Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
File:                     6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft (raw, json)
Hash identifier:          QIk87k3CMUkwhmFn/x5sPmL711TtK2Ix2Xb3l8CMgBA=
Subject key identifier:   EF:89:45:11:AB:77:3E:69:A6:E5:E7:B8:D8:7C:CB:DE:B6:49:A0:55
Authority key identifier: E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87
Certificate issuer:       /CN=e8f239a70043734172d26378bf2106ae72552187
Certificate serial:       01987DF866535DD46254142650FFB4DB71B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
Manifest number:          161F
Signing time:             Wed 06 Aug 2025 06:01:27 +0000
Manifest this update:     Wed 06 Aug 2025 06:01:27 +0000
Manifest next update:     Thu 07 Aug 2025 06:01:27 +0000
Files and hashes:         1: 6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl (hash: uGqI9w9dOvRevoQmzIo0OXHpVOloSURKETvO2j8KTLA=)
                          2: _rOeYqbasUbg4wEPxQv2jbf1rDs.roa (hash: QqZ9iY31p0jdqPdmJMdj1h5d+9EiWy2N5/wKWyWJKZc=)
                          3: uoGc2nJpk2UpZyfHZzcx7uBg-dw.roa (hash: YbLz65VSnoZrUAyODriZg6tIX0t6U/Eu072okI1A/7E=)
                          4: uw5KIyglPtCBajZfvp_4MoIXMiY.roa (hash: +BtHm8C8PIjC3P+48v8raxefyMbdIOq6iq81PMb5GEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 06:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:f8:66:53:5d:d4:62:54:14:26:50:ff:b4:db:71:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f239a70043734172d26378bf2106ae72552187
        Validity
            Not Before: Aug  6 06:01:27 2025 GMT
            Not After : Aug  7 06:01:27 2025 GMT
        Subject: CN=ef894511ab773e69a6e5e7b8d87ccbdeb649a055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:63:d5:d0:d0:b7:b0:11:76:f4:10:5e:1a:8d:
                    21:46:47:d8:25:b0:e4:93:b7:43:14:ea:62:21:bb:
                    65:7a:f7:7f:d6:bd:fe:23:72:74:e5:5f:6a:a2:fb:
                    d7:82:54:38:48:71:2f:88:ef:25:25:0e:19:3f:14:
                    74:01:94:55:44:e7:7b:46:52:a8:53:1e:e1:9c:a0:
                    74:4c:04:72:bd:58:8c:18:ed:9f:44:20:84:7e:96:
                    37:a5:2b:34:85:4e:c7:36:d5:42:cf:b3:26:fb:36:
                    b0:55:0a:90:26:3f:84:79:8d:f0:0f:b3:e9:f3:f6:
                    c3:87:62:48:d7:28:7d:b9:8f:66:4c:df:2e:ba:23:
                    6d:64:d0:31:b0:11:73:22:4f:8a:8a:6f:a8:b4:37:
                    cd:78:41:80:37:ae:d3:77:67:ca:45:32:f7:18:1a:
                    e0:27:6b:b1:3b:d5:8e:3b:8a:36:e8:75:38:f1:e6:
                    a1:ee:ae:97:b7:cb:8b:e3:92:67:d3:58:21:1d:fb:
                    90:1b:ce:66:e9:1e:76:b7:ff:ad:cd:a1:cf:d8:98:
                    b2:5e:92:3c:38:bb:cf:f3:ca:b7:64:c7:2b:54:ff:
                    57:63:7b:5a:a7:e1:c7:89:11:ca:90:6a:68:2f:50:
                    a1:5a:b7:02:fe:28:a9:bf:b5:d4:99:05:d5:d7:66:
