Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
File:                     6tIKIulI-5ZEEprTAZ8I1PSYH88.mft (raw, json)
Hash identifier:          HVZgLghnQcaGb8FNg1G8n4ZM3ISMyDzt6h6X/fRbXhg=
Subject key identifier:   8D:E7:28:2F:60:52:2C:23:DA:A2:DD:92:C4:18:8A:8D:A9:17:53:7A
Authority key identifier: EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF
Certificate issuer:       /CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
Certificate serial:       01987C09A08EE6A7A85F9BA70A5AF038EFD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
Manifest number:          05E8
Signing time:             Tue 05 Aug 2025 21:01:02 +0000
Manifest this update:     Tue 05 Aug 2025 21:01:02 +0000
Manifest next update:     Wed 06 Aug 2025 21:01:02 +0000
Files and hashes:         1: 603LAvQ5JXA5_S8BjHWOsHJK9Wo.roa (hash: 8uIPD2qt5HOkYhC38b1edHK/qDoR0Hb99DfiBmCJ4B8=)
                          2: 6tIKIulI-5ZEEprTAZ8I1PSYH88.crl (hash: Y/n4g9P0EFKZ1fWDPthQdFm5sORLzjqSk5gSkDcLyEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 21:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:09:a0:8e:e6:a7:a8:5f:9b:a7:0a:5a:f0:38:ef:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
        Validity
            Not Before: Aug  5 21:01:02 2025 GMT
            Not After : Aug  6 21:01:02 2025 GMT
        Subject: CN=8de7282f60522c23daa2dd92c4188a8da917537a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cd:8e:02:1d:10:34:7f:ad:02:25:0f:6e:b8:
                    32:c2:9b:0c:41:a7:3c:fe:85:c2:f6:cd:96:19:13:
                    3b:78:51:61:f4:65:94:93:85:c5:5f:53:6e:fb:3d:
                    13:9d:5f:6f:23:b7:16:fc:48:b0:8b:a0:09:58:17:
                    f4:90:2c:47:fb:5b:fa:be:45:e8:ca:21:34:e4:f1:
                    44:24:3f:0c:3b:d7:f7:c8:f8:eb:51:0a:28:21:bf:
                    89:3b:c2:4f:db:7c:50:12:2d:58:4d:a3:57:09:ee:
                    32:54:10:a9:32:7d:dd:ef:f0:cb:d0:43:2f:1f:aa:
                    58:09:6d:d3:63:cc:de:47:42:1e:cb:ea:73:84:28:
                    fb:30:6a:53:61:18:62:12:b3:d4:aa:03:8c:e4:66:
                    98:60:59:cc:43:d1:e4:1c:90:bb:0f:af:e5:f0:30:
                    78:1b:b1:52:d0:40:fc:50:74:9a:96:56:60:76:bd:
                    86:86:aa:2b:9e:57:6e:cb:73:f9:ba:83:fe:3a:c8:
                    a6:af:84:45:c2:fc:91:b4:0d:85:20:26:34:c4:9f:
                    df:40:cb:e5:83:5b:8d:25:5e:b8:52:c8:ff:21:06:
                    a4:0b:21:a0:62:52:e3:a6:01:6c:c1:50:16:61:95:
                    00:a3:89:63:a7:60:e3:92:99:9e:c5:de:ea:d4:fe:
                    f5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E7:28:2F:60:52:2C:23:DA:A2:DD:92:C4:18:8A:8D:A9:17:53:7A
