Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
File:                     k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft (raw, json)
Hash identifier:          eM1f8M367zpRTgAsYWOGc1Ub9dwsQkT2j+VtjLMJx2g=
Subject key identifier:   9D:EE:F2:D6:7E:EF:D3:92:9D:C9:19:BE:2F:CD:86:C4:2D:CC:67:64
Authority key identifier: 93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
Certificate issuer:       /CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Certificate serial:       0198A0F20B685908B952AF02A79408DC39A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
Manifest number:          05A3
Signing time:             Wed 13 Aug 2025 01:01:13 +0000
Manifest this update:     Wed 13 Aug 2025 01:01:13 +0000
Manifest next update:     Thu 14 Aug 2025 01:01:13 +0000
Files and hashes:         1: k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl (hash: zFjNrs+8sGLZY/ebCIq/sNsCKp7x85v9XD8lXHEHcjU=)
                          2: rbPUmPqkKgwyzbr9KUKLWQwPFN4.roa (hash: q/Zy1zhtJFPNtR3NeMdcOz6lj9MRNn8je4kBturksZ0=)
                          3: tQFFGYfebId9C-wg4RS84BnFaNo.roa (hash: nMK/gVKD2fq6p/yTSA4UB4aZvcBtj7xYtsaQACWORBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:f2:0b:68:59:08:b9:52:af:02:a7:94:08:dc:39:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
        Validity
            Not Before: Aug 13 01:01:13 2025 GMT
            Not After : Aug 14 01:01:13 2025 GMT
        Subject: CN=9deef2d67eefd3929dc919be2fcd86c42dcc6764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c6:34:09:dc:f8:2c:5b:b4:96:35:be:22:3a:
                    15:fe:6e:b8:32:75:a2:95:89:b8:c0:f6:da:88:ee:
                    6e:e4:09:24:0b:31:ee:96:da:cf:d7:2e:00:14:69:
                    7d:57:27:89:3f:07:da:11:22:ec:57:c8:5a:b0:55:
                    92:55:be:29:61:82:f8:38:92:75:d8:b0:51:b9:ee:
                    48:28:b0:a7:85:5e:2b:42:77:63:a3:21:ac:3d:23:
                    33:38:15:5f:b7:dc:00:33:fd:d0:d3:5e:78:93:ce:
                    78:d7:20:5c:56:4c:cc:c9:5a:a7:24:9e:8e:ed:7a:
                    91:70:a7:b5:c7:46:ff:14:86:62:9e:8c:1b:64:e1:
                    df:4c:89:71:e2:fc:c6:88:fb:ca:3c:4c:9f:3f:10:
                    8d:2a:be:89:15:63:5b:5f:cf:a1:d6:d3:a7:9b:26:
                    9b:30:b2:66:15:6b:8f:b7:ce:8a:d4:ed:39:4f:df:
                    7a:d3:25:95:b2:e7:8c:c8:3a:31:7d:83:05:58:57:
                    66:f3:c1:82:69:49:68:86:bb:e4:dc:a9:12:68:0c:
                    28:b9:ec:07:04:cc:89:18:18:91:4b:f6:c6:f7:27:
                    17:e9:05:8b:75:21:2c:61:df:5e:e6:fe:6c:b9:a8:
                    a9:f6:4e:f1:42:ba:1e:29:7e:f7:94:38:c6:97:88:
                    4f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EE:F2:D6:7E:EF:D3:92:9D:C9:19:BE:2F:CD:86:C4:2D:CC:67:64
