Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
File:                     6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft (raw, json)
Hash identifier:          USUyQHFcA2X+KDcmiLb1U9+ZlIChu8sEWJVTGHYquU4=
Subject key identifier:   BE:CB:F8:83:90:84:51:06:AA:6D:55:79:55:8E:97:25:56:A9:EA:2F
Authority key identifier: EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0
Certificate issuer:       /CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
Certificate serial:       019874BD834C3449E5AD480FBFA58AE7935F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
Manifest number:          0F18
Signing time:             Mon 04 Aug 2025 11:00:33 +0000
Manifest this update:     Mon 04 Aug 2025 11:00:33 +0000
Manifest next update:     Tue 05 Aug 2025 11:00:33 +0000
Files and hashes:         1: 6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl (hash: xsWG9fA+MwMwWe3hz4342xbmLc3piWE9uKCv0WNifV8=)
                          2: bbiCAC8k2CawpBPgM6fTMAmYAY0.roa (hash: FIWbsZ3JZZD2fluaVWFHhluHhUwUg7ek5YY8fTNR7Ow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:bd:83:4c:34:49:e5:ad:48:0f:bf:a5:8a:e7:93:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
        Validity
            Not Before: Aug  4 11:00:33 2025 GMT
            Not After : Aug  5 11:00:33 2025 GMT
        Subject: CN=becbf88390845106aa6d5579558e972556a9ea2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c1:10:66:2e:03:95:82:c6:25:71:3d:81:f7:
                    d9:53:ad:da:e0:2f:b9:e2:c6:2b:ed:18:76:cb:93:
                    83:de:d6:1e:dc:82:59:13:17:e5:f6:22:d3:8c:c3:
                    b8:44:42:08:1b:a8:74:90:eb:68:b2:0b:45:02:3b:
                    d2:9b:73:b1:46:fd:97:15:0f:d9:26:7e:d6:49:15:
                    0a:b0:e7:bc:50:6c:88:a2:5f:e3:b3:10:20:84:a6:
                    f2:dd:2b:0a:26:e3:8d:42:4e:bf:76:38:3e:8c:cc:
                    67:44:b7:a8:5e:1f:46:96:de:61:07:4d:57:2a:7a:
                    ba:ce:69:db:ea:38:0d:83:ac:32:0a:58:f2:05:59:
                    f6:ca:5b:89:d3:3a:6e:6a:8f:a7:2d:f4:b1:de:e1:
                    a7:da:91:e3:4f:38:ca:3c:ab:32:2c:ff:fd:f7:16:
                    99:3f:a0:1e:f4:38:3e:ff:de:1c:9e:02:5f:37:7d:
                    a1:86:e3:27:a1:8d:b9:8b:f7:6a:ae:21:1a:b2:67:
                    9c:94:07:d7:92:18:75:33:c7:9e:03:4d:25:6b:d1:
                    6e:25:fc:dc:55:ca:2d:3d:e4:e4:25:4a:f4:5c:13:
                    76:43:0f:f0:81:03:2a:39:f9:40:5c:79:47:62:98:
                    a9:4d:30:da:3d:77:6b:95:5d:c0:de:b8:c8:1a:1f:
                    7b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CB:F8:83:90:84:51:06:AA:6D:55:79:55:8E:97:25:56:A9:EA:2F
