Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
File:                     W6vKoQozYHLrwIIKbfC_pNxc_ao.mft (raw, json)
Hash identifier:          ApVF2Hco0YLOO4JLRccJv+PtdERzHLI3kEIvn7QqhMU=
Subject key identifier:   0A:0A:43:4A:BA:9D:60:53:95:96:72:11:33:D4:D4:9F:DA:7C:2A:6B
Authority key identifier: 5B:AB:CA:A1:0A:33:60:72:EB:C0:82:0A:6D:F0:BF:A4:DC:5C:FD:AA
Certificate issuer:       /CN=5babcaa10a336072ebc0820a6df0bfa4dc5cfdaa
Certificate serial:       019873E215FA7A9FD6C928292B755B8F2036
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
Manifest number:          09EF
Signing time:             Mon 04 Aug 2025 07:00:53 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:53 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:53 +0000
Files and hashes:         1: B2n18W6FZZHyRPgmArtbq0-BQHI.roa (hash: sGRiT/dWrEM0f4SVXVnUW/pThWPm0EW+IVYQygpGhOY=)
                          2: W6vKoQozYHLrwIIKbfC_pNxc_ao.crl (hash: EBNVCSi2Q5FJ9YI6jXdwNbv1Sgkxh9cg4qtmkytGc/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:15:fa:7a:9f:d6:c9:28:29:2b:75:5b:8f:20:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5babcaa10a336072ebc0820a6df0bfa4dc5cfdaa
        Validity
            Not Before: Aug  4 07:00:53 2025 GMT
            Not After : Aug  5 07:00:53 2025 GMT
        Subject: CN=0a0a434aba9d60539596721133d4d49fda7c2a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c2:24:7e:fd:e9:72:47:42:01:26:89:9a:c5:
                    ea:f0:1a:13:62:95:4e:dd:67:44:60:16:4b:89:ec:
                    ce:69:73:ea:3f:14:6a:a9:47:da:c4:32:b4:7c:3b:
                    26:0b:23:35:c5:ac:9e:e0:b7:45:ca:18:95:a0:40:
                    46:40:ba:a0:9a:01:2c:0b:53:5f:60:f9:f0:84:d7:
                    56:72:10:2c:c7:3d:60:d5:a6:f4:50:5e:3e:84:05:
                    03:81:c6:e0:ed:61:03:89:47:e8:34:67:c6:8b:e7:
                    a1:23:9f:cb:a7:d9:a3:4d:71:be:81:2c:35:01:0f:
                    55:bf:cf:5d:09:84:10:aa:78:5f:99:1b:8d:d7:25:
                    48:b7:2d:94:04:a0:17:1e:a5:41:d1:27:36:0a:c5:
                    0a:4a:7b:84:57:28:bc:bf:ab:51:59:23:e2:55:df:
                    60:31:42:32:f4:2b:8d:15:26:3e:42:f1:0a:2c:87:
                    16:0a:5e:40:d0:32:8a:95:d5:60:67:46:10:14:1c:
                    9b:d2:1a:a3:6f:55:2e:13:a7:a9:90:c8:8b:db:c9:
                    df:4f:4b:dc:3c:f1:87:00:16:e8:64:5d:e9:5a:9e:
                    c5:b3:a9:46:0c:3a:13:79:88:2b:56:c3:18:b3:f1:
                    0b:f2:36:85:d4:db:72:b7:a4:83:bc:b9:08:dd:35:
                    1b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0A:43:4A:BA:9D:60:53:95:96:72:11:33:D4:D4:9F:DA:7C:2A:6B
            X509v3 Authority Key Identifier:
