Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.mft
File:                     6LYrvp7rWj1m4cwiOt7cU7F3xO4.mft (raw, json)
Hash identifier:          +9qyIF0aQJKrOOSRxMV7jwmHSEwRH1G7JTfFySPbjjM=
Subject key identifier:   7F:05:18:56:99:85:B7:65:1A:E4:F3:46:EA:86:E4:A1:95:93:C2:CC
Authority key identifier: E8:B6:2B:BE:9E:EB:5A:3D:66:E1:CC:22:3A:DE:DC:53:B1:77:C4:EE
Certificate issuer:       /CN=e8b62bbe9eeb5a3d66e1cc223adedc53b177c4ee
Certificate serial:       01989712BE2919F6CF4B057A4218C5821818
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.mft
Manifest number:          0840
Signing time:             Mon 11 Aug 2025 03:00:44 +0000
Manifest this update:     Mon 11 Aug 2025 03:00:44 +0000
Manifest next update:     Tue 12 Aug 2025 03:00:44 +0000
Files and hashes:         1: 6LYrvp7rWj1m4cwiOt7cU7F3xO4.crl (hash: xHXdqhg4k1ptQNKApohJbl3H6v5BkPpjcaEKarNbuT4=)
                          2: ZjzUD0PMo0YqwBhx4hKJmEy5Mpc.roa (hash: cE53npZFuyKJ0yUKa8St32zN8sDbq7J8FR9+stEQjAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:97:12:be:29:19:f6:cf:4b:05:7a:42:18:c5:82:18:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b62bbe9eeb5a3d66e1cc223adedc53b177c4ee
        Validity
            Not Before: Aug 11 03:00:44 2025 GMT
            Not After : Aug 12 03:00:44 2025 GMT
        Subject: CN=7f0518569985b7651ae4f346ea86e4a19593c2cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6d:65:c1:43:9e:d6:fc:6d:5d:15:3d:66:f9:
                    6a:c9:f8:ef:fc:07:52:43:32:8d:b4:02:00:64:04:
                    06:3d:73:e1:0c:a9:dd:21:54:a9:89:ef:6c:c6:60:
                    70:42:d1:2b:0c:58:de:ca:21:de:74:3f:27:f1:c9:
                    ee:f0:2d:99:0d:9f:c4:ee:da:bf:02:07:99:7f:4f:
                    7e:17:27:8a:d7:64:58:8e:b5:66:c5:49:86:c6:86:
                    c4:2b:77:11:49:77:09:d8:e6:62:b4:91:de:5e:38:
                    74:1d:32:8d:40:c0:74:43:7a:48:da:51:11:88:83:
                    2f:79:0e:3d:a4:c1:35:e8:94:e7:a6:58:b2:5a:01:
                    0c:7c:9c:11:37:94:2c:62:93:b9:6f:cd:d5:4a:a9:
                    e0:fa:78:80:b1:55:4c:06:53:43:56:e2:6c:59:1a:
                    05:a5:29:84:49:b4:2c:09:e1:42:d9:da:da:26:73:
                    ee:23:f3:30:bc:4e:af:c1:14:e8:d9:50:49:51:2a:
                    f8:0b:38:22:a9:5b:5b:3d:0e:56:28:5a:aa:2f:d7:
                    3e:6b:9f:8d:49:c6:f9:8b:31:75:e2:d7:23:17:9a:
                    24:e9:25:6c:9c:3c:6c:df:1a:72:ce:2e:78:83:be:
                    f9:27:27:5f:93:e3:e2:95:02:67:a7:dd:d8:eb:73:
                    5e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:05:18:56:99:85:B7:65:1A:E4:F3:46:EA:86:E4:A1:95:93:C2:CC
            X509v3 Authority Key Identifier:
                keyid:E8:B6:2B:BE:9E:EB:5A:3D:66:E1:CC:22:3A:DE:DC:53:B1:77:C4:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ba:cc:f9:39:07:af:97:2e:ce:40:80:48:6b:f3:01:d7:15:
         5a:91:e8:de:69:c7:2e:23:91:2a:a3:5a:89:e9:3a:9e:69:bc:
         a8:a2:a8:c4:e6:66:af:92:fb:68:6b:24:74:e9:d4:e5:39:13:
         22:3b:b0:a1:4a:f5:92:e5:fd:fa:68:f0:00:6e:21:25:1d:3d:
         23:15:65:84:d4:97:e2:99:db:17:74:75:5f:71:00:c8:0f:05:
         cb:19:0f:66:a8:48:6e:24:c4:d4:15:33:96:4d:c1:46:a9:52:
         20:88:ab:3d:9e:15:2b:76:66:db:f7:68:0d:5b:f6:d8:53:e4:
         42:56:ce:ed:2a:5a:98:2b:2f:23:be:db:56:82:1f:a9:60:49:
         60:b9:fa:fb:1d:ec:f1:e0:70:93:ab:0e:de:48:64:9c:b8:1c:
         dc:ae:1e:50:00:d1:1d:31:34:cd:0b:b6:a6:d2:3c:45:19:21:
         c4:8f:df:9f:2a:a3:bf:41:aa:de:56:7a:3e:4a:c0:93:72:bf:
         92:da:14:b4:b3:10:50:4e:90:ed:5e:bd:7d:c0:25:e6:ab:55:
         96:b4:ed:ad:ca:93:e4:69:8c:24:58:9d:b0:8a:75:7f:c8:c5:
         18:f8:ce:d8:b6:e0:33:b4:30:b9:69:67:09:af:97:e8:a8:8c:
         61:dd:ad:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:30:01 2025 by rpki-client