Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
File:                     b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft (raw, json)
Hash identifier:          +jPSz/LkIBR3ZrETsdO/8txqxhJkOovbiSJnk5kVY28=
Subject key identifier:   DE:49:D0:FE:F0:31:25:B5:65:49:93:72:0A:44:44:7C:6A:17:20:DB
Authority key identifier: 6F:A1:04:F6:A8:97:8B:B1:6C:D0:53:14:F9:8A:78:6E:0D:0D:95:64
Certificate issuer:       /CN=6fa104f6a8978bb16cd05314f98a786e0d0d9564
Certificate serial:       01987E9CC6F4DA91EA0756EBA44279ED6D1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
Manifest number:          161D
Signing time:             Wed 06 Aug 2025 09:01:00 +0000
Manifest this update:     Wed 06 Aug 2025 09:01:00 +0000
Manifest next update:     Thu 07 Aug 2025 09:01:00 +0000
Files and hashes:         1: b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl (hash: bNRAYLucxE364Mwr2bASWOyuS4ucXO0+Bho6DeaJPI8=)
                          2: gL_kuMaqCBJwQIMIS7ldG0BgqS0.roa (hash: aP7wklS1c2nj/ZqiWpRJ5vMpKjr7pu6Ax9+m6w/ftd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 09:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:9c:c6:f4:da:91:ea:07:56:eb:a4:42:79:ed:6d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa104f6a8978bb16cd05314f98a786e0d0d9564
        Validity
            Not Before: Aug  6 09:01:00 2025 GMT
            Not After : Aug  7 09:01:00 2025 GMT
        Subject: CN=de49d0fef03125b5654993720a44447c6a1720db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d8:0f:ba:43:22:29:4a:9b:df:8d:2d:c3:50:
                    6f:b4:06:35:05:0c:de:ca:02:b0:f3:80:cf:7e:34:
                    fe:ce:cf:a7:49:eb:75:4c:32:59:d5:42:7f:7c:48:
                    0e:e0:f4:bb:4e:bb:8f:00:c3:cc:ce:0c:fe:52:a0:
                    b2:e4:fc:74:20:21:e1:a9:ad:7b:87:3a:80:21:91:
                    cd:87:e8:04:fc:55:6a:cf:47:e7:22:9a:a9:f4:2c:
                    28:76:92:64:94:b8:04:1f:9e:ff:b3:a8:76:3a:c0:
                    ed:3e:5f:aa:f1:28:1c:c9:29:29:56:27:23:e2:bb:
                    7d:91:44:7b:bd:9a:2a:ab:f2:69:e2:e8:e3:9f:b5:
                    0b:ca:0d:bd:16:07:c6:25:20:db:c4:b9:05:ed:67:
                    c6:a2:74:82:d1:8d:f6:8c:f3:f4:68:d1:b7:60:1b:
                    74:c5:0f:a1:1f:bb:f8:bf:0c:39:c6:c6:70:15:c3:
                    03:b6:73:ff:ae:0d:51:6b:41:fc:5e:f6:ee:85:c2:
                    e4:16:94:4d:bb:11:62:50:89:b6:71:af:d4:4f:bd:
                    e4:33:67:32:da:9c:4a:d1:dc:5e:14:2f:42:64:d0:
                    f6:c6:14:d2:17:53:10:cb:77:91:c2:a0:32:78:90:
                    eb:5d:67:db:3d:6d:e0:cf:91:86:99:3a:86:2e:28:
                    05:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:49:D0:FE:F0:31:25:B5:65:49:93:72:0A:44:44:7C:6A:17:20:DB