            X509v3 Authority Key Identifier:
                keyid:EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:64:20:90:c1:1a:8f:13:51:ea:32:7e:84:2a:5f:22:15:e7:
         02:a5:61:a2:34:a5:83:8b:51:5b:e0:85:59:35:cf:d0:a7:81:
         03:eb:6e:4f:53:d5:24:71:66:ce:86:4e:21:1e:77:96:29:47:
         6b:bd:0f:eb:38:92:17:6c:97:97:fa:98:6d:5c:bd:84:a5:cd:
         c1:3d:46:8c:a4:9f:95:91:91:22:f8:4a:49:b8:ae:21:1d:89:
         21:51:e7:f2:08:09:7c:64:da:cf:85:3b:59:4f:e5:9e:73:c7:
         f7:93:3e:df:f2:7d:38:fd:c5:c7:34:bf:a7:18:e4:1f:57:a5:
         bd:b8:a6:8c:1e:3b:e2:b4:69:11:52:6f:e1:43:29:77:e1:c2:
         5c:c5:5a:9c:16:dd:b9:a7:6f:90:97:bd:37:4b:1f:4f:18:ac:
         5f:e6:bf:e4:4d:1b:1e:bb:66:3a:91:e9:44:a8:93:73:55:5f:
         83:dc:8c:d1:ca:e7:c4:28:ba:cf:b4:16:40:58:e9:af:75:c4:
         d0:20:b3:b8:e1:1f:30:8f:c2:eb:d7:a8:d9:dd:3b:27:87:e9:
         36:b3:32:4d:5e:78:17:0e:ed:69:dd:b7:33:a2:1d:75:df:03:
         bd:c2:b5:f9:3b:92:2d:89:fa:7a:87:d4:04:e3:2c:d0:3a:b9:
         04:27:f8:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8CaCO5qeoX5unClrwOO/RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhZDIwYTIyZTk0OGZiOTY0NDEyOWFkMzAxOWYwOGQ0ZjQ5
ODFmY2YwHhcNMjUwODA1MjEwMTAyWhcNMjUwODA2MjEwMTAyWjAzMTEwLwYDVQQD
Eyg4ZGU3MjgyZjYwNTIyYzIzZGFhMmRkOTJjNDE4OGE4ZGE5MTc1MzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk82OAh0QNH+tAiUPbrgywpsMQac8
/oXC9s2WGRM7eFFh9GWUk4XFX1Nu+z0TnV9vI7cW/Eiwi6AJWBf0kCxH+1v6vkXo
yiE05PFEJD8MO9f3yPjrUQooIb+JO8JP23xQEi1YTaNXCe4yVBCpMn3d7/DL0EMv
H6pYCW3TY8zeR0Iey+pzhCj7MGpTYRhiErPUqgOM5GaYYFnMQ9HkHJC7D6/l8DB4
G7FS0ED8UHSallZgdr2Ghqornlduy3P5uoP+Osimr4RFwvyRtA2FICY0xJ/fQMvl
g1uNJV64Usj/IQakCyGgYlLjpgFswVAWYZUAo4ljp2Djkpmexd7q1P710QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3nKC9gUiwj2qLdksQYio2pF1N6MB8GA1UdIwQY
MBaAFOrSCiLpSPuWRBKa0wGfCNT0mB/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnRJS0l1bEktNVpFRXByVEFaOEkxUFNZSDg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8xN2NhNWYtNDMyNy00YTg4LWI5NzYt
YjY0ZmZjZTA2NTgwLzEvNnRJS0l1bEktNVpFRXByVEFaOEkxUFNZSDg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8xN2NhNWYtNDMyNy00YTg4LWI5NzYtYjY0ZmZjZTA2NTgw
LzEvNnRJS0l1bEktNVpFRXByVEFaOEkxUFNZSDg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjmQgkMEa
jxNR6jJ+hCpfIhXnAqVhojSlg4tRW+CFWTXP0KeBA+tuT1PVJHFmzoZOIR53lilH
a70P6ziSF2yXl/qYbVy9hKXNwT1GjKSflZGRIvhKSbiuIR2JIVHn8ggJfGTaz4U7
WU/lnnPH95M+3/J9OP3FxzS/pxjkH1elvbimjB474rRpEVJv4UMpd+HCXMVanBbd
uadvkJe9N0sfTxisX+a/5E0bHrtmOpHpRKiTc1Vfg9yM0crnxCi6z7QWQFjpr3XE
0CCzuOEfMI/C69eo2d07J4fpNrMyTV54Fw7tad23M6Iddd8DvcK1+TuSLYn6eofU
BOMs0Dq5BCf4hg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:58:54 2025 by rpki-client