Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
File:                     v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft (raw, json)
Hash identifier:          vibRGnlMeVZRE3P0cZoUp6wr11hvkVeAr05YYYgqKdw=
Subject key identifier:   6B:C5:A3:9F:31:B4:EB:1B:BF:C6:F3:BA:E2:99:F4:76:E4:0A:A3:57
Authority key identifier: BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC
Certificate issuer:       /CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
Certificate serial:       019873E3CE49AC8DB794EFDCB3432449CF03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
Manifest number:          12AA
Signing time:             Mon 04 Aug 2025 07:02:46 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:46 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:46 +0000
Files and hashes:         1: CwTJXDuwwtXY5lds5AcNMw4m4MM.roa (hash: pkjwfyNy3tBr0gdIHHue6NuT85XueEkqyX3eSoK30mk=)
                          2: v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl (hash: 8YI4IprbRwh0Tn91pMIGsoU/EbhmDoYTfED+6dLr2Og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:ce:49:ac:8d:b7:94:ef:dc:b3:43:24:49:cf:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
        Validity
            Not Before: Aug  4 07:02:46 2025 GMT
            Not After : Aug  5 07:02:46 2025 GMT
        Subject: CN=6bc5a39f31b4eb1bbfc6f3bae299f476e40aa357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:58:dc:84:71:8c:9c:65:4e:03:06:84:b7:63:
                    62:03:e1:a9:ef:81:66:d0:68:18:38:58:dd:cc:a2:
                    81:f1:34:91:e4:b6:be:f9:5b:c8:85:b3:e9:18:95:
                    6c:ae:be:34:b4:ce:c5:48:f9:94:5d:44:b0:82:29:
                    1c:a7:7d:f7:03:12:82:d6:a6:3d:71:02:f7:bf:df:
                    5f:48:52:d9:70:02:c3:bd:02:27:d7:eb:8b:16:e9:
                    d3:61:cd:e2:e4:42:35:0b:67:25:9f:e0:5c:1b:31:
                    3f:0b:2b:b9:e7:91:cd:1b:07:90:70:d9:46:7b:e5:
                    c6:b1:36:9f:df:3e:bc:66:5c:37:20:e8:70:e4:3b:
                    9a:fd:80:b4:cd:30:8d:10:3d:65:4c:ba:60:11:c5:
                    c3:f4:d0:34:5b:fc:8a:0d:0f:39:d2:af:37:27:79:
                    08:41:5a:29:37:2f:ef:70:ae:47:ef:3c:5b:57:fc:
                    67:c6:31:96:d1:66:b5:ac:f1:b7:17:54:be:f9:c0:
                    bd:ac:eb:18:28:62:05:f2:be:02:0d:09:ad:91:10:
                    6a:c6:89:13:cf:84:c5:ba:a0:e9:b3:09:38:8e:b8:
                    de:b6:c5:14:db:65:ef:2d:0b:01:19:6f:e4:ed:96:
                    71:16:f5:fc:c0:94:56:a3:37:dd:2d:ef:bd:7d:59:
                    74:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C5:A3:9F:31:B4:EB:1B:BF:C6:F3:BA:E2:99:F4:76:E4:0A:A3:57
            X509v3 Authority Key Identifier:
                keyid:BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:eb:ec:84:04:9b:85:9e:dd:db:93:6b:b9:b8:39:bc:50:10:
         d2:6f:59:f9:9b:2a:62:49:48:01:c9:c6:99:59:0f:58:b7:95:
         ec:5c:80:f6:15:6e:84:5b:dc:b3:bb:4f:6a:89:7c:72:1d:37:
         bc:fe:b3:a6:65:03:f1:be:e5:ce:6f:12:7e:73:c4:70:c6:cd:
         ba:5f:97:3a:49:6f:fd:ee:c4:f9:d4:6f:1f:12:bf:ca:09:51:
         ea:ec:09:09:4e:28:77:df:87:83:2b:ba:7b:b0:0e:5f:4a:87:
         66:1d:39:8c:5c:5c:55:34:1f:13:c9:03:ca:75:3e:32:4f:cd:
         46:50:21:44:54:6a:70:47:ff:e2:15:37:61:ee:60:68:46:26:
         96:97:be:57:88:87:16:5d:70:9e:39:34:51:6e:01:c7:0a:f0:
         e2:05:fb:44:15:73:92:be:b0:70:54:89:c0:9d:87:04:b8:8d:
         6c:76:b7:63:ed:4f:86:7c:32:0a:b0:5d:37:4b:6d:e7:91:ad:
         7e:e3:bf:70:02:bd:24:91:ba:7e:1a:c8:7e:4b:ad:f0:87:c0:
         29:a6:ab:d2:81:c1:f8:69:7c:a2:bf:d1:84:41:2b:70:e1:a5:
         a4:19:fa:6b:6f:51:49:08:84:fe:d0:dc:79:11:d8:ae:7b:37:
         c5:f4:a7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:03 2025 by rpki-client