Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
File:                     6bEyD7wk1vQ2bLZPz17S17G2vfc.mft (raw, json)
Hash identifier:          il1FLXIrbX7PjNc33SSdR6v+2FcKPLDS5GFunLYZb6c=
Subject key identifier:   B2:41:7E:DB:2B:44:0E:28:3A:A0:EC:97:13:5F:A9:EB:6F:46:A5:66
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Certificate issuer:       /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial:       01987AF6AFDCDC279397EB8AB045B8C7D060
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
Manifest number:          167B
Signing time:             Tue 05 Aug 2025 16:00:43 +0000
Manifest this update:     Tue 05 Aug 2025 16:00:43 +0000
Manifest next update:     Wed 06 Aug 2025 16:00:43 +0000
Files and hashes:         1: 6bEyD7wk1vQ2bLZPz17S17G2vfc.crl (hash: R9WAEbgXZPIcn3JvYt9qIUrkg/qAriiC8QQez2IEC4w=)
                          2: CPrj1X9dAhSu9uVuonAqGons7MU.roa (hash: 7KsCSCrGKFtA8Wm5mKiQkQP5JAp3U0rN3HIx4A3ASgk=)
                          3: TE5fERJgHgtYxUJy4wePwz5mU_w.roa (hash: OE1lv0k4N/61BtYex08ZD3aXtpKmdMMTc1Zc1Tz9A/I=)
                          4: aTgUhMPQnjx2xjYwnwJ2gz-I7rs.roa (hash: B9eu7QuJTduRZceQo5fFEV1A6fHWCByz1rCSN6+BTS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:f6:af:dc:dc:27:93:97:eb:8a:b0:45:b8:c7:d0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
        Validity
            Not Before: Aug  5 16:00:43 2025 GMT
            Not After : Aug  6 16:00:43 2025 GMT
        Subject: CN=b2417edb2b440e283aa0ec97135fa9eb6f46a566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b7:c5:62:02:58:f2:cc:f6:8d:3e:85:1e:a6:
                    03:7d:78:77:c9:90:43:58:dc:7c:2b:88:ab:94:cc:
                    14:ed:c6:64:c2:a4:09:40:77:d3:5b:b3:c4:83:3b:
                    37:4e:b8:1c:92:ff:97:ca:8d:d5:d7:8d:ad:cd:66:
                    c5:68:5c:7b:3e:2f:cb:e4:eb:40:ec:95:cc:0b:29:
                    87:b8:ca:04:6b:50:6b:25:af:8f:e5:92:1d:b0:38:
                    11:0d:d4:52:38:74:8c:3d:95:fe:4a:52:aa:fa:ca:
                    a7:47:b0:5a:6e:e5:79:88:c2:69:4d:5a:48:61:18:
                    08:8e:e8:28:3a:1b:c1:1a:f8:b9:86:91:32:8a:ff:
                    91:fa:c1:2a:a2:56:a9:a8:42:5c:00:e9:8c:44:ff:
                    7c:a1:f3:3b:8f:61:26:4a:e1:a0:69:7b:ad:a6:42:
                    cd:b7:54:aa:70:f0:bb:f8:fd:0c:62:b5:cd:d8:53:
                    b5:e2:b0:ef:3a:3a:f0:ea:b5:a3:83:26:e6:1f:7e:
                    bf:41:62:18:a9:63:95:ad:ac:85:93:86:bd:0e:6c:
                    f0:fb:09:03:36:81:f1:2c:80:50:24:9f:43:53:ae:
                    c6:52:b0:ee:3c:db:97:00:54:87:4b:f3:b9:50:20:
                    d4:93:9e:85:d4:d1:e1:4e:57:fe:68:f0:fb:80:a8:
                    65:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:41:7E:DB:2B:44:0E:28:3A:A0:EC:97:13:5F:A9:EB:6F:46:A5:66
            X509v3 Authority Key Identifier:
                keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a4:e6:0b:ad:dc:49:2f:df:f7:80:e8:c6:92:6a:ca:a3:09:
         99:85:83:58:e1:37:32:2f:2d:e7:a2:c2:ff:e1:a3:5e:6e:46:
         b9:cb:f3:6c:f7:c2:4f:76:66:de:ab:ef:0c:bd:f3:05:fe:bd:
         1c:26:c2:32:72:3e:0d:25:71:8d:a3:c1:85:37:cc:fa:41:b0:
         7d:76:44:c3:a5:5e:82:22:8e:bd:64:3c:72:9b:5c:55:9a:25:
         0a:22:be:7a:6a:0a:ea:61:69:fa:67:a7:44:42:57:c3:6c:23:
         ec:7b:49:c8:66:b4:53:62:91:51:d4:c8:e5:5b:7e:be:f1:32:
         b3:65:40:2b:56:23:04:a0:9e:72:04:bf:ad:06:eb:58:09:fb:
         b0:1a:bb:56:e2:70:57:5f:5d:88:23:a9:f9:36:8b:55:a0:b0:
         31:ef:a2:b1:9e:8e:1c:61:7a:42:b0:f8:b1:2d:18:75:05:18:
         7c:01:70:e8:0f:66:d5:63:b8:ba:68:27:d5:0d:a1:a1:ed:97:
         6e:84:32:e8:17:5b:b1:10:9c:5b:cd:30:bb:e2:7a:14:83:73:
         aa:de:85:95:59:cf:e9:a0:95:35:2c:df:33:e7:a1:3e:5d:cc:
         83:48:b9:6a:f5:79:9f:ec:82:97:97:89:77:c9:1b:58:7a:e3:
         3a:ec:c9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 19:56:22 2025 by rpki-client