Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft
File:                     bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft (raw, json)
Hash identifier:          pM3/oP/C+6fqfN8ddVPzdB6+hC8LtnE68FzPy0ERWe4=
Subject key identifier:   C2:CC:49:75:BF:F0:75:A1:D1:47:6A:78:2D:84:67:57:47:1B:44:32
Authority key identifier: 6E:44:28:F7:F1:7B:19:C1:50:68:CA:B9:39:D3:77:94:0E:8D:4C:70
Certificate issuer:       /CN=6e4428f7f17b19c15068cab939d377940e8d4c70
Certificate serial:       01988430FFC560C67ED28018C8D83DD75D6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bkQo9_F7GcFQaMq5OdN3lA6NTHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft
Manifest number:          03D0
Signing time:             Thu 07 Aug 2025 11:01:00 +0000
Manifest this update:     Thu 07 Aug 2025 11:01:00 +0000
Manifest next update:     Fri 08 Aug 2025 11:01:00 +0000
Files and hashes:         1: bkQo9_F7GcFQaMq5OdN3lA6NTHA.crl (hash: S2hp5+gVPmUrZEMLdfwud5x39ePYgHGxIkBAZLmKKqA=)
                          2: r5LfqFNzBSvkVNYj6vVDPex2eII.roa (hash: zD3Y+yhvhdTCP2LNWWBpR2SBF00RvRC4BFmgCTYqEsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bkQo9_F7GcFQaMq5OdN3lA6NTHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 11:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:84:30:ff:c5:60:c6:7e:d2:80:18:c8:d8:3d:d7:5d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e4428f7f17b19c15068cab939d377940e8d4c70
        Validity
            Not Before: Aug  7 11:01:00 2025 GMT
            Not After : Aug  8 11:01:00 2025 GMT
        Subject: CN=c2cc4975bff075a1d1476a782d846757471b4432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:85:b4:1f:d8:31:67:54:41:56:4e:02:91:f3:
                    41:63:52:7e:2c:bb:2c:ee:c1:a5:1c:7f:89:1b:f9:
                    7b:e9:cc:d1:76:59:da:6f:9a:f9:54:81:9f:e1:b3:
                    a8:5f:69:70:e1:cf:3e:3b:c2:ef:6f:ea:51:19:68:
                    9d:de:51:35:2f:ad:9b:6e:6e:f7:62:ee:a4:dc:30:
                    a6:32:99:8b:95:58:3c:ca:51:b8:98:c4:9d:53:ca:
                    92:6a:17:37:db:0d:7d:9c:54:74:aa:8b:0a:d5:1f:
                    05:6e:8e:9d:20:07:23:a3:6a:0e:e0:f1:02:ad:42:
                    5b:64:c8:40:66:7d:ef:86:04:8c:16:fa:61:07:6a:
                    2f:c3:d3:7e:1b:23:13:61:05:51:2c:3f:ea:27:4a:
                    69:4e:b2:05:1d:32:5f:cb:29:26:74:64:95:4e:98:
                    5c:f6:0f:53:2d:8b:d3:9b:ce:0c:b6:42:9c:d0:63:
                    fc:70:20:f1:57:ae:eb:5b:ca:aa:92:c4:b9:aa:da:
                    eb:ad:64:e6:cb:b0:93:dd:00:67:5e:4f:2e:47:81:
                    c4:a6:44:f0:1f:12:93:56:5b:8b:89:01:eb:b1:76:
                    cc:31:93:15:3c:8b:33:1b:d8:ed:d3:49:2c:20:66:
                    dd:9e:a6:76:ac:95:1c:66:1d:81:52:f3:48:75:aa:
                    ef:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CC:49:75:BF:F0:75:A1:D1:47:6A:78:2D:84:67:57:47:1B:44:32
            X509v3 Authority Key Identifier:
                keyid:6E:44:28:F7:F1:7B:19:C1:50:68:CA:B9:39:D3:77:94:0E:8D:4C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkQo9_F7GcFQaMq5OdN3lA6NTHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:af:78:54:93:dc:fc:00:e3:7d:a0:2a:b6:25:bc:b2:02:f5:
         fb:4a:ce:e4:9a:7f:e6:f3:bd:eb:84:a6:85:22:4a:24:82:36:
         89:e5:f4:28:3b:fc:14:43:a1:95:ba:71:c4:c5:bb:99:e1:61:
         7e:ed:14:1e:e0:07:d5:9e:2d:81:71:84:92:54:75:be:d0:11:
         74:fc:12:d0:65:46:8c:86:89:62:bc:d1:9f:d8:18:ab:32:80:
         5c:4f:09:f8:06:9f:73:f3:2f:ae:73:71:7a:13:b2:ff:b0:c0:
         c7:f0:07:c0:1d:d7:f8:c8:aa:60:f2:be:78:38:84:52:bb:10:
         a8:8d:13:b2:91:f0:66:c2:54:6b:e9:ea:5a:a3:6e:46:cf:17:
         4a:10:c8:0b:0a:25:18:8f:2e:17:75:2d:81:87:99:a6:4b:40:
         1f:11:1b:23:f4:28:d3:d8:35:c9:81:28:44:1a:5a:5a:c2:2c:
         3e:cf:02:13:0d:14:a4:30:8b:5b:24:90:91:2d:de:91:e0:15:
         1c:60:22:78:e4:69:01:79:8a:c9:d1:a8:f3:74:9c:4e:aa:07:
         57:f0:64:7c:8b:b5:ab:09:59:2b:ad:53:21:a8:a1:83:4d:42:
         cc:61:06:87:f1:11:59:33:09:59:d7:88:e5:4d:81:08:b3:67:
         2a:03:ad:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:10:55 2025 by rpki-client