            X509v3 Authority Key Identifier:
                keyid:EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:bf:1f:a8:0f:11:1e:ed:a3:e6:fc:08:a7:39:03:2a:ac:d7:
         92:01:d0:a3:b6:c2:b3:16:01:19:b6:c8:53:5f:09:c4:f8:83:
         b4:a3:80:29:36:74:71:dd:5a:fa:73:02:35:22:00:5f:12:e3:
         4c:5a:a3:b2:79:d1:a5:76:64:e2:1f:08:2b:35:19:da:40:7e:
         18:3d:ad:af:c4:67:16:ad:81:92:70:97:11:53:be:e6:7c:69:
         49:22:af:e8:f3:cc:43:17:bc:52:09:26:d7:cf:e7:1c:2f:d3:
         77:a5:b7:a4:fd:34:fd:0f:b5:0a:a8:6a:07:69:55:d8:4f:d2:
         f4:45:04:b0:32:81:3b:fd:46:9d:cb:50:77:56:93:85:5b:9f:
         c7:1b:66:69:22:f9:5f:4f:01:ce:3b:58:17:de:0c:93:fd:67:
         01:94:23:40:03:52:0a:22:e8:15:9a:a4:22:ea:79:11:97:2d:
         56:29:64:e9:34:f4:ed:a5:3f:78:0f:f6:e1:b1:12:4e:bb:e5:
         a5:c3:3d:4b:5c:3d:86:cc:e7:81:c7:f1:81:d5:21:0b:2d:4a:
         92:0f:d2:f9:c7:a8:21:5a:52:8b:45:21:3e:5a:0b:a1:db:d4:
         72:83:88:8c:1a:3e:bd:67:56:e7:bb:bd:99:c4:33:c1:eb:24:
         af:ed:d6:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0vYNMNEnlrUgPv6WK55NfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMzY3NzliMTNhZWM3ODBiMGQ0MzdmODQ0NGFiMGY0NDNh
MDVkZDAwHhcNMjUwODA0MTEwMDMzWhcNMjUwODA1MTEwMDMzWjAzMTEwLwYDVQQD
EyhiZWNiZjg4MzkwODQ1MTA2YWE2ZDU1Nzk1NThlOTcyNTU2YTllYTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMEQZi4DlYLGJXE9gffZU63a4C+5
4sYr7Rh2y5OD3tYe3IJZExfl9iLTjMO4REIIG6h0kOtosgtFAjvSm3OxRv2XFQ/Z
Jn7WSRUKsOe8UGyIol/jsxAghKby3SsKJuONQk6/djg+jMxnRLeoXh9Glt5hB01X
Knq6zmnb6jgNg6wyCljyBVn2yluJ0zpuao+nLfSx3uGn2pHjTzjKPKsyLP/99xaZ
P6Ae9Dg+/94cngJfN32hhuMnoY25i/dqriEasmeclAfXkhh1M8eeA00la9FuJfzc
VcotPeTkJUr0XBN2Qw/wgQMqOflAXHlHYpipTTDaPXdrlV3A3rjIGh97AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7L+IOQhFEGqm1VeVWOlyVWqeovMB8GA1UdIwQY
MBaAFOs2d5sTrseAsNQ3+ERKsPRDoF3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnpaM214T3V4NEN3MURmNFJFcXc5RU9nWGRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85ODY0ZmYtNjM0MS00MDA0LWFiNmQt
MGYzYjljMDVkZTQ1LzEvNnpaM214T3V4NEN3MURmNFJFcXc5RU9nWGRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC85ODY0ZmYtNjM0MS00MDA0LWFiNmQtMGYzYjljMDVkZTQ1
LzEvNnpaM214T3V4NEN3MURmNFJFcXc5RU9nWGRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkr8fqA8R
Hu2j5vwIpzkDKqzXkgHQo7bCsxYBGbbIU18JxPiDtKOAKTZ0cd1a+nMCNSIAXxLj
TFqjsnnRpXZk4h8IKzUZ2kB+GD2tr8RnFq2BknCXEVO+5nxpSSKv6PPMQxe8Ugkm
18/nHC/Td6W3pP00/Q+1CqhqB2lV2E/S9EUEsDKBO/1GnctQd1aThVufxxtmaSL5
X08BzjtYF94Mk/1nAZQjQANSCiLoFZqkIup5EZctVilk6TT07aU/eA/24bESTrvl
pcM9S1w9hszngcfxgdUhCy1Kkg/S+ceoIVpSi0UhPloLodvUcoOIjBo+vWdW57u9
mcQzweskr+3WlQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:08:58 2025 by rpki-client