Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft
File:                     6KMuimrG9uw3hg7nwH6435MUd3k.mft (raw, json)
Hash identifier:          Sny5IDoZiDgPEt4LLETktP3AzeSzugevUMjiSEDLrz8=
Subject key identifier:   28:2C:E4:32:8B:D3:61:5A:67:90:C8:9B:DD:D6:73:5D:43:D8:69:5C
Authority key identifier: E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79
Certificate issuer:       /CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779
Certificate serial:       01987418CF5ED37ABE4D15119BE069B14E00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft
Manifest number:          1618
Signing time:             Mon 04 Aug 2025 08:00:39 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:39 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:39 +0000
Files and hashes:         1: 6KMuimrG9uw3hg7nwH6435MUd3k.crl (hash: +uDTxCmt4k8CXEs29KOrx9SVlv7Hpqw/GoAPDrNv0OY=)
                          2: IW2vrK3HcpopB_Br4A5_Kcu1YHA.roa (hash: jn7q3prF672ojCYbhHkipYPT+tMJuwcHdRX7fdgmul8=)
                          3: KQJWQNZZhN5fJ7Q5oCVgh_VAhjU.roa (hash: mRpx0bB3khjj82sXTsxVr+jlKn5E5ho7kq4lYObPEBI=)
                          4: oT8ZqtyuPG2bCnSuAma5RHBNbQM.roa (hash: JchFsffJ7J9U8adfMeuKKlBlUfa5a5FcVwQr7lJU+UI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:cf:5e:d3:7a:be:4d:15:11:9b:e0:69:b1:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779
        Validity
            Not Before: Aug  4 08:00:39 2025 GMT
            Not After : Aug  5 08:00:39 2025 GMT
        Subject: CN=282ce4328bd3615a6790c89bddd6735d43d8695c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c6:d3:70:a2:f6:a5:eb:9f:2d:f3:aa:58:1c:
                    77:35:93:f6:09:26:ee:5f:6e:41:06:e6:13:46:1d:
                    b7:df:6d:0f:5e:6b:d0:a7:65:a9:68:73:90:e8:17:
                    63:bc:53:23:92:d1:f0:1d:12:79:7d:af:f3:f3:66:
                    a0:d3:f6:1c:ca:35:72:d8:6c:2f:ac:c5:96:be:7e:
                    cb:b2:43:c9:56:df:92:ad:c3:03:0a:36:ee:46:39:
                    1f:23:0c:0a:9f:90:13:ec:34:04:15:e6:c9:df:b3:
                    91:0c:ce:f9:11:59:bf:48:96:98:df:1c:30:ca:c6:
                    26:40:26:61:57:ec:fd:d0:b1:38:4e:ca:d5:4a:d8:
                    60:ab:5c:76:e0:fa:27:3f:5e:d5:fd:ad:69:d8:47:
                    42:c1:8b:c0:bc:8d:3f:dc:09:88:a3:89:98:aa:9e:
                    9b:1f:02:12:c8:3b:9c:77:d0:68:fa:e2:cf:15:c5:
                    3e:42:9f:63:dc:52:f7:e3:cc:cb:c7:58:e9:5a:a3:
                    2d:01:98:23:74:c1:13:c1:26:67:bf:dc:2e:ec:59:
                    98:6e:83:d3:3b:b6:17:00:08:a6:7e:2f:7d:65:18:
                    ad:e8:5a:c2:1d:21:5e:aa:88:5f:62:21:0d:d8:a4:
                    57:f4:fb:a0:03:b7:3c:19:f0:b8:28:53:a6:4d:57:
