Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
File:                     6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft (raw, json)
Hash identifier:          BWnMX7l0/zYUWnKyNqwwbNaGyl0FqwL0fWZfgPQmiNY=
Subject key identifier:   D6:11:11:A4:E7:6B:34:B9:2B:30:62:BC:40:0C:5D:C0:BA:43:61:FC
Authority key identifier: E8:CF:AB:B2:B5:D7:8F:F9:FB:BD:C1:E3:7D:D3:7B:6F:C3:4F:11:D9
Certificate issuer:       /CN=e8cfabb2b5d78ff9fbbdc1e37dd37b6fc34f11d9
Certificate serial:       01987418A5D9D22394988F8718B585A0E4C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
Manifest number:          2F
Signing time:             Mon 04 Aug 2025 08:00:28 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:28 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:28 +0000
Files and hashes:         1: 6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl (hash: p9pacpGIKBCUyfndnxrKsUtVpBQP0UiivA4e9n85zzM=)
                          2: 8PxOvmgBEGk1dvdpAuCMyuAS_zU.roa (hash: IZyNSWwzA8kml+4/83o4BNcAjIyr4gruiC7sv+HeyL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:a5:d9:d2:23:94:98:8f:87:18:b5:85:a0:e4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cfabb2b5d78ff9fbbdc1e37dd37b6fc34f11d9
        Validity
            Not Before: Aug  4 08:00:28 2025 GMT
            Not After : Aug  5 08:00:28 2025 GMT
        Subject: CN=d61111a4e76b34b92b3062bc400c5dc0ba4361fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:40:31:24:db:28:7a:d4:12:25:81:49:e9:2f:
                    6e:68:d9:3a:41:13:eb:fd:e4:52:05:3e:c4:a7:7b:
                    b6:03:45:2a:02:fc:58:37:03:30:e3:b8:80:6e:27:
                    1b:e4:78:86:b7:fa:b1:7e:db:eb:10:a3:6f:6b:a8:
                    b1:15:97:18:55:61:87:ff:cc:0b:a7:d3:8a:78:33:
                    5b:d7:d6:f0:52:0e:15:90:8e:4b:f2:8f:ff:52:7f:
                    d1:2e:df:9a:aa:ee:e3:a1:01:15:09:56:89:0d:fd:
                    26:1c:5e:a9:6d:0f:79:f8:98:e8:58:cf:5c:01:24:
                    c2:67:7c:67:dd:48:ee:1e:4b:65:c9:36:57:9a:7f:
                    be:9f:e3:ec:90:74:d3:11:6f:11:a9:18:b5:05:cd:
                    db:bb:67:db:ab:15:52:4d:7f:c9:89:12:ea:37:47:
                    5b:42:01:cc:c4:b8:9d:74:3b:a9:20:6a:94:6e:d5:
                    dc:29:62:14:64:f5:3d:86:fd:8a:bb:8d:2d:0f:ed:
                    58:7a:2a:75:27:47:be:09:69:3e:1a:9e:c4:d5:59:
                    e9:cb:84:15:f1:c8:a4:99:ed:07:24:4e:58:03:01:
                    93:bf:ad:4f:8f:54:63:cd:df:c8:7b:20:96:2e:d8:
                    24:ed:3d:53:6e:ff:4f:29:e7:c9:e0:d5:a4:a0:6e:
                    f2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:11:11:A4:E7:6B:34:B9:2B:30:62:BC:40:0C:5D:C0:BA:43:61:FC
            X509v3 Authority Key Identifier:
                keyid:E8:CF:AB:B2:B5:D7:8F:F9:FB:BD:C1:E3:7D:D3:7B:6F:C3:4F:11:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:66:90:99:6c:aa:50:b8:af:6d:cf:63:b5:12:08:c0:18:f6:
         2b:a9:d1:50:db:d3:6e:27:44:4c:2c:88:36:f8:d5:89:01:7a:
         49:ae:62:af:ad:b7:11:13:3c:66:d1:ba:1b:bc:04:b1:d5:a4:
         61:be:fb:cb:98:78:c8:9b:1e:51:b7:82:24:59:53:8e:e2:3c:
         43:1c:66:71:32:04:9d:d1:40:3a:fc:ee:68:98:7b:86:bc:f2:
         2b:26:9f:f9:64:02:fc:03:e2:f6:a9:86:fc:63:3c:75:3a:90:
         76:ba:06:7a:85:3f:f5:43:ec:f2:2b:fa:a8:69:50:ea:ec:bb:
         60:4b:59:65:c9:86:3d:d3:0d:40:b9:70:24:e8:27:35:3e:00:
         9c:d3:fd:c8:e0:99:93:2f:ad:46:93:77:bc:2d:2c:31:14:c9:
         36:a2:4f:03:2c:92:39:9f:57:6c:ea:59:ba:ec:b8:70:a1:17:
         91:4b:4e:f4:f5:5a:1b:82:f7:68:64:f9:e4:ca:27:67:41:fd:
         52:06:f1:70:88:6b:98:e3:28:c7:51:ec:c7:b1:46:a6:1e:79:
         8f:f1:e4:4a:33:ba:62:f7:4d:87:57:ea:4f:2e:64:af:cf:98:
         00:ad:28:af:ca:70:ab:c3:a1:1e:06:de:46:54:ac:45:3b:02:
         31:f3:40:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:23:12 2025 by rpki-client