Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.mft
File:                     6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.mft (raw, json)
Hash identifier:          mLWFmsXVIXSuoNb/pIeFqSXAkN4b23xdx6ewiYsLuMk=
Subject key identifier:   D6:6E:5B:B1:0F:C6:A3:47:F0:CE:2E:16:2A:7D:90:10:4C:95:CE:A4
Authority key identifier: EA:60:32:7C:9E:2A:4E:3E:37:D5:47:B5:36:14:35:00:D0:A5:DC:B9
Certificate issuer:       /CN=ea60327c9e2a4e3e37d547b536143500d0a5dcb9
Certificate serial:       01976D066ABE4BE20D1310BEDB4F7FC62B52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.mft
Manifest number:          08AB
Signing time:             Sat 14 Jun 2025 06:00:26 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:26 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:26 +0000
Files and hashes:         1: 6IQHtBCS1JE9_VEW3BeNg7TDXiE.roa (hash: 6uQ/4oFYw1xhoqw3/qkx1eHe1uT4WuqtHU7wwwKQl2Q=)
                          2: 6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.crl (hash: cXhpYa0MMVgD1faYk2zBFaDAAahH0IqJ6i/OiGjtiZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:6a:be:4b:e2:0d:13:10:be:db:4f:7f:c6:2b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea60327c9e2a4e3e37d547b536143500d0a5dcb9
        Validity
            Not Before: Jun 14 06:00:26 2025 GMT
            Not After : Jun 15 06:00:26 2025 GMT
        Subject: CN=d66e5bb10fc6a347f0ce2e162a7d90104c95cea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c2:89:21:d6:2a:31:a5:d5:25:59:e9:26:93:
                    75:60:fb:95:62:d9:0f:f8:3e:23:af:a6:b9:47:10:
                    5d:6b:84:b3:5c:33:d0:20:66:9a:09:b5:38:fb:fd:
                    db:f7:20:47:18:b6:c5:42:52:2b:6d:e9:85:ba:4d:
                    92:25:75:a8:79:ae:45:63:f4:b3:8b:39:d8:1c:4d:
                    3c:d6:2d:e0:98:e6:40:d3:e0:ad:03:01:3a:47:15:
                    7f:ae:00:ed:29:2a:3f:0a:18:c0:dd:df:5b:2d:9d:
                    c2:22:dd:8e:bf:97:26:f7:64:3f:5a:52:7c:6e:6f:
                    59:a3:86:9e:a4:a0:b4:f8:93:5b:1e:39:ea:94:49:
                    9b:8a:ce:fe:62:a6:1d:1f:43:5b:a8:50:ba:c6:66:
                    d8:a6:a5:87:59:cb:a3:31:00:a0:b9:e9:74:fa:7e:
                    f8:01:84:51:f2:0c:3d:98:0c:b0:74:5f:3c:d1:a0:
                    ec:9d:fa:d2:21:9e:18:f5:90:ac:3e:85:c7:0b:38:
                    30:ed:39:16:2d:b5:c1:fa:10:50:b9:bb:5d:9b:5c:
                    ad:6d:fb:9e:c4:d2:5c:3e:51:95:7d:f2:69:89:01:
                    45:e6:63:37:29:63:06:b8:c4:6d:a2:35:a1:fc:80:
                    96:d9:f8:67:97:7e:b4:7e:03:f0:e6:bb:75:02:78:
                    cd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6E:5B:B1:0F:C6:A3:47:F0:CE:2E:16:2A:7D:90:10:4C:95:CE:A4
            X509v3 Authority Key Identifier:
                keyid:EA:60:32:7C:9E:2A:4E:3E:37:D5:47:B5:36:14:35:00:D0:A5:DC:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:cb:49:62:98:54:16:76:19:4d:75:ea:53:ad:43:6f:22:0b:
         0e:1c:47:89:4e:56:ce:f9:44:15:ad:7f:3e:5f:a2:ed:1c:9f:
         67:1c:f7:dc:78:21:7a:0c:72:9a:78:6d:23:8f:68:3b:57:2b:
         a2:e6:f4:19:4a:11:12:32:9a:83:d0:9e:49:4d:e2:81:58:9b:
         e2:20:00:d3:dd:44:6d:59:ab:08:22:07:1b:30:16:3c:2f:e0:
         cd:4f:a2:cc:25:48:a3:04:46:01:09:44:c2:23:d3:8e:46:05:
         52:ac:eb:9b:93:3e:87:1a:93:e3:04:59:81:65:f7:4a:a6:a2:
         0d:ad:38:cc:ce:c9:81:97:5b:b9:4f:e0:c6:eb:d5:04:da:29:
         16:16:15:9e:33:7a:9e:09:55:b2:2c:93:b3:05:b7:fe:2d:22:
         69:b8:ef:4f:15:07:6d:54:42:82:3f:99:ed:e7:82:de:7d:36:
         2a:97:11:fc:b8:e1:68:86:fb:94:50:c4:60:a1:af:ea:58:d8:
         47:6b:f5:b5:09:94:14:44:c2:78:cd:c2:77:87:75:1d:55:14:
         b6:fe:85:ba:7a:94:ea:2f:1a:32:0d:50:a6:b9:a1:24:da:34:
         60:a1:84:6a:ae:ab:39:65:77:ec:07:38:6e:48:4e:c4:89:63:
         08:1e:7a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:22:34 2025 by rpki-client