Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft
File:                     6JeVIBx9PZPNKghd42ku3XG3cm0.mft (raw, json)
Hash identifier:          SzTFauNl9xNGRqZ4AQP485ocxco2yZgBD63WZZ/88qU=
Subject key identifier:   FD:6B:12:C3:43:0C:56:15:78:41:31:07:96:0B:45:E9:C1:30:CE:A4
Authority key identifier: E8:97:95:20:1C:7D:3D:93:CD:2A:08:5D:E3:69:2E:DD:71:B7:72:6D
Certificate issuer:       /CN=e89795201c7d3d93cd2a085de3692edd71b7726d
Certificate serial:       0198898DE54D5AFE966C423F2666F5EF7199
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6JeVIBx9PZPNKghd42ku3XG3cm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft
Manifest number:          09A2
Signing time:             Fri 08 Aug 2025 12:00:34 +0000
Manifest this update:     Fri 08 Aug 2025 12:00:34 +0000
Manifest next update:     Sat 09 Aug 2025 12:00:34 +0000
Files and hashes:         1: 6JeVIBx9PZPNKghd42ku3XG3cm0.crl (hash: CGNJKJJJTSyMIqW7K2Nv94C8+/Y+sOWO5i8xeAFfhfc=)
                          2: n5zZ8emiGJc39AvFCX_4g7V1Hbw.roa (hash: lqRnzTh86Fa5qo5s0AzLpFMvIZ+B4HTsCFIStL4pgaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6JeVIBx9PZPNKghd42ku3XG3cm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:8d:e5:4d:5a:fe:96:6c:42:3f:26:66:f5:ef:71:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e89795201c7d3d93cd2a085de3692edd71b7726d
        Validity
            Not Before: Aug  8 12:00:34 2025 GMT
            Not After : Aug  9 12:00:34 2025 GMT
        Subject: CN=fd6b12c3430c561578413107960b45e9c130cea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f6:b7:5d:91:55:36:85:ab:c4:10:5f:e2:96:
                    a7:09:c5:69:48:dd:1e:f1:f1:8f:c6:46:26:41:78:
                    6a:64:88:8d:87:c4:a8:5b:55:66:2f:27:9c:70:26:
                    3f:d5:64:1f:19:05:dd:9b:e5:92:6d:1a:95:07:18:
                    84:62:03:e0:18:50:2a:cf:a8:6c:2d:c2:57:29:e9:
                    4d:c2:81:89:80:80:70:ac:a7:cd:43:e3:22:f5:bc:
                    07:e0:f8:33:63:6b:1b:35:4a:85:76:e1:0c:cd:d9:
                    9b:82:37:b2:ca:2e:8a:57:f0:ef:b1:0a:30:99:29:
                    90:17:1b:61:77:7b:7d:bc:93:fb:f5:86:d8:63:26:
                    2b:e3:30:47:2b:fa:21:59:15:63:24:83:fb:91:33:
                    1c:dc:65:a5:7f:dd:be:a6:48:8a:82:96:e8:5e:1c:
                    75:99:63:70:11:56:b3:c4:d5:e0:99:88:61:ee:04:
                    eb:02:fc:a3:41:53:f7:46:18:16:7f:80:97:75:76:
                    f4:77:e6:57:3d:df:23:f3:17:e5:17:c6:f2:08:24:
                    5d:f0:f4:a1:4e:07:74:ec:08:d5:9d:3e:13:27:5c:
                    56:6c:66:72:dc:42:c0:88:dd:d5:53:43:11:7d:4e:
                    9a:ba:22:87:72:7c:94:d6:20:f6:59:c6:22:84:79:
                    36:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6B:12:C3:43:0C:56:15:78:41:31:07:96:0B:45:E9:C1:30:CE:A4
