Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.mft
File:                     6WTScFqbJv1IKpwQ6Sbq572kHps.mft (raw, json)
Hash identifier:          KVoPD7ZqsP6x7bCzBb4lwWiYWA8foSdf3ikS/1mHX+E=
Subject key identifier:   A2:AF:DF:D9:E2:78:64:81:15:3E:56:9B:4F:06:72:6A:9C:B2:1D:AC
Authority key identifier: E9:64:D2:70:5A:9B:26:FD:48:2A:9C:10:E9:26:EA:E7:BD:A4:1E:9B
Certificate issuer:       /CN=e964d2705a9b26fd482a9c10e926eae7bda41e9b
Certificate serial:       019880F8D87AB9ED001A9BBF6835467E890B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.mft
Manifest number:          0D27
Signing time:             Wed 06 Aug 2025 20:00:48 +0000
Manifest this update:     Wed 06 Aug 2025 20:00:48 +0000
Manifest next update:     Thu 07 Aug 2025 20:00:48 +0000
Files and hashes:         1: 6WTScFqbJv1IKpwQ6Sbq572kHps.crl (hash: LCbg1mRi8xnGQ9yPA4+AZtGOgAG5fcQr9eki0fgBAvg=)
                          2: qE5CKR1beI5QzGXctw8hwUZF3kQ.roa (hash: GJQ9ToPtMxv6IDjV2YJ/S2be8eseM+f65LcvwP6vzp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:f8:d8:7a:b9:ed:00:1a:9b:bf:68:35:46:7e:89:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e964d2705a9b26fd482a9c10e926eae7bda41e9b
        Validity
            Not Before: Aug  6 20:00:48 2025 GMT
            Not After : Aug  7 20:00:48 2025 GMT
        Subject: CN=a2afdfd9e2786481153e569b4f06726a9cb21dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f9:df:94:e9:5a:36:55:55:c8:a6:8d:8a:28:
                    86:aa:2f:54:c5:68:f6:5e:47:5a:4f:e8:c9:05:51:
                    fa:43:ee:aa:e7:d9:08:a0:05:df:11:8b:df:44:ff:
                    7f:5a:a5:0f:0b:22:00:dc:12:6f:c5:6a:8b:5a:05:
                    ea:e6:93:1b:9e:00:eb:84:d2:85:b9:47:8c:dd:82:
                    c4:69:2e:09:59:a1:29:26:8e:9b:45:03:a5:1f:08:
                    dd:af:b5:72:71:bd:af:5b:fe:cd:64:e8:e3:c1:37:
                    f8:5d:e1:f0:0e:42:34:e0:d7:e8:fb:6a:cc:52:7e:
                    93:06:3b:c9:4f:a8:6e:65:5f:33:0c:79:9d:bf:06:
                    63:1e:9a:cb:26:91:bb:72:c3:15:85:07:92:69:c3:
                    01:cd:ef:8b:5f:c0:d7:24:f5:04:c1:71:fc:3e:ab:
                    db:cd:33:ce:91:b0:de:4f:76:bd:8a:7a:f0:16:4f:
                    7a:31:6c:d8:7f:ef:97:03:5e:0e:f2:21:74:56:be:
                    23:da:0f:6c:c9:c4:90:e9:45:d6:de:ec:43:af:22:
                    69:71:70:bc:6c:1a:f5:9b:d4:78:7e:a0:8c:05:95:
                    32:dc:f7:50:34:3b:71:82:63:6d:bd:12:7c:db:12:
                    87:d5:05:ee:ce:1e:e3:d0:a0:11:40:b2:e3:14:b0:
                    54:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AF:DF:D9:E2:78:64:81:15:3E:56:9B:4F:06:72:6A:9C:B2:1D:AC
            X509v3 Authority Key Identifier:
                keyid:E9:64:D2:70:5A:9B:26:FD:48:2A:9C:10:E9:26:EA:E7:BD:A4:1E:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:9a:72:9f:84:af:af:7c:39:b0:85:9d:dc:7d:dc:20:a1:dc:
         dc:1f:93:66:65:86:a9:30:fd:d6:c9:fd:5e:ad:91:af:17:6d:
         5e:d6:72:4e:bf:0a:f5:39:67:87:ee:e0:62:bb:29:e8:38:66:
         3b:5c:f3:6e:1a:85:f1:35:ed:6f:a1:a8:3e:97:9e:a8:0d:74:
         29:30:4d:98:3d:70:b1:91:47:61:36:76:33:5f:0c:95:78:ae:
         16:3f:2d:c6:8d:20:2a:ad:dd:e8:aa:ee:d2:ce:86:66:f4:59:
         7b:42:b4:05:d8:33:b4:2f:dc:34:7f:0b:9d:42:02:7b:4a:99:
         7a:73:91:47:de:ba:11:bb:4a:26:f5:e1:7d:fb:3b:61:58:71:
         3b:d9:1d:fe:93:15:28:75:53:49:3e:86:a2:43:74:95:db:93:
         05:cd:8b:4b:66:12:20:eb:bd:b9:c8:79:e0:33:e8:03:12:45:
         53:c4:e6:3f:1d:a5:3c:43:1e:84:c5:4b:74:4a:a4:85:87:cf:
         9a:f3:1c:b3:3d:4b:82:79:59:93:87:96:06:3a:df:1f:48:f4:
         4a:82:2b:1f:26:38:50:66:05:e1:84:4c:d2:4d:95:6e:7d:34:
         cc:a5:91:36:ad:ca:b9:39:76:46:c0:26:d8:ac:17:4d:58:2b:
         bf:93:f5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:16:06 2025 by rpki-client