Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.mft
File:                     6dJyHy4r0BG4poYK0lcsQFwLVA8.mft (raw, json)
Hash identifier:          5Fzgrxh2xLxqPZ5V1krxZP1aipHi10eQ36ufn7fN5ss=
Subject key identifier:   08:40:B8:55:7E:C6:4E:FC:28:74:16:F0:68:44:15:70:44:59:79:26
Authority key identifier: E9:D2:72:1F:2E:2B:D0:11:B8:A6:86:0A:D2:57:2C:40:5C:0B:54:0F
Certificate issuer:       /CN=e9d2721f2e2bd011b8a6860ad2572c405c0b540f
Certificate serial:       01988B45B4B4046A68246F8CE8D1DA0538BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.mft
Manifest number:          1625
Signing time:             Fri 08 Aug 2025 20:00:57 +0000
Manifest this update:     Fri 08 Aug 2025 20:00:57 +0000
Manifest next update:     Sat 09 Aug 2025 20:00:57 +0000
Files and hashes:         1: 2vSBXa-4cZ9KNUTnl_Cntx4udbg.roa (hash: gZugcctK6vS3axiBuW+2L4PJ0fff6TOOybJrcmsWbI0=)
                          2: 6dJyHy4r0BG4poYK0lcsQFwLVA8.crl (hash: lBpQUspONwSYZvGOk448qZc3mWlyXiZuioV/wXHR/jI=)
                          3: LsWSdAS1TXKersyl9EL18bbqBfM.roa (hash: YbeY8cd/gw+TzClLCzR2l5xbj5HoKVEuVLP8CS1pIGI=)
                          4: i3He8U0S-TMk840eguUDBWZU4Xo.roa (hash: OsYymyf31CVGqRQfFqwp+UbHCgnD9LSUz4IXdT5ASDk=)
                          5: nF_pFEUAL2eznLlq66bDUYV81n0.roa (hash: kkJ3N73ZOxQUlQop6wpAOdnE2o7Q14I6zpSGsz3qNCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:45:b4:b4:04:6a:68:24:6f:8c:e8:d1:da:05:38:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9d2721f2e2bd011b8a6860ad2572c405c0b540f
        Validity
            Not Before: Aug  8 20:00:57 2025 GMT
            Not After : Aug  9 20:00:57 2025 GMT
        Subject: CN=0840b8557ec64efc287416f06844157044597926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8c:39:f7:5c:ec:b0:be:f3:55:7e:be:aa:42:
                    48:61:b9:12:b5:a7:99:2f:d0:9a:6d:11:f0:55:9f:
                    17:26:a7:27:14:cc:30:37:d9:c2:0e:3a:6d:a9:e8:
                    a2:b7:84:da:2b:43:f0:27:75:d6:6a:98:18:12:41:
                    52:a9:a9:c8:3f:b8:34:56:e7:e8:d1:78:00:26:eb:
                    89:c4:91:9d:90:f8:59:83:6a:0c:7c:68:bf:e3:b2:
                    51:2f:ee:58:36:89:7f:24:83:85:ea:ba:95:5c:04:
                    4b:b9:34:ed:66:d2:96:97:20:1b:1e:52:ac:a7:3b:
                    51:21:c9:86:f4:5c:55:ff:27:2e:4e:17:55:3d:84:
                    d4:29:f2:fa:ff:1f:99:b0:2e:52:6f:97:cc:4c:d0:
                    62:10:9e:fb:64:f6:16:23:09:f9:e9:58:6d:ab:e5:
                    f3:c6:95:fa:3a:19:55:87:26:91:c4:e6:69:e0:d5:
                    9e:fb:8f:1c:d1:96:52:3f:5f:42:cf:46:5c:2e:0e:
                    6b:e9:09:c2:3c:d2:48:7e:fc:76:4d:33:dc:78:e4:
                    58:de:db:ea:a2:80:8b:23:55:1b:a0:60:fc:d2:66:
                    6d:dd:92:58:c6:57:7b:40:33:54:a1:92:81:48:3d:
                    b0:a6:24:d2:95:e1:3d:5b:97:df:a5:27:f2:44:d0:
                    00:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:40:B8:55:7E:C6:4E:FC:28:74:16:F0:68:44:15:70:44:59:79:26
            X509v3 Authority Key Identifier:
                keyid:E9:D2:72:1F:2E:2B:D0:11:B8:A6:86:0A:D2:57:2C:40:5C:0B:54:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:61:55:f0:2b:8b:50:bc:2a:4f:a7:c7:97:42:56:73:71:1a:
         4a:bd:14:af:3d:85:2c:43:37:31:a5:69:c0:be:a6:cf:85:49:
         60:5b:ea:cc:b0:47:0a:c1:d8:0b:a6:ca:de:33:03:7f:f3:96:
         e6:27:71:28:83:5c:9e:92:75:68:26:02:08:85:e3:07:25:2e:
         9f:41:5b:46:47:ae:10:0c:11:38:d2:94:a9:d7:70:5f:6e:55:
         c9:55:26:cf:00:39:bd:ac:e7:c7:53:f7:e0:fd:9a:02:66:a2:
         b5:91:f4:40:01:e9:fc:74:8a:91:3c:6c:99:3a:43:09:0c:4c:
         e5:5a:c3:d8:5e:ed:1c:03:2b:a8:7b:c8:b8:f3:b2:49:aa:6f:
         69:61:a7:a5:d6:0f:22:e4:62:ad:ee:ed:7f:2f:df:53:5b:1b:
         9d:0e:2e:98:85:99:93:64:a0:93:8d:e8:bf:c7:df:d1:b0:6f:
         e8:be:b5:87:22:26:fb:42:26:1c:09:34:5d:f1:c9:d2:2d:61:
         6e:ab:c2:42:78:15:8a:66:45:91:2b:a3:8e:cb:de:a6:a1:b4:
         84:2f:80:d4:22:57:9a:e8:eb:25:4d:7d:57:f7:3c:1b:50:5a:
         f4:6c:79:97:71:4f:2b:8d:ea:08:eb:4f:42:25:ab:d3:26:8f:
         2e:8f:ed:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:48:13 2025 by rpki-client