            X509v3 Authority Key Identifier:
                keyid:6F:A1:04:F6:A8:97:8B:B1:6C:D0:53:14:F9:8A:78:6E:0D:0D:95:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a2:e6:d9:7e:1f:4d:3d:8a:1e:a2:e8:ca:fd:a0:49:b9:46:
         79:4f:a4:20:52:4c:b8:09:f5:c8:fc:31:53:3b:a6:c8:51:a2:
         5c:20:0d:f7:9d:fa:1f:0a:7b:f7:6b:57:ec:e6:a2:39:bd:35:
         7d:be:56:91:d8:ca:35:15:e1:fa:9d:53:17:87:db:d2:3f:5a:
         3c:95:43:c9:74:65:f1:5e:f8:3c:13:52:b2:da:90:9f:aa:0d:
         0f:c3:46:6e:fc:ff:72:be:80:3e:d6:fe:12:cb:3c:06:bc:fb:
         47:87:a2:65:93:03:8d:a9:79:6e:b4:d1:71:4e:f3:4d:ca:86:
         7f:ab:8b:7a:aa:d2:ec:63:aa:eb:ef:d0:52:be:40:c4:ed:cc:
         33:90:6b:77:cb:b8:8f:e2:9f:1f:b1:67:03:16:f8:e3:5b:e7:
         44:d7:cf:b7:bc:e7:49:2f:78:ba:62:bb:84:6a:17:f0:b8:1d:
         d7:aa:79:1c:1a:7a:52:7f:11:33:1e:09:92:6b:88:53:a3:8b:
         54:f3:83:ae:15:ef:83:e2:28:a9:04:7f:0a:8d:15:e1:ac:b8:
         04:67:eb:31:c8:4d:ba:91:72:63:48:1f:c4:a1:cf:6b:03:f2:
         2f:95:6e:65:6c:dc:eb:ab:c7:5d:62:14:b3:62:23:9f:ef:e5:
         6d:d8:e7:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+nMb02pHqB1brpEJ57W0eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYTEwNGY2YTg5NzhiYjE2Y2QwNTMxNGY5OGE3ODZlMGQw
ZDk1NjQwHhcNMjUwODA2MDkwMTAwWhcNMjUwODA3MDkwMTAwWjAzMTEwLwYDVQQD
EyhkZTQ5ZDBmZWYwMzEyNWI1NjU0OTkzNzIwYTQ0NDQ3YzZhMTcyMGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNgPukMiKUqb340tw1BvtAY1BQze
ygKw84DPfjT+zs+nSet1TDJZ1UJ/fEgO4PS7TruPAMPMzgz+UqCy5Px0ICHhqa17
hzqAIZHNh+gE/FVqz0fnIpqp9CwodpJklLgEH57/s6h2OsDtPl+q8SgcySkpVicj
4rt9kUR7vZoqq/Jp4ujjn7ULyg29FgfGJSDbxLkF7WfGonSC0Y32jPP0aNG3YBt0
xQ+hH7v4vww5xsZwFcMDtnP/rg1Ra0H8XvbuhcLkFpRNuxFiUIm2ca/UT73kM2cy
2pxK0dxeFC9CZND2xhTSF1MQy3eRwqAyeJDrXWfbPW3gz5GGmTqGLigFOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5J0P7wMSW1ZUmTcgpERHxqFyDbMB8GA1UdIwQY
MBaAFG+hBPaol4uxbNBTFPmKeG4NDZVkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjZFRTlxaVhpN0ZzMEZNVS1ZcDRiZzBObFdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy85ZGQ1ZTMtNTc2Zi00NGExLWE1Y2Mt
NjUwOWNiNWYyN2Y4LzEvYjZFRTlxaVhpN0ZzMEZNVS1ZcDRiZzBObFdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy85ZGQ1ZTMtNTc2Zi00NGExLWE1Y2MtNjUwOWNiNWYyN2Y4
LzEvYjZFRTlxaVhpN0ZzMEZNVS1ZcDRiZzBObFdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6Lm2X4f
TT2KHqLoyv2gSblGeU+kIFJMuAn1yPwxUzumyFGiXCAN9536Hwp792tX7OaiOb01
fb5WkdjKNRXh+p1TF4fb0j9aPJVDyXRl8V74PBNSstqQn6oND8NGbvz/cr6APtb+
Ess8Brz7R4eiZZMDjal5brTRcU7zTcqGf6uLeqrS7GOq6+/QUr5AxO3MM5Brd8u4
j+KfH7FnAxb441vnRNfPt7znSS94umK7hGoX8Lgd16p5HBp6Un8RMx4JkmuIU6OL
VPODrhXvg+IoqQR/Co0V4ay4BGfrMchNupFyY0gfxKHPawPyL5VuZWzc66vHXWIU
s2Ijn+/lbdjnEA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 18:33:24 2025 by rpki-client