Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
File:                     yq46VN0DiVaD7tvDedHg27Brm9s.mft (raw, json)
Hash identifier:          i+erP56znV+JCbk0s91oWYTIsS7AlsRKi+cmS8zNKlg=
Subject key identifier:   83:10:9D:94:EA:80:3A:72:45:37:97:60:7F:63:7F:5B:09:55:5F:91
Authority key identifier: CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB
Certificate issuer:       /CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb
Certificate serial:       019896DC0CA62D96E57224E5AE7903242AC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
Manifest number:          B6
Signing time:             Mon 11 Aug 2025 02:01:00 +0000
Manifest this update:     Mon 11 Aug 2025 02:01:00 +0000
Manifest next update:     Tue 12 Aug 2025 02:01:00 +0000
Files and hashes:         1: IqlpwJ2xW0fAs8ZGPBfSTtIDhwE.roa (hash: qbO1Ww6u5GvjQ0O8Z6mDFqL7l1gHc63dxnum3Lg38lg=)
                          2: yq46VN0DiVaD7tvDedHg27Brm9s.crl (hash: lYYR+5tZcnvkAh5AO9+n6BfRBaORabAiMT1MVl2QpYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:dc:0c:a6:2d:96:e5:72:24:e5:ae:79:03:24:2a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb
        Validity
            Not Before: Aug 11 02:01:00 2025 GMT
            Not After : Aug 12 02:01:00 2025 GMT
        Subject: CN=83109d94ea803a72453797607f637f5b09555f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ab:67:62:34:e3:ae:ba:3d:31:83:81:15:df:
                    fc:4e:44:74:6a:c3:de:74:ee:90:eb:de:da:77:53:
                    f0:ae:48:25:57:ec:a7:38:67:aa:65:b8:dd:a7:e6:
                    22:b6:cd:2c:46:d8:b8:51:e4:f9:41:7d:5f:57:17:
                    6e:a1:ac:af:98:a6:84:bc:7d:60:82:5f:6c:6c:d1:
                    04:ae:01:47:8b:f0:7c:f1:49:42:a8:62:60:01:5f:
                    81:33:47:ad:2e:0d:7f:ce:e9:9a:cb:d2:a7:17:4a:
                    4d:03:54:13:ab:dc:54:8e:f2:8f:aa:f6:fa:07:b6:
                    15:36:75:d8:d3:51:7d:2a:a0:d8:07:7a:1d:17:27:
                    4f:f9:4e:a3:7e:16:2a:0d:a8:a0:7d:bc:bc:e7:57:
                    28:aa:2c:76:ec:e7:d1:78:b4:b3:b3:91:be:7b:5d:
                    2c:ef:f7:8d:68:9c:96:2b:52:1b:6e:f1:73:1a:5a:
                    f5:0d:f9:1a:66:be:35:27:53:b3:bd:4a:b3:5b:48:
                    89:92:34:dc:ee:a8:04:ee:fc:7a:9d:bc:d2:48:77:
                    38:63:18:a5:03:eb:37:44:45:22:33:95:0e:ca:6f:
                    ed:aa:22:7b:54:fe:02:84:a7:d8:85:a2:60:67:d2:
                    86:8e:22:c1:cd:5b:aa:2b:ec:18:26:30:12:89:93:
                    a4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:10:9D:94:EA:80:3A:72:45:37:97:60:7F:63:7F:5B:09:55:5F:91
            X509v3 Authority Key Identifier:
                keyid:CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:73:4e:dd:07:0f:01:3e:9e:46:3a:e2:76:40:b0:59:53:8e:
         37:1c:88:2c:87:d7:cc:8a:95:dd:7e:0e:19:95:37:a4:c7:7a:
         84:5c:2b:ae:7c:79:42:48:be:54:79:91:6c:1a:15:b3:dc:fe:
         3c:bb:0c:f3:0c:84:b1:7d:f3:95:df:4f:b8:a9:b1:e3:97:b3:
         b1:4b:e4:87:5d:4a:70:c9:db:f4:7f:9b:76:d5:d7:ac:df:75:
         61:72:e5:68:03:95:f0:40:34:31:62:2c:0b:fb:b6:34:fb:cb:
         4d:2c:76:32:56:27:de:8c:7a:1c:83:6a:71:3e:a8:1c:75:1b:
         4c:94:64:19:69:4c:54:50:d3:56:82:ca:56:6d:84:aa:e6:fd:
         2d:8a:03:42:b0:43:50:e6:98:be:96:74:3f:51:ed:ae:ac:c9:
         8b:91:c2:7c:84:ed:64:1e:df:1a:3e:09:61:99:1b:bd:a0:0c:
         be:47:9a:35:47:67:e9:76:88:f4:09:0a:25:c3:42:72:c9:1f:
         20:de:0e:af:83:34:f8:b4:91:7c:71:63:c6:22:8a:02:33:fd:
         57:c5:bb:f4:79:21:f0:ed:5a:59:63:90:ad:4c:23:4e:27:dd:
         45:cb:0e:c9:51:81:07:aa:87:2a:4e:25:43:01:fb:98:32:2a:
         ff:e1:d6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:49:56 2025 by rpki-client