            X509v3 Authority Key Identifier:
                keyid:E8:97:95:20:1C:7D:3D:93:CD:2A:08:5D:E3:69:2E:DD:71:B7:72:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JeVIBx9PZPNKghd42ku3XG3cm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ed:42:d1:3f:62:d9:d1:ac:8a:3a:52:af:84:dd:a5:4c:e9:
         38:e6:40:00:76:4a:cb:71:ff:f2:af:61:33:97:9c:74:c8:d9:
         eb:f5:42:b8:93:d7:a6:35:bd:19:5e:e9:58:31:f9:d0:dc:18:
         10:18:b8:2d:9b:ee:c6:f2:3e:5b:2f:22:1c:a2:9a:1f:7b:61:
         ae:bc:03:27:52:1b:3d:70:95:b3:4e:a7:7b:f7:b4:6f:f7:39:
         40:79:78:f2:f2:d8:f5:b4:84:ca:0d:e7:d3:97:ea:42:d8:1f:
         5f:d6:11:dd:80:0f:50:39:2a:ec:a8:10:05:c2:95:37:3c:40:
         36:38:fc:74:29:d3:c5:5f:18:cb:a9:17:39:92:c7:d2:7e:b8:
         a4:fd:8b:e4:f2:97:ce:2f:3e:51:54:bc:2a:e0:3a:8e:95:36:
         15:3e:6c:4b:d1:82:18:e3:13:18:af:62:08:5a:e0:12:ec:3d:
         1a:f7:73:01:fc:e1:94:da:87:9d:9a:db:43:77:bf:f7:f4:5f:
         18:b9:ae:8c:85:e8:81:63:c6:8f:6d:9e:ec:51:6b:f4:29:9e:
         c0:6d:bb:26:ed:3b:c4:bd:81:03:28:b2:7e:80:b8:5f:26:bc:
         7a:d6:5b:b7:f0:98:12:9e:16:2a:75:f3:bc:5b:98:cb:8f:01:
         93:42:da:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJjeVNWv6WbEI/Jmb173GZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4OTc5NTIwMWM3ZDNkOTNjZDJhMDg1ZGUzNjkyZWRkNzFi
NzcyNmQwHhcNMjUwODA4MTIwMDM0WhcNMjUwODA5MTIwMDM0WjAzMTEwLwYDVQQD
EyhmZDZiMTJjMzQzMGM1NjE1Nzg0MTMxMDc5NjBiNDVlOWMxMzBjZWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPa3XZFVNoWrxBBf4panCcVpSN0e
8fGPxkYmQXhqZIiNh8SoW1VmLyeccCY/1WQfGQXdm+WSbRqVBxiEYgPgGFAqz6hs
LcJXKelNwoGJgIBwrKfNQ+Mi9bwH4PgzY2sbNUqFduEMzdmbgjeyyi6KV/DvsQow
mSmQFxthd3t9vJP79YbYYyYr4zBHK/ohWRVjJIP7kTMc3GWlf92+pkiKgpboXhx1
mWNwEVazxNXgmYhh7gTrAvyjQVP3RhgWf4CXdXb0d+ZXPd8j8xflF8byCCRd8PSh
Tgd07AjVnT4TJ1xWbGZy3ELAiN3VU0MRfU6auiKHcnyU1iD2WcYihHk2fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1rEsNDDFYVeEExB5YLRenBMM6kMB8GA1UdIwQY
MBaAFOiXlSAcfT2TzSoIXeNpLt1xt3JtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkplVklCeDlQWlBOS2doZDQya3UzWEczY20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iMThiMDMtNzIyOS00YTJhLTkxODUt
Mjk4NjcxZDEyNjFlLzEvNkplVklCeDlQWlBOS2doZDQya3UzWEczY20wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iMThiMDMtNzIyOS00YTJhLTkxODUtMjk4NjcxZDEyNjFl
LzEvNkplVklCeDlQWlBOS2doZDQya3UzWEczY20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFe1C0T9i
2dGsijpSr4TdpUzpOOZAAHZKy3H/8q9hM5ecdMjZ6/VCuJPXpjW9GV7pWDH50NwY
EBi4LZvuxvI+Wy8iHKKaH3thrrwDJ1IbPXCVs06ne/e0b/c5QHl48vLY9bSEyg3n
05fqQtgfX9YR3YAPUDkq7KgQBcKVNzxANjj8dCnTxV8Yy6kXOZLH0n64pP2L5PKX
zi8+UVS8KuA6jpU2FT5sS9GCGOMTGK9iCFrgEuw9GvdzAfzhlNqHnZrbQ3e/9/Rf
GLmujIXogWPGj22e7FFr9CmewG27Ju07xL2BAyiyfoC4Xya8etZbt/CYEp4WKnXz
vFuYy48Bk0LaQg==
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:24:18 2025 by rpki-client