Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
File:                     6oRgBs-LnjiPMUUTWAklAs7METY.mft (raw, json)
Hash identifier:          xiQKDCLkZrGoUUsWo/kmMNkVn6OWlqvKMU8//eR07Yg=
Subject key identifier:   92:1C:FC:F2:81:68:DB:56:DF:17:FD:06:1E:7B:17:B5:C9:C4:B4:0D
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Certificate issuer:       /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial:       019885439DB887025B2998D98FF9E01E90B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
Manifest number:          0E23
Signing time:             Thu 07 Aug 2025 16:00:57 +0000
Manifest this update:     Thu 07 Aug 2025 16:00:57 +0000
Manifest next update:     Fri 08 Aug 2025 16:00:57 +0000
Files and hashes:         1: 1caWY1h99shWYECynlPTo8_1vrA.roa (hash: Aon6FQO3a7yW1GjMXQDU5WdJ0X3x57CSJl9oOPxCpMk=)
                          2: 6oRgBs-LnjiPMUUTWAklAs7METY.crl (hash: J6Ljg285CdECYvjYQt8i/ds7GH0A6+gdlO9tMDaxYUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 16:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:85:43:9d:b8:87:02:5b:29:98:d9:8f:f9:e0:1e:90:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
        Validity
            Not Before: Aug  7 16:00:57 2025 GMT
            Not After : Aug  8 16:00:57 2025 GMT
        Subject: CN=921cfcf28168db56df17fd061e7b17b5c9c4b40d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fa:0b:35:48:9c:78:0e:36:48:2a:73:26:d1:
                    e9:75:38:d8:31:5d:de:7d:0e:a0:ce:a9:f0:79:ea:
                    0f:8d:18:cb:98:8b:1d:11:0a:aa:77:6c:a5:b7:9a:
                    ef:93:4c:20:5e:2f:86:21:01:43:a6:3a:d8:68:ac:
                    05:bd:09:7e:ec:2a:67:73:cf:e4:20:8a:af:05:cb:
                    67:16:c8:9a:88:6b:a2:25:a8:5d:78:62:6a:fa:24:
                    89:f0:e1:25:99:6e:55:3c:d0:ed:f7:3d:70:c3:f2:
                    10:f2:53:ec:ac:0c:e4:69:16:70:77:b4:f3:16:10:
                    fb:b1:37:b7:e9:0e:96:b1:92:36:ba:e5:75:aa:7b:
                    3d:7a:b5:db:0e:5b:37:77:22:0b:bd:ab:4b:7f:e0:
                    82:08:cf:17:bd:61:fa:a8:cb:93:a3:d3:c3:b9:7a:
                    f4:1c:0d:b8:de:0b:89:aa:f2:27:69:8c:ba:47:76:
                    ea:f5:e2:ae:e9:cc:7c:bf:15:8a:27:d8:b4:c8:be:
                    2a:06:1b:ff:ef:5c:84:3c:c0:6b:4f:1e:91:fe:4d:
                    ab:e7:db:d0:19:67:c0:3e:eb:0e:62:2a:98:9d:47:
                    68:b7:21:b2:4e:d8:a3:da:be:23:0b:4b:6c:e3:35:
                    d9:cd:97:05:ac:10:78:bb:f4:0f:37:53:56:16:a3:
                    72:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1C:FC:F2:81:68:DB:56:DF:17:FD:06:1E:7B:17:B5:C9:C4:B4:0D
            X509v3 Authority Key Identifier:
                keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:c5:d5:87:68:32:cb:06:d1:cd:0d:11:05:79:c8:24:6a:88:
         1f:0b:09:98:80:d2:86:02:c6:91:79:ac:c3:24:d0:13:9a:29:
         c3:e8:f8:a4:2d:5c:db:b1:ca:0d:31:9a:14:20:4d:53:fe:f1:
         ad:da:49:ee:d8:dd:43:a2:c5:a8:db:7d:52:7a:8c:f9:2f:ef:
         e1:80:f5:d3:95:7c:9f:e1:9b:fc:6f:bf:7e:4a:dd:f9:00:58:
         f3:3c:82:da:f5:f3:11:e8:f9:70:15:de:7a:8c:26:a0:75:eb:
         2a:64:fb:e1:a8:27:10:b7:0c:25:43:44:21:12:46:97:65:c0:
         97:ef:bc:b4:cf:88:06:99:19:81:d3:b0:f2:50:4d:a8:86:a0:
         be:f8:5c:eb:99:3f:3c:8a:1b:56:2c:10:13:2a:04:5a:a1:eb:
         5f:b3:ce:a2:54:fc:40:48:e1:3a:a0:f7:75:7d:f1:7f:a3:89:
         ae:23:90:f6:09:85:ad:97:49:6c:0b:47:83:97:ca:35:f7:82:
         ef:84:33:23:3a:4a:e5:82:47:96:4d:4b:ad:0b:3b:8e:2b:13:
         c9:b3:03:f0:76:9c:7d:55:ea:05:42:c6:6c:42:61:df:69:c5:
         83:3f:e3:e0:de:93:cc:32:1b:39:d4:00:cb:a7:21:49:66:a5:
         bb:dd:ec:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:32:50 2025 by rpki-client