Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft
File:                     6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft (raw, json)
Hash identifier:          795cds9sHfh39EImzE8Y35zo0mNvUV7HovrMEJ821Eo=
Subject key identifier:   07:34:A3:92:AF:25:B0:79:21:FC:DA:8E:25:24:74:78:F3:84:39:01
Authority key identifier: EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF
Certificate issuer:       /CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf
Certificate serial:       01978433052700E5F0EAE76BA38350468465
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft
Manifest number:          159E
Signing time:             Wed 18 Jun 2025 18:00:25 +0000
Manifest this update:     Wed 18 Jun 2025 18:00:25 +0000
Manifest next update:     Thu 19 Jun 2025 18:00:25 +0000
Files and hashes:         1: 6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl (hash: Huvck9pxkVjHoV+X58jFZrfP96ZMe/P2R4isUQJGQNM=)
                          2: DIYTcQL0kTTU2q4HEzGujm0gUwo.roa (hash: RDp4zi/HUT9tIKN8ofgNKdiyOgNtG9lWPQ4C3eVO32Y=)
                          3: uL0oA5oOVHGz1EKQthaeZ4nofOI.roa (hash: Ukj6KTn0iYnjxnepezeV1ye/hQ4gCPQyF7UCJwJgWx0=)
                          4: xEVUwNoistpr086p8wiZOj3lAS0.roa (hash: jssBpk2I1njjei0F0mwFNz5A15Y3I0c8WhHM6GhLppA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:84:33:05:27:00:e5:f0:ea:e7:6b:a3:83:50:46:84:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf
        Validity
            Not Before: Jun 18 18:00:25 2025 GMT
            Not After : Jun 19 18:00:25 2025 GMT
        Subject: CN=0734a392af25b07921fcda8e25247478f3843901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b2:25:03:71:60:5a:02:d8:3f:db:52:6a:c2:
                    2b:92:ac:62:5f:17:61:a2:2c:7d:4b:72:8f:6e:05:
                    72:d9:72:5f:0c:79:71:ca:ce:b0:cf:12:ed:82:47:
                    81:b9:cd:8d:f2:09:e5:6c:95:0c:46:60:be:71:fc:
                    02:b0:9f:8b:bd:e9:dc:08:ec:77:d0:d5:04:01:f8:
                    fb:c1:44:21:ee:30:80:cc:80:93:07:fd:83:d5:47:
                    70:92:e4:da:80:f5:21:8b:69:05:36:3c:c2:59:e0:
                    ab:6a:4f:c3:4f:60:ba:8d:dc:92:45:d3:cc:b5:94:
                    aa:c5:81:13:aa:99:b2:1d:e8:12:dd:c7:9d:15:58:
                    8d:1a:e6:ba:03:4e:d3:50:a4:7f:02:34:ce:6e:a5:
                    63:d1:64:b4:49:1f:60:a4:39:e1:f8:46:be:56:21:
                    dd:ed:1f:ed:c9:9f:bf:01:2c:fb:71:b9:86:46:c4:
                    f5:45:4a:26:40:c7:1a:22:a8:79:55:0f:95:57:d3:
                    ad:ea:8f:c3:79:88:31:f5:a9:cc:91:d1:50:5a:ba:
                    ec:a2:e3:2d:0b:2a:25:40:63:22:e2:58:b9:10:58:
                    0c:99:d2:62:ad:8d:f5:b1:a2:8f:6b:2b:1c:61:a0:
                    32:34:a1:6f:26:e5:c1:0c:e9:6e:31:96:cf:d9:5b:
                    01:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:34:A3:92:AF:25:B0:79:21:FC:DA:8E:25:24:74:78:F3:84:39:01
            X509v3 Authority Key Identifier:
                keyid:EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:36:3c:6a:49:43:46:30:4c:8e:03:fe:0a:cc:90:df:e4:1a:
         b5:72:58:86:3d:f6:11:c0:b7:6c:83:81:46:ac:3e:66:bc:9d:
         9f:49:77:75:eb:85:f1:6b:47:00:bc:c7:ce:1f:78:7f:d3:25:
         e7:07:c6:12:fa:24:1f:e1:9b:07:64:ce:18:8e:bb:57:99:1d:
         a4:9e:25:0f:bb:0f:26:7b:10:72:95:3a:d6:3a:51:36:69:7c:
         1d:fa:f8:0f:7a:44:45:db:57:dd:61:15:84:d6:3b:df:0c:39:
         4f:7a:c3:5f:cf:c9:4b:c6:e8:07:8c:42:b2:3c:09:48:1e:2b:
         ce:2d:e5:a6:b7:bd:3a:1a:a3:36:b6:70:a9:6f:b6:2a:ff:ef:
         df:c5:21:3f:86:ac:f2:23:4a:eb:63:7d:a1:8e:5c:ad:23:3c:
         a3:db:fb:b4:4b:39:7d:e4:43:37:35:5a:9d:25:9d:5d:0e:85:
         dc:fb:c9:28:eb:5e:b3:bb:48:ef:5b:2e:8a:ca:1b:44:b0:4e:
         e9:d6:36:ab:7b:0b:e6:e0:0e:d9:95:e8:63:9b:70:6a:e4:44:
         96:86:97:90:b5:02:b1:ca:38:41:8e:7d:a0:f8:01:e8:24:e0:
         ed:c4:dd:00:25:34:c6:ab:81:2b:3b:ad:4b:2e:a0:ea:59:ff:
         f1:bd:a9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:04:20 2025 by rpki-client