Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
File:                     FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft (raw, json)
Hash identifier:          RI3SovvFAlHpjXL+mnxInfgeZi+y7NMa+FanaXAPZU4=
Subject key identifier:   A8:6C:CD:75:D2:2C:8D:9B:32:E5:CD:88:AF:40:5D:AC:C2:B1:73:5F
Authority key identifier: 15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C
Certificate issuer:       /CN=15013024552942ceaf68c67e0128dff4b9ef749c
Certificate serial:       0198752C3D4C717526538C10851F2E974FFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
Manifest number:          08E6
Signing time:             Mon 04 Aug 2025 13:01:30 +0000
Manifest this update:     Mon 04 Aug 2025 13:01:30 +0000
Manifest next update:     Tue 05 Aug 2025 13:01:30 +0000
Files and hashes:         1: FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl (hash: 4sw33Cxr0Dos5/tTqnTR0RLz0f3I2iDfYkU2AUd6Mbo=)
                          2: GscfecpegOFfpMoknfniRAYQkAM.roa (hash: 8hLbX2dDbgbmzy+G6jKdhfkk83QzDCU0+sWTTicGlYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2c:3d:4c:71:75:26:53:8c:10:85:1f:2e:97:4f:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15013024552942ceaf68c67e0128dff4b9ef749c
        Validity
            Not Before: Aug  4 13:01:30 2025 GMT
            Not After : Aug  5 13:01:30 2025 GMT
        Subject: CN=a86ccd75d22c8d9b32e5cd88af405dacc2b1735f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a7:8a:6f:72:e4:c8:4b:ec:2a:b1:d3:1d:99:
                    e8:80:9d:3c:c1:53:7e:db:41:99:73:43:0d:cc:5a:
                    39:29:e5:e7:a7:03:cc:18:7e:65:24:0a:70:cd:6e:
                    46:db:27:92:3e:0c:e7:6e:80:83:ea:f0:33:99:28:
                    ce:8e:20:bf:67:f3:0d:ff:e8:8b:10:b3:06:40:f9:
                    86:9e:32:cf:ec:68:8b:cc:49:cb:6e:86:76:56:d4:
                    79:f9:e0:19:fa:13:c8:95:ff:9a:2f:32:4d:15:4a:
                    ae:64:06:d1:7b:69:77:3b:b4:bc:9e:64:b1:fd:05:
                    d2:43:80:45:07:d7:cd:28:d4:83:90:03:12:2b:cd:
                    69:f3:97:74:9c:a6:ab:14:cd:7e:e2:5b:c9:14:6c:
                    a0:ee:b3:1b:00:cf:a9:e1:7f:b6:4d:d0:a4:0f:3b:
                    22:ac:04:62:c8:d1:f5:52:6f:e1:fc:ac:71:00:ca:
                    f0:dd:43:84:85:42:2e:06:01:47:f4:01:34:91:34:
                    1b:20:bd:ff:c2:07:ad:0f:02:45:c4:04:83:12:29:
                    8c:5f:55:c3:05:d9:05:7d:3b:fa:1f:82:c7:4b:e0:
                    df:ed:fa:cc:d4:3f:ce:8d:15:83:71:fb:f4:cd:79:
                    68:ba:10:8a:e4:b6:53:ef:96:69:2c:d9:26:57:1d:
                    a9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6C:CD:75:D2:2C:8D:9B:32:E5:CD:88:AF:40:5D:AC:C2:B1:73:5F
            X509v3 Authority Key Identifier:
                keyid:15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:92:cd:db:85:aa:54:fd:c6:a5:54:ba:d0:b9:06:95:ce:cc:
         29:01:f1:a2:11:06:68:34:25:5d:cc:6e:fd:91:6f:3d:81:80:
         66:d1:7f:a0:76:8d:9f:c9:40:3c:34:56:54:ec:14:90:c3:15:
         fd:5f:39:a2:b1:05:0a:ec:9c:00:eb:92:35:76:9f:82:4c:b4:
         48:99:98:7a:71:1b:0c:ce:5b:0e:ce:16:8f:b1:69:48:1a:ee:
         32:e6:e5:82:5f:9b:bd:cf:8d:ee:44:14:1a:41:69:76:42:3f:
         b0:ff:f3:12:6c:2b:04:7a:0e:1d:14:fe:4a:46:fd:80:b8:d2:
         24:9e:4a:31:e7:af:3e:08:c3:9c:b0:a6:3d:43:c3:c0:fb:0c:
         14:a2:b0:d1:c2:c8:58:3d:46:79:33:0c:32:7d:31:0d:f3:92:
         a4:0d:15:da:2b:b4:16:4a:83:72:4a:73:82:fd:8d:66:50:39:
         bf:e2:ad:bc:55:8b:ab:66:f3:f7:11:41:bc:4e:af:05:29:43:
         53:92:c8:5d:7f:64:6e:ee:af:1e:29:7a:07:22:76:1e:90:b6:
         6f:fb:d8:f2:63:90:bd:31:ac:5c:a8:13:95:4c:48:42:33:35:
         89:8c:db:a1:29:60:8c:09:68:93:ba:e4:e0:67:77:f1:5a:b5:
         3d:d6:c7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:09:21 2025 by rpki-client