                    db:b2:e8:6b:f7:91:e5:8f:4e:f7:c4:77:c7:5b:ef:
                    7e:e3:71:c2:44:93:81:39:bb:6c:8a:b1:4a:06:92:
                    10:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:19:88:B7:82:D1:E1:C6:AE:8E:6D:57:4C:51:8E:48:03:6E:63:24
            X509v3 Authority Key Identifier:
                keyid:76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ca:28:6b:e0:06:51:e4:66:25:7e:b5:22:24:cb:79:e0:bf:
         67:ee:e2:be:ef:8f:32:d8:14:66:d0:6f:f5:82:57:1d:9e:7b:
         fa:a1:69:55:3c:d2:9b:58:cc:b5:0b:73:dc:60:0f:0d:54:51:
         cd:a5:c2:82:a4:cb:a0:95:be:31:0b:06:1d:cb:23:05:f2:c7:
         9c:ea:c4:3a:36:33:84:c2:2a:41:5c:2d:12:d9:31:c3:1d:c8:
         42:f1:75:54:50:4d:95:c0:4d:02:e9:0e:59:65:a9:21:e6:e0:
         e3:92:26:e0:4e:ff:bd:44:88:e4:75:a2:6c:6a:04:67:f7:69:
         2e:6b:56:88:b2:05:41:ae:b6:82:0f:77:e6:3b:e8:bb:f8:95:
         7a:84:ef:0b:a6:22:52:ba:51:e2:25:0d:66:06:32:24:1b:d8:
         c9:e9:9d:ea:05:53:73:9c:c6:ae:8b:af:ea:d7:85:a1:cc:2b:
         e4:b0:5e:dc:35:ac:19:be:27:50:cd:e1:c1:78:b5:ad:30:db:
         81:c8:cb:2c:cb:c3:e4:58:a6:4d:ba:b2:cc:cf:3f:11:a2:b6:
         f1:72:8b:d6:b5:9a:1e:54:e9:65:3c:a2:23:09:87:0d:a2:47:
         e6:e6:a2:64:69:83:87:71:a7:94:44:58:0c:13:fc:6c:15:14:
         81:40:a5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:45:24 2025 by rpki-client