                    1b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:89:45:11:AB:77:3E:69:A6:E5:E7:B8:D8:7C:CB:DE:B6:49:A0:55
            X509v3 Authority Key Identifier:
                keyid:E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:67:22:ed:db:c7:7c:76:43:50:b9:f0:40:65:cf:ad:11:ea:
         12:93:a8:f4:24:d6:67:7b:1d:01:dd:26:93:15:86:2a:2a:b8:
         36:0d:3f:58:96:27:85:ff:fe:8f:f2:bd:77:0b:25:ff:54:be:
         4b:23:2f:4e:3f:1e:7c:9e:f9:17:79:90:50:8e:84:87:26:5a:
         da:66:86:5d:9e:16:84:9a:3c:9c:59:a3:76:d7:0d:44:b0:95:
         24:21:b9:46:aa:8b:b4:23:2d:bf:ad:c4:09:01:b7:b2:73:06:
         99:4c:18:dd:18:32:3b:87:dc:27:a9:2a:b2:21:ed:4e:93:1c:
         64:3d:15:43:14:57:b8:1f:26:ea:33:1d:fd:79:dd:7b:7d:61:
         30:eb:87:63:e6:ff:ec:da:1a:1a:64:e8:e7:3e:32:58:24:9b:
         b2:17:3d:3b:47:e6:0c:9d:da:e9:f8:0a:ad:50:26:de:0b:bd:
         7e:04:a3:3d:aa:ad:b8:f4:df:59:20:1c:05:f5:b9:39:ca:9e:
         d5:40:3e:a6:b5:b1:bc:fa:9f:cd:be:7a:76:c9:84:c7:de:c0:
         80:1f:9e:33:2c:69:27:6e:76:06:3d:d9:e8:61:50:f1:28:c0:
         26:15:8c:7c:57:f8:fe:49:42:57:78:91:e2:bf:d6:95:ff:7e:
         e1:3a:c4:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9+GZTXdRiVBQmUP+023G3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZjIzOWE3MDA0MzczNDE3MmQyNjM3OGJmMjEwNmFlNzI1
NTIxODcwHhcNMjUwODA2MDYwMTI3WhcNMjUwODA3MDYwMTI3WjAzMTEwLwYDVQQD
EyhlZjg5NDUxMWFiNzczZTY5YTZlNWU3YjhkODdjY2JkZWI2NDlhMDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymPV0NC3sBF29BBeGo0hRkfYJbDk
k7dDFOpiIbtlevd/1r3+I3J05V9qovvXglQ4SHEviO8lJQ4ZPxR0AZRVROd7RlKo
Ux7hnKB0TARyvViMGO2fRCCEfpY3pSs0hU7HNtVCz7Mm+zawVQqQJj+EeY3wD7Pp
8/bDh2JI1yh9uY9mTN8uuiNtZNAxsBFzIk+Kim+otDfNeEGAN67Td2fKRTL3GBrg
J2uxO9WOO4o26HU48eah7q6Xt8uL45Jn01ghHfuQG85m6R52t/+tzaHP2JiyXpI8
OLvP88q3ZMcrVP9XY3tap+HHiRHKkGpoL1ChWrcC/iipv7XUmQXV12YbcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+JRRGrdz5ppuXnuNh8y962SaBVMB8GA1UdIwQY
MBaAFOjyOacAQ3NBctJjeL8hBq5yVSGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlBJNXB3QkRjMEZ5MG1ONHZ5RUdybkpWSVljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy80ZTkwMmEtMjk5Zi00ZGE3LTlhNmQt
NjY5YmQxMTNhMTc4LzEvNlBJNXB3QkRjMEZ5MG1ONHZ5RUdybkpWSVljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy80ZTkwMmEtMjk5Zi00ZGE3LTlhNmQtNjY5YmQxMTNhMTc4
LzEvNlBJNXB3QkRjMEZ5MG1ONHZ5RUdybkpWSVljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWci7dvH
fHZDULnwQGXPrRHqEpOo9CTWZ3sdAd0mkxWGKiq4Ng0/WJYnhf/+j/K9dwsl/1S+
SyMvTj8efJ75F3mQUI6EhyZa2maGXZ4WhJo8nFmjdtcNRLCVJCG5RqqLtCMtv63E
CQG3snMGmUwY3RgyO4fcJ6kqsiHtTpMcZD0VQxRXuB8m6jMd/Xnde31hMOuHY+b/
7NoaGmTo5z4yWCSbshc9O0fmDJ3a6fgKrVAm3gu9fgSjPaqtuPTfWSAcBfW5Ocqe
1UA+prWxvPqfzb56dsmEx97AgB+eMyxpJ252Bj3Z6GFQ8SjAJhWMfFf4/klCV3iR
4r/Wlf9+4TrEXg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:16:35 2025 by rpki-client