Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
File:                     aTHX56mXSaOF6usn-FCridqPLuA.mft (raw, json)
Hash identifier:          E9mVBmbmXG9wiIzgelx6vxwJ0wgL2cQf/trwyGqAR18=
Subject key identifier:   09:F0:E6:4E:A5:5B:A9:6E:CD:D5:07:2C:3F:56:39:5E:3F:82:14:BE
Authority key identifier: 69:31:D7:E7:A9:97:49:A3:85:EA:EB:27:F8:50:AB:89:DA:8F:2E:E0
Certificate issuer:       /CN=6931d7e7a99749a385eaeb27f850ab89da8f2ee0
Certificate serial:       01987DF7C31E6A4856D84D71A888C3A29606
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aTHX56mXSaOF6usn-FCridqPLuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
Manifest number:          0559
Signing time:             Wed 06 Aug 2025 06:00:45 +0000
Manifest this update:     Wed 06 Aug 2025 06:00:45 +0000
Manifest next update:     Thu 07 Aug 2025 06:00:45 +0000
Files and hashes:         1: NluQuRsgOiFaIXTWt3y3rez6Bh4.roa (hash: JKkT06F430W2THw9Cv6TXAFRcJ7i7LHFoCLoKhmOqSc=)
                          2: aTHX56mXSaOF6usn-FCridqPLuA.crl (hash: EdjiY6ChYN9VkXuWr9gJRdet6D6u5ELP4eaJUTHGP1M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aTHX56mXSaOF6usn-FCridqPLuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 06:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:f7:c3:1e:6a:48:56:d8:4d:71:a8:88:c3:a2:96:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6931d7e7a99749a385eaeb27f850ab89da8f2ee0
        Validity
            Not Before: Aug  6 06:00:45 2025 GMT
            Not After : Aug  7 06:00:45 2025 GMT
        Subject: CN=09f0e64ea55ba96ecdd5072c3f56395e3f8214be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f1:dc:c8:42:a6:71:37:96:c7:26:21:17:10:
                    89:38:21:08:2b:1e:75:34:7a:6e:df:19:8c:40:c9:
                    12:67:eb:4d:94:3e:20:ab:ba:17:d5:78:ae:9c:d7:
                    3e:6d:d2:77:98:2b:f5:de:11:6a:5c:a9:2a:f1:d0:
                    2e:cb:09:05:98:90:2e:af:44:cd:64:14:cd:36:0b:
                    46:1f:9d:f4:a5:f2:a0:ce:4a:a0:26:4c:82:9f:32:
                    45:b4:ba:44:33:f6:c9:88:c7:3b:eb:65:47:9e:66:
                    56:10:27:5b:d6:6c:76:03:da:17:74:2f:92:98:9a:
                    40:f6:be:21:32:22:02:38:66:d7:21:7d:7d:c2:87:
                    b5:05:3c:c9:07:1e:dd:d2:ab:1d:f2:3a:ca:3a:cf:
                    2f:88:28:9e:7b:5a:f4:12:fa:8e:c8:9d:3d:18:c3:
                    7b:fe:8e:2d:3a:8b:d4:f3:ae:b5:d0:93:2e:4f:e4:
                    91:f0:0c:06:6a:df:b7:3e:92:24:cd:57:41:c5:41:
                    5a:69:6a:82:1a:7e:90:de:0b:9b:2b:cf:32:6d:1d:
                    04:de:76:ff:a1:a1:f1:51:74:cb:c6:78:ed:1a:35:
                    fa:ca:ed:1c:67:e7:5d:de:6e:01:f7:89:2f:d6:c0:
                    93:c2:9a:2b:d9:41:0d:bc:ed:a6:f2:6c:20:4f:f1:
                    84:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F0:E6:4E:A5:5B:A9:6E:CD:D5:07:2C:3F:56:39:5E:3F:82:14:BE
            X509v3 Authority Key Identifier:
                keyid:69:31:D7:E7:A9:97:49:A3:85:EA:EB:27:F8:50:AB:89:DA:8F:2E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aTHX56mXSaOF6usn-FCridqPLuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:43:c3:a5:dd:85:ec:0c:f0:da:9d:93:03:9d:fe:3b:b2:2e:
         d0:8d:4d:53:20:ee:b1:1d:f9:cf:47:6a:40:10:7e:2a:ce:82:
         38:91:30:24:18:03:28:cb:fb:c9:b5:2a:ed:2f:25:e4:79:f7:
         18:5f:68:03:e5:a6:7a:9d:96:46:52:50:d5:24:9c:29:07:c7:
         be:d2:e4:a5:76:7a:b3:bb:17:3a:ae:bb:63:84:43:99:70:20:
         f7:c3:54:70:dc:1b:31:e7:7f:c9:72:39:fa:67:72:24:74:91:
         8b:ca:fe:7f:88:6b:d1:db:9d:ef:7a:c2:c3:2e:da:42:ca:8c:
         05:c8:63:12:e9:a1:a0:fa:08:f5:1f:73:41:e9:30:2d:0d:26:
         18:ff:8a:f8:f5:d8:9b:35:67:f1:c7:ec:ae:02:83:b6:29:b0:
         af:73:eb:f4:63:b2:50:09:7c:5b:09:0b:88:6d:e1:8d:cc:10:
         0f:3e:08:55:14:05:8a:12:80:a8:54:09:6e:44:47:04:ff:46:
         4f:e2:d5:87:96:71:47:a2:4b:81:dd:9a:50:14:79:25:93:97:
         6f:ce:c8:4e:75:e1:29:21:a4:8f:55:80:f4:34:46:45:f9:d6:
         00:12:70:c8:a5:79:30:90:27:a0:5e:eb:19:7f:10:8b:db:8b:
         22:03:24:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:02:54 2025 by rpki-client