            X509v3 Authority Key Identifier:
                keyid:93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e8:0c:4f:a7:c6:80:d0:04:26:c0:31:d6:c0:89:d8:71:3a:
         f3:7b:d0:2e:9d:47:7c:1c:04:3b:32:35:67:17:f4:5e:4b:48:
         05:8d:e2:95:f8:45:49:bc:d4:73:a3:72:0d:27:4d:60:08:5b:
         c6:54:e2:48:b1:f7:b9:e8:b6:46:d8:9a:b5:36:21:bc:22:52:
         c6:de:62:98:60:0a:3e:7d:28:b2:e5:da:f2:6f:a6:5a:10:d9:
         1e:c1:1c:ff:c4:ad:4d:37:7b:0f:f7:a3:97:93:48:9b:51:4f:
         a3:40:20:63:a7:95:43:67:fb:58:f8:1d:53:75:2b:84:53:16:
         06:0d:75:1a:e0:56:cc:be:02:ac:8f:ce:5c:bf:cc:40:42:3f:
         fa:2e:46:c1:af:4f:17:96:6e:e3:11:70:0e:0d:d9:2c:58:64:
         22:26:ba:b8:fd:47:b4:a9:b6:7f:77:bc:23:57:4b:64:6c:57:
         0c:63:bb:9b:49:3a:84:98:d7:6b:af:38:92:b6:5d:8d:0e:c1:
         2a:22:31:2d:dd:00:57:25:94:4f:c2:48:47:7f:3c:85:a1:ba:
         ef:2d:ff:28:ba:23:c6:11:f8:bd:88:af:00:31:6e:3e:45:2f:
         1d:1d:7f:15:f9:c4:d9:93:a0:bd:21:47:bd:41:c6:5f:02:04:
         25:5d:3e:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZig8gtoWQi5Uq8Cp5QI3DmlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYTk4OWMxN2IyZGEwYzUxNDMxNTU4MjBlYmM1NmJmZTcz
YTNhZGYwHhcNMjUwODEzMDEwMTEzWhcNMjUwODE0MDEwMTEzWjAzMTEwLwYDVQQD
Eyg5ZGVlZjJkNjdlZWZkMzkyOWRjOTE5YmUyZmNkODZjNDJkY2M2NzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosY0Cdz4LFu0ljW+IjoV/m64MnWi
lYm4wPbaiO5u5AkkCzHultrP1y4AFGl9VyeJPwfaESLsV8hasFWSVb4pYYL4OJJ1
2LBRue5IKLCnhV4rQndjoyGsPSMzOBVft9wAM/3Q0154k8541yBcVkzMyVqnJJ6O
7XqRcKe1x0b/FIZinowbZOHfTIlx4vzGiPvKPEyfPxCNKr6JFWNbX8+h1tOnmyab
MLJmFWuPt86K1O05T9960yWVsueMyDoxfYMFWFdm88GCaUlohrvk3KkSaAwouewH
BMyJGBiRS/bG9ycX6QWLdSEsYd9e5v5suaip9k7xQroeKX73lDjGl4hPewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3u8tZ+79OSnckZvi/NhsQtzGdkMB8GA1UdIwQY
MBaAFJOpicF7LaDFFDFVgg68Vr/nOjrfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazZtSndYc3RvTVVVTVZXQ0RyeFd2LWM2T3Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xZGU4NmMtNWYxZS00MDJlLTllZjQt
NjM3YjI2MWFiMTc5LzEvazZtSndYc3RvTVVVTVZXQ0RyeFd2LWM2T3Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xZGU4NmMtNWYxZS00MDJlLTllZjQtNjM3YjI2MWFiMTc5
LzEvazZtSndYc3RvTVVVTVZXQ0RyeFd2LWM2T3Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+gMT6fG
gNAEJsAx1sCJ2HE683vQLp1HfBwEOzI1Zxf0XktIBY3ilfhFSbzUc6NyDSdNYAhb
xlTiSLH3uei2RtiatTYhvCJSxt5imGAKPn0osuXa8m+mWhDZHsEc/8StTTd7D/ej
l5NIm1FPo0AgY6eVQ2f7WPgdU3UrhFMWBg11GuBWzL4CrI/OXL/MQEI/+i5Gwa9P
F5Zu4xFwDg3ZLFhkIia6uP1HtKm2f3e8I1dLZGxXDGO7m0k6hJjXa684krZdjQ7B
KiIxLd0AVyWUT8JIR388haG67y3/KLojxhH4vYivADFuPkUvHR1/FfnE2ZOgvSFH
vUHGXwIEJV0+GA==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:33 2025 by rpki-client