Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.mft
File:                     6jKtyFac_LNedcfO_UbV7QDw4Cg.mft (raw, json)
Hash identifier:          aZ7NqCypqGmasIKBAAyXN2VRZj3stfdZiZsEozUAenw=
Subject key identifier:   BC:5C:1D:C2:30:74:5B:2E:29:6A:1B:BF:14:28:FB:77:00:4F:E9:24
Authority key identifier: EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28
Certificate issuer:       /CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028
Certificate serial:       01987BD285A0FBD0B14715328415A92437E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.mft
Manifest number:          161D
Signing time:             Tue 05 Aug 2025 20:00:50 +0000
Manifest this update:     Tue 05 Aug 2025 20:00:50 +0000
Manifest next update:     Wed 06 Aug 2025 20:00:50 +0000
Files and hashes:         1: 6jKtyFac_LNedcfO_UbV7QDw4Cg.crl (hash: Y4wj1bZaOJyLvvnm8rZVsBzkFUijFLLgDulza9cT6bQ=)
                          2: Yj0n54L8_fk_2zjr-vMy1qCRN10.roa (hash: aTlJQzdo1sOuXv8c5qqCvTjajF7OpI+KohKsrPrW87I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:d2:85:a0:fb:d0:b1:47:15:32:84:15:a9:24:37:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028
        Validity
            Not Before: Aug  5 20:00:50 2025 GMT
            Not After : Aug  6 20:00:50 2025 GMT
        Subject: CN=bc5c1dc230745b2e296a1bbf1428fb77004fe924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f0:18:b0:ae:72:17:66:ee:87:04:78:f8:aa:
                    fa:e5:57:d6:20:64:02:45:05:85:d9:f2:1f:7f:c6:
                    79:98:bd:cd:e0:6b:64:ee:db:cc:e9:54:7d:71:d2:
                    0c:e2:4d:cb:5d:fb:78:f3:dc:ac:eb:57:21:60:ab:
                    4a:05:ea:fc:c2:fe:62:70:ad:9b:2a:0a:34:fe:54:
                    87:2a:31:bb:9b:49:5f:d8:58:a7:75:49:c1:b9:a4:
                    f7:96:05:6b:75:e2:f9:3a:01:76:f6:13:4b:b2:5f:
                    f2:3c:ab:ab:16:fe:e4:50:9e:c7:c1:0a:a5:6f:4b:
                    8a:89:6a:5a:4a:10:30:bb:e8:c3:95:0a:81:62:36:
                    3f:ed:07:41:fb:4b:f3:c4:1b:38:aa:d4:76:cc:55:
                    66:2d:3a:72:c1:77:3e:2a:5e:e2:f1:a7:38:9e:71:
                    0a:8e:d2:5c:78:79:c2:0f:17:77:1b:e4:cb:56:2e:
                    76:29:7d:af:ff:7b:1f:33:1c:b4:25:21:67:4d:3b:
                    8f:d7:d1:de:b0:e1:36:2f:4b:3a:da:d0:9b:f3:01:
                    bf:07:1e:bf:26:1d:e9:01:e9:a7:8e:da:c4:46:56:
                    f4:41:c7:e6:28:5d:ba:0d:b3:f0:7d:cc:11:3b:07:
                    b8:7d:31:25:41:c5:f7:cb:f8:36:44:c3:e6:0a:52:
                    9c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5C:1D:C2:30:74:5B:2E:29:6A:1B:BF:14:28:FB:77:00:4F:E9:24
            X509v3 Authority Key Identifier:
                keyid:EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:4e:fe:22:4c:7b:6c:fd:ae:46:03:e1:95:03:b5:99:c8:ef:
         4c:b4:e7:80:0f:c3:f4:b6:13:67:dc:39:86:d1:9f:19:92:7e:
         c1:b3:7b:af:1c:91:d9:98:8f:73:5c:6f:8a:6d:87:93:49:d3:
         71:3b:89:6f:69:0c:d8:9c:2d:4d:b6:43:14:ef:27:43:47:2a:
         db:1f:0d:02:95:30:60:3b:45:6c:d6:a8:f1:8d:48:59:24:f4:
         dc:2c:60:a6:85:9c:c4:86:48:ec:33:ae:59:17:03:da:8e:b9:
         4c:58:4b:44:a0:47:b6:4c:8d:a7:78:69:c1:0e:51:f3:12:b5:
         a6:22:8d:6b:0d:20:ec:25:67:39:db:29:63:74:26:ee:b1:15:
         b0:ff:8b:b5:ae:ae:00:fb:bb:3b:0a:75:0d:5b:2f:78:1c:e0:
         87:c4:9d:0e:84:65:92:3f:21:3a:a0:cb:a4:14:72:6b:b8:a3:
         14:2f:fe:94:32:30:ad:2e:d9:e6:54:de:c5:b0:a0:80:43:b5:
         c2:cc:d9:54:f7:da:ba:e6:fd:fd:0a:c8:31:5b:1b:f2:56:00:
         d1:ab:af:b5:41:cc:cb:4c:60:61:28:d0:dd:86:ac:7c:72:8a:
         41:f7:f1:ef:ed:7f:82:a3:aa:02:7d:b1:4e:8d:12:8b:84:cd:
         fb:6f:03:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:54:46 2025 by rpki-client