Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
File:                     MT6-Q2p1YpuPPbdKmj-h1dMK038.mft (raw, json)
Hash identifier:          s6jZLPB0vnrsnlPc+4pj1foqSekUX+3x2cuyvpi8+l4=
Subject key identifier:   82:19:E8:7E:6A:80:8F:D1:31:B6:41:0D:37:3A:6F:F5:E1:D2:D5:D4
Authority key identifier: 31:3E:BE:43:6A:75:62:9B:8F:3D:B7:4A:9A:3F:A1:D5:D3:0A:D3:7F
Certificate issuer:       /CN=313ebe436a75629b8f3db74a9a3fa1d5d30ad37f
Certificate serial:       01987C09FBF9D27B6CCBB9CD0D11E80359A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
Manifest number:          05D3
Signing time:             Tue 05 Aug 2025 21:01:25 +0000
Manifest this update:     Tue 05 Aug 2025 21:01:25 +0000
Manifest next update:     Wed 06 Aug 2025 21:01:25 +0000
Files and hashes:         1: MT6-Q2p1YpuPPbdKmj-h1dMK038.crl (hash: hgLolrdRfaI4lywqRCZO5uqW2FfkL+tsCu0lWlx7I84=)
                          2: _LdyI__CtBUyN3KKHO7DmbRhOVc.roa (hash: BMSl9hLbGqGu2thmt7Hy6s7t4a2k9exnTVleWfEcqU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:09:fb:f9:d2:7b:6c:cb:b9:cd:0d:11:e8:03:59:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=313ebe436a75629b8f3db74a9a3fa1d5d30ad37f
        Validity
            Not Before: Aug  5 21:01:25 2025 GMT
            Not After : Aug  6 21:01:25 2025 GMT
        Subject: CN=8219e87e6a808fd131b6410d373a6ff5e1d2d5d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4a:a2:cc:32:5d:c1:68:93:f7:63:7e:5d:88:
                    2d:47:eb:7c:b1:b9:85:3f:05:e9:42:ce:5c:11:1c:
                    e0:47:bb:3d:51:e1:cf:36:b5:5e:56:43:cb:f7:bc:
                    e6:60:d3:ed:4e:84:f0:ab:82:f1:3b:ae:44:43:aa:
                    e4:a6:06:0b:02:a7:1f:3a:9b:04:b6:c3:15:9b:14:
                    58:98:c5:e9:d1:98:a2:df:80:ea:ac:40:15:9f:98:
                    b4:9b:cd:ec:ca:17:79:82:eb:fa:3b:de:1c:1a:91:
                    f2:42:fa:08:d2:2c:86:ad:0b:f7:60:5a:61:d5:39:
                    c2:12:37:ec:5c:11:ad:c4:f8:c0:cc:76:27:2b:92:
                    f8:d0:00:7f:42:a9:bc:19:e1:88:83:e7:30:61:2c:
                    7a:bb:1f:bc:b0:fe:1d:38:33:f6:e4:86:fb:38:46:
                    7b:a8:b3:85:16:22:64:49:9a:2e:90:47:4e:46:bd:
                    aa:52:c5:e9:66:df:5a:e7:e5:1b:34:f0:89:3c:82:
                    c0:ad:ed:e0:ed:69:89:a2:91:11:80:0d:ca:a5:38:
                    da:c3:5c:19:9c:78:d6:49:91:cf:3d:03:14:ad:26:
                    d2:6d:eb:66:5e:7f:4e:54:fe:32:99:6e:1b:a9:42:
                    3b:a5:3f:e4:35:b3:7a:38:a9:5c:6c:d8:6a:4d:b2:
                    b9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:19:E8:7E:6A:80:8F:D1:31:B6:41:0D:37:3A:6F:F5:E1:D2:D5:D4
            X509v3 Authority Key Identifier:
                keyid:31:3E:BE:43:6A:75:62:9B:8F:3D:B7:4A:9A:3F:A1:D5:D3:0A:D3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:78:a8:0a:5c:7e:0b:19:07:2c:5a:69:53:61:90:13:23:f0:
         42:be:d1:a3:cf:2c:e9:38:95:ac:7d:e8:3c:f8:e4:14:fd:dc:
         7d:7d:a0:53:88:29:46:d2:7a:3a:74:b5:cc:21:66:b7:d2:1e:
         d9:0e:2e:62:05:ab:73:31:cb:b6:f5:33:ca:35:f0:21:41:ae:
         b2:17:8b:3f:66:2d:74:7c:eb:a7:cf:18:03:63:f7:9f:6d:25:
         53:be:67:f8:89:fb:23:e6:95:6e:f0:a7:a6:ad:73:b3:b5:55:
         d0:70:57:2b:1e:f8:cc:a1:43:20:49:9e:a8:23:20:52:e3:f6:
         63:73:37:7c:01:54:6f:68:94:d0:cb:83:36:f3:46:83:f7:28:
         92:72:6b:1c:7b:30:bf:56:3b:b0:ab:29:d9:c0:23:dd:93:ce:
         92:08:bd:b9:12:b0:72:32:43:54:42:ec:5c:c2:b6:bc:ea:c0:
         b2:b5:ac:c8:5b:d4:85:0c:31:e1:1f:5f:23:fc:98:38:4a:5b:
         55:23:19:35:a0:9c:44:db:7d:99:3b:4a:6f:ec:98:cc:fb:10:
         2b:9e:92:72:fa:bf:1e:42:db:d4:8e:a2:4e:9e:a8:b5:01:ae:
         5e:f0:54:d7:97:d1:c8:c5:de:f4:24:ca:10:f2:c5:bf:5f:a5:
         03:95:74:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:39:22 2025 by rpki-client