                keyid:5B:AB:CA:A1:0A:33:60:72:EB:C0:82:0A:6D:F0:BF:A4:DC:5C:FD:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:0c:00:4a:6d:b1:1f:7d:41:52:f1:eb:26:09:75:d1:76:ea:
         83:9e:94:f3:02:b7:f9:55:56:24:81:25:1f:95:bf:69:5c:c2:
         e7:b1:38:8d:be:0a:fd:ad:f3:c6:d6:b4:ab:4c:5a:b0:6e:d0:
         20:0f:e2:d8:d2:16:e0:26:8c:b9:17:12:c2:4b:0b:d3:0f:83:
         46:59:2a:eb:68:cb:77:2e:3c:d7:1b:d3:9f:cc:29:4f:8d:24:
         c8:13:51:92:ee:97:c0:4a:61:57:7b:fb:5e:8f:d2:c1:ec:2b:
         a5:d7:52:ac:42:19:46:f5:f7:f6:a1:da:8d:64:90:6f:aa:a8:
         c3:05:2d:f4:8d:38:69:37:bc:ef:02:c2:f5:e8:c5:ff:dd:50:
         2d:3e:03:b1:53:8d:49:66:47:b0:34:86:8a:6c:cc:dc:4c:3a:
         6e:fe:ab:1a:27:4b:1d:40:e8:2c:a0:4b:12:80:a0:5d:fb:e0:
         b3:9c:58:d2:87:ba:bd:f8:d4:0b:8c:85:54:02:c9:e4:5f:6d:
         1d:69:4b:fc:39:3c:da:72:66:7a:09:1b:35:57:ba:d3:e9:d7:
         56:56:60:fb:52:86:a5:70:bf:e9:a2:9f:2b:0c:85:8c:21:ae:
         08:d9:a0:be:15:1a:7d:94:7b:61:36:cd:f8:79:d8:40:12:15:
         4e:d5:64:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4hX6ep/WySgpK3VbjyA2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYWJjYWExMGEzMzYwNzJlYmMwODIwYTZkZjBiZmE0ZGM1
Y2ZkYWEwHhcNMjUwODA0MDcwMDUzWhcNMjUwODA1MDcwMDUzWjAzMTEwLwYDVQQD
EygwYTBhNDM0YWJhOWQ2MDUzOTU5NjcyMTEzM2Q0ZDQ5ZmRhN2MyYTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksIkfv3pckdCASaJmsXq8BoTYpVO
3WdEYBZLiezOaXPqPxRqqUfaxDK0fDsmCyM1xaye4LdFyhiVoEBGQLqgmgEsC1Nf
YPnwhNdWchAsxz1g1ab0UF4+hAUDgcbg7WEDiUfoNGfGi+ehI5/Lp9mjTXG+gSw1
AQ9Vv89dCYQQqnhfmRuN1yVIty2UBKAXHqVB0Sc2CsUKSnuEVyi8v6tRWSPiVd9g
MUIy9CuNFSY+QvEKLIcWCl5A0DKKldVgZ0YQFByb0hqjb1UuE6epkMiL28nfT0vc
PPGHABboZF3pWp7Fs6lGDDoTeYgrVsMYs/EL8jaF1Ntyt6SDvLkI3TUbCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoKQ0q6nWBTlZZyETPU1J/afCprMB8GA1UdIwQY
MBaAFFuryqEKM2By68CCCm3wv6TcXP2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzZ2S29Rb3pZSExyd0lJS2JmQ19wTnhjX2FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC84YzcyNDctODU5Mi00NGFlLTgyYjEt
MTAwZTViNjVlNjcyLzEvVzZ2S29Rb3pZSExyd0lJS2JmQ19wTnhjX2FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC84YzcyNDctODU5Mi00NGFlLTgyYjEtMTAwZTViNjVlNjcy
LzEvVzZ2S29Rb3pZSExyd0lJS2JmQ19wTnhjX2FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArAwASm2x
H31BUvHrJgl10Xbqg56U8wK3+VVWJIElH5W/aVzC57E4jb4K/a3zxta0q0xasG7Q
IA/i2NIW4CaMuRcSwksL0w+DRlkq62jLdy481xvTn8wpT40kyBNRku6XwEphV3v7
Xo/SwewrpddSrEIZRvX39qHajWSQb6qowwUt9I04aTe87wLC9ejF/91QLT4DsVON
SWZHsDSGimzM3Ew6bv6rGidLHUDoLKBLEoCgXfvgs5xY0oe6vfjUC4yFVALJ5F9t
HWlL/Dk82nJmegkbNVe60+nXVlZg+1KGpXC/6aKfKwyFjCGuCNmgvhUafZR7YTbN
+HnYQBIVTtVkKQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:40:04 2025 by rpki-client