Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
File:                     gXyxTOQBSsMmnXDu6onIcFWxdvE.mft (raw, json)
Hash identifier:          ocbloSyZvW0GuJUKKIRjnE5ELF4Ic4ijAW3I7Ra3Jf8=
Subject key identifier:   8E:E0:DC:6E:28:62:23:EC:B8:80:72:1A:F5:3A:15:5E:BB:08:9C:86
Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
Certificate issuer:       /CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Certificate serial:       01987D1C765FDA91016845EC90770211A41C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
Manifest number:          06FA
Signing time:             Wed 06 Aug 2025 02:01:13 +0000
Manifest this update:     Wed 06 Aug 2025 02:01:13 +0000
Manifest next update:     Thu 07 Aug 2025 02:01:13 +0000
Files and hashes:         1: 8sYphYrrmRM_ErwAJ8gqIzEpDGo.roa (hash: rt/OwZDBbcaVJA7rLlh63ti0IkxjXIhkThQceeCTgkI=)
                          2: gXyxTOQBSsMmnXDu6onIcFWxdvE.crl (hash: 5bQPSLSp9MIVKelc336F5dhrY83MsM4qzL8SYnhltzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:1c:76:5f:da:91:01:68:45:ec:90:77:02:11:a4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1
        Validity
            Not Before: Aug  6 02:01:13 2025 GMT
            Not After : Aug  7 02:01:13 2025 GMT
        Subject: CN=8ee0dc6e286223ecb880721af53a155ebb089c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ce:dc:d1:05:b8:1c:7a:b2:3b:46:a8:d6:88:
                    80:62:90:12:eb:b0:7b:f3:54:f2:81:42:d4:12:60:
                    f4:ae:23:d6:a3:91:f9:26:6e:fc:a6:22:76:3a:49:
                    08:ae:2c:e8:a0:19:3c:2e:4d:82:88:7c:93:b3:36:
                    0d:43:38:8f:68:a9:a1:5e:53:f7:90:51:2e:e5:6b:
                    48:bd:87:9e:29:63:30:21:69:82:37:78:e8:97:9f:
                    6b:f3:d0:74:bf:69:ec:6d:dd:45:8c:e7:98:9a:f4:
                    fd:6a:6c:6f:56:4f:d7:20:2c:15:20:47:5d:30:23:
                    fb:6e:08:fc:ad:ae:eb:b1:40:7c:61:61:1e:2e:9c:
                    9f:91:3e:ce:f5:ad:0a:7f:78:a7:d5:92:6e:d4:f1:
                    f8:41:91:f0:48:7a:ef:4a:1d:bc:a1:65:60:83:6e:
                    a1:e6:fa:1a:2e:06:98:b2:f2:d6:4a:39:7c:c5:78:
                    d9:4c:ff:91:ff:30:09:cd:00:87:af:f6:17:8c:cd:
                    bb:32:45:62:4f:71:00:73:8b:25:65:8e:e0:6c:0a:
                    5d:d6:d0:36:c6:cc:14:14:6e:f8:f6:2f:67:88:92:
                    cc:95:10:14:52:d5:5f:a1:00:93:a8:b0:3f:10:7c:
                    52:41:21:e0:74:2e:38:1a:de:41:f9:1a:38:04:59:
                    c1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E0:DC:6E:28:62:23:EC:B8:80:72:1A:F5:3A:15:5E:BB:08:9C:86
            X509v3 Authority Key Identifier:
                keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:e2:3d:27:63:16:b9:7e:6a:17:23:64:d0:6f:43:da:75:b4:
         72:83:00:2d:e0:72:2c:db:7f:b9:2c:72:80:d1:d8:7f:29:2a:
         c7:a9:a1:e3:aa:66:ad:25:17:a2:b8:ff:c2:b9:6c:04:27:77:
         07:11:f0:c9:b1:11:db:73:41:04:52:16:94:b5:df:d0:11:e2:
         cb:dc:35:7a:b5:44:10:55:71:53:13:66:ee:ba:42:b3:07:3b:
         b5:3c:f4:db:22:86:61:a4:ee:a2:ef:0d:ad:46:a1:0d:69:70:
         54:d2:bf:30:e3:a0:48:16:da:60:05:7e:7c:38:91:b7:e8:bb:
         f1:06:fa:90:cd:5d:f7:61:b1:47:e4:42:4a:4d:62:7d:0e:54:
         ab:d2:95:9a:b3:3f:72:e7:d3:db:b9:3b:31:b6:f1:78:db:1b:
         8c:a4:03:fd:76:69:24:10:71:69:71:0d:23:8c:e7:cf:25:38:
         39:29:20:dc:d3:81:ae:39:91:5d:08:af:fe:c7:34:5e:95:fd:
         56:51:38:10:98:86:7c:79:8c:c6:07:e4:2c:7f:bb:f4:39:e2:
         12:17:48:42:f0:9e:5d:91:23:63:c1:64:d8:47:70:74:01:64:
         15:9c:85:d3:63:ef:ec:73:10:2a:bd:67:57:94:27:fb:cd:05:
         05:6e:a6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:13:53 2025 by rpki-client