                    58:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2C:E4:32:8B:D3:61:5A:67:90:C8:9B:DD:D6:73:5D:43:D8:69:5C
            X509v3 Authority Key Identifier:
                keyid:E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:6d:4a:11:bc:fa:3d:15:c4:d0:c2:43:ae:5a:91:ec:1a:90:
         0f:d9:24:72:70:1e:85:f1:84:74:27:24:5b:4d:aa:76:e7:41:
         92:84:7f:64:3f:6e:ff:65:61:28:cd:5f:ef:bf:7b:fb:56:15:
         93:9e:62:bc:a3:fa:08:0c:ec:9c:aa:7d:2d:a8:cd:5b:55:af:
         6a:e9:88:b4:de:65:4c:7e:e2:ff:8a:b3:7a:42:55:65:f6:88:
         b3:45:b0:45:bd:6a:55:f9:43:0c:32:81:0f:11:53:67:5c:9e:
         69:4b:96:ad:3d:fb:ae:63:2c:bc:cf:23:68:42:dd:22:2f:07:
         ed:6a:6e:e8:29:fa:71:c6:d3:2e:3e:6b:30:f6:f0:33:2b:46:
         eb:ed:02:76:a2:e9:16:4c:ae:68:52:25:5a:1f:09:a3:bf:ca:
         6b:f1:91:10:c8:87:47:4b:79:6e:4e:b3:3c:b8:c3:e5:b1:b2:
         31:f6:e7:3c:d0:7e:d6:5d:d4:0c:17:68:f1:80:50:d1:7a:fd:
         70:0f:7e:c9:6c:87:9d:e3:31:eb:60:b6:1a:68:df:3d:fe:61:
         59:b8:e8:17:43:4d:6f:2a:fa:11:62:04:f5:2f:5c:27:49:e4:
         55:17:5e:23:52:83:1f:31:5c:4e:61:02:28:92:57:6e:65:ab:
         47:a1:fe:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GM9e03q+TRURm+BpsU4AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YTMyZThhNmFjNmY2ZWMzNzg2MGVlN2MwN2ViOGRmOTMx
NDc3NzkwHhcNMjUwODA0MDgwMDM5WhcNMjUwODA1MDgwMDM5WjAzMTEwLwYDVQQD
EygyODJjZTQzMjhiZDM2MTVhNjc5MGM4OWJkZGQ2NzM1ZDQzZDg2OTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMbTcKL2peufLfOqWBx3NZP2CSbu
X25BBuYTRh23320PXmvQp2WpaHOQ6BdjvFMjktHwHRJ5fa/z82ag0/YcyjVy2Gwv
rMWWvn7LskPJVt+SrcMDCjbuRjkfIwwKn5AT7DQEFebJ37ORDM75EVm/SJaY3xww
ysYmQCZhV+z90LE4TsrVSthgq1x24PonP17V/a1p2EdCwYvAvI0/3AmIo4mYqp6b
HwISyDucd9Bo+uLPFcU+Qp9j3FL348zLx1jpWqMtAZgjdMETwSZnv9wu7FmYboPT
O7YXAAimfi99ZRit6FrCHSFeqohfYiEN2KRX9PugA7c8GfC4KFOmTVdYlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgs5DKL02FaZ5DIm93Wc11D2GlcMB8GA1UdIwQY
MBaAFOijLopqxvbsN4YO58B+uN+TFHd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNktNdWltckc5dXczaGc3bndINjQzNU1VZDNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9jNGJmZDQtYTBhMS00MzM0LTg2MGEt
NGZhNTM3ZGJlMmU5LzEvNktNdWltckc5dXczaGc3bndINjQzNU1VZDNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9jNGJmZDQtYTBhMS00MzM0LTg2MGEtNGZhNTM3ZGJlMmU5
LzEvNktNdWltckc5dXczaGc3bndINjQzNU1VZDNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuW1KEbz6
PRXE0MJDrlqR7BqQD9kkcnAehfGEdCckW02qdudBkoR/ZD9u/2VhKM1f7797+1YV
k55ivKP6CAzsnKp9LajNW1WvaumItN5lTH7i/4qzekJVZfaIs0WwRb1qVflDDDKB
DxFTZ1yeaUuWrT37rmMsvM8jaELdIi8H7Wpu6Cn6ccbTLj5rMPbwMytG6+0CdqLp
FkyuaFIlWh8Jo7/Ka/GREMiHR0t5bk6zPLjD5bGyMfbnPNB+1l3UDBdo8YBQ0Xr9
cA9+yWyHneMx62C2GmjfPf5hWbjoF0NNbyr6EWIE9S9cJ0nkVRdeI1KDHzFcTmEC
KJJXbmWrR6H+/g==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:45 2025 by rpki-client