Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
File:                     iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft (raw, json)
Hash identifier:          dwGd/Rs3lFYyn14oG7JSqdz4KkeK7sIPryOOUxnpy5s=
Subject key identifier:   4E:18:83:86:F9:DB:42:DA:64:9C:47:30:97:92:4A:EC:FA:61:7E:D1
Authority key identifier: 88:E9:FA:23:DA:4F:E9:7A:A9:E0:F3:91:15:62:05:59:A2:9F:6B:70
Certificate issuer:       /CN=88e9fa23da4fe97aa9e0f39115620559a29f6b70
Certificate serial:       01988C21AA3BEE29D95041C604249B5BDE85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
Manifest number:          03CA
Signing time:             Sat 09 Aug 2025 00:01:13 +0000
Manifest this update:     Sat 09 Aug 2025 00:01:13 +0000
Manifest next update:     Sun 10 Aug 2025 00:01:13 +0000
Files and hashes:         1: 0iDUFJnxa3p3pYn9wOd7dy5ufak.roa (hash: 3azQw0QyMVpE4/ttRjyWB6+sGCTH0gc4+eCuZ8gfhjY=)
                          2: iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl (hash: qNtZ++JL9dYZwjZXWvTGYhSAYS/PVQ2Nx+QrCQyQqvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:21:aa:3b:ee:29:d9:50:41:c6:04:24:9b:5b:de:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e9fa23da4fe97aa9e0f39115620559a29f6b70
        Validity
            Not Before: Aug  9 00:01:13 2025 GMT
            Not After : Aug 10 00:01:13 2025 GMT
        Subject: CN=4e188386f9db42da649c473097924aecfa617ed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:53:94:88:11:e1:95:6c:f5:a8:96:29:2a:7a:
                    cc:29:ec:d2:00:ac:a7:65:15:c5:0a:05:f1:a3:74:
                    26:3f:52:64:ea:d1:14:c6:80:ae:0a:61:9b:76:63:
                    91:ae:29:7e:a4:1e:49:6b:41:95:96:5e:18:81:68:
                    8d:a5:44:04:aa:38:a9:ef:8b:2b:8b:56:9f:0a:a1:
                    ef:d8:d8:a5:99:13:f7:71:55:18:ab:29:bc:a1:6f:
                    cd:12:da:19:f6:52:c3:f8:97:96:14:7a:c5:d5:09:
                    03:c9:85:7a:47:51:f8:f1:70:8d:a1:bf:86:77:3b:
                    47:fc:e7:85:60:cd:4d:53:28:ca:a9:5b:65:5d:f0:
                    93:c4:39:9a:04:d2:39:8b:3c:f9:f5:36:bc:07:0d:
                    2e:e8:57:11:b8:90:52:8b:3f:67:bc:a0:35:dd:5e:
                    6c:94:94:72:a4:3e:2d:31:98:b5:90:69:fe:50:68:
                    bf:64:5b:9c:09:73:f1:ba:22:55:4f:9f:85:77:56:
                    47:ec:f7:23:02:28:cd:66:80:af:1b:5b:a5:6e:1a:
                    ec:a9:af:c0:51:d6:d3:ab:0b:01:98:22:67:37:1a:
                    8c:cd:28:76:17:84:f0:e1:be:a3:ba:30:d3:e0:3d:
                    9e:c4:b7:ce:3b:5d:53:89:f7:71:3b:c1:bc:6e:6f:
                    5b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:18:83:86:F9:DB:42:DA:64:9C:47:30:97:92:4A:EC:FA:61:7E:D1
            X509v3 Authority Key Identifier:
                keyid:88:E9:FA:23:DA:4F:E9:7A:A9:E0:F3:91:15:62:05:59:A2:9F:6B:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:4e:ab:6c:25:e0:d7:40:bc:be:5b:e5:18:aa:f1:5e:aa:c1:
         f3:91:a9:38:a8:02:1c:02:99:71:a8:1c:3e:67:05:95:1c:61:
         32:5e:74:59:f1:36:ee:34:b2:94:aa:0f:c1:09:7e:90:25:d9:
         5e:1f:9a:2f:90:61:d5:77:cf:10:26:f4:70:08:56:cc:79:00:
         b8:a9:ba:a1:b8:6d:ae:2a:37:be:6b:55:38:fc:45:12:2c:d8:
         da:45:c8:07:f2:f8:4c:05:ba:66:63:50:07:ca:2c:fb:ff:8b:
         30:32:b2:c6:7b:55:ac:4d:3c:12:c0:6e:df:82:2b:89:b6:59:
         21:23:f7:a8:ee:fb:c0:8f:b8:4d:c4:28:62:80:48:03:76:56:
         84:d2:7c:8d:71:d8:f2:b5:d6:e7:db:73:eb:3d:56:32:44:4f:
         11:9a:ff:3f:0e:0c:ae:ab:69:d7:78:3b:58:36:39:07:a7:6e:
         76:bb:22:bc:c3:d1:27:22:bc:1d:ee:e8:33:7d:b4:bc:db:d4:
         ea:67:84:77:27:61:25:5f:d4:3d:84:2d:be:59:8f:96:53:a6:
         e5:84:9f:f0:a4:56:ad:d7:1b:32:02:ba:cd:7b:60:8a:fa:0a:
         4e:9d:55:38:f5:27:2e:77:d9:02:81:47:5a:8b:3d:d5:4b:c7:
         98:c6:27:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:52:47 2025 by rpki-client