Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft
File:                     E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft (raw, json)
Hash identifier:          BR4G5MYQKuTOO5fmlacKKT6mAvwNjfK75yBUlH+mrWk=
Subject key identifier:   36:65:18:7B:55:77:66:03:A1:0D:44:44:83:FF:ED:37:84:FB:3B:F0
Authority key identifier: 13:A8:BF:B3:F5:47:54:BD:32:91:80:E5:93:75:02:65:EF:7E:39:99
Certificate issuer:       /CN=13a8bfb3f54754bd329180e593750265ef7e3999
Certificate serial:       01988DD8C1D93814063BD631B9130D3F059B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E6i_s_VHVL0ykYDlk3UCZe9-OZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft
Manifest number:          1018
Signing time:             Sat 09 Aug 2025 08:00:49 +0000
Manifest this update:     Sat 09 Aug 2025 08:00:49 +0000
Manifest next update:     Sun 10 Aug 2025 08:00:49 +0000
Files and hashes:         1: E6i_s_VHVL0ykYDlk3UCZe9-OZk.crl (hash: EtyJe7iswfTG357MhE2D6MgcKMtsDTplXO5t4l7XdF4=)
                          2: SA2FPjcpG1kQYsbun59Q7-Ncc5U.roa (hash: sLqwzq191GZfL/xfEdWZKrffVvqlf65Ic2rl/WtgP8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E6i_s_VHVL0ykYDlk3UCZe9-OZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:d8:c1:d9:38:14:06:3b:d6:31:b9:13:0d:3f:05:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13a8bfb3f54754bd329180e593750265ef7e3999
        Validity
            Not Before: Aug  9 08:00:49 2025 GMT
            Not After : Aug 10 08:00:49 2025 GMT
        Subject: CN=3665187b55776603a10d444483ffed3784fb3bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d4:bc:db:c9:77:5e:f2:e3:f8:1c:0b:ae:33:
                    c3:54:db:21:6e:39:5c:ca:93:8c:85:0b:7e:c5:b8:
                    01:f2:e9:3c:d8:31:25:05:1b:05:b5:55:17:97:d6:
                    dc:9b:a3:41:9d:c8:6d:0d:1d:5b:d8:bd:3d:cd:7a:
                    43:08:37:1c:da:51:ca:a5:a6:7f:1e:79:a9:91:ee:
                    10:82:03:bf:84:4b:e3:45:b8:48:b6:ed:b5:fc:95:
                    ce:ea:1a:a4:56:5f:98:4e:ac:dd:bc:0d:5d:11:6f:
                    97:39:bf:a0:37:5c:2b:7a:85:3c:c9:f1:f5:f3:3a:
                    02:25:57:b7:0d:46:45:8f:01:08:06:c6:1e:06:31:
                    84:07:c8:71:80:5d:a2:75:d7:63:b9:0e:99:47:7c:
                    a4:8a:50:e8:db:17:22:d1:ab:6c:45:64:ca:03:61:
                    a7:3d:ec:7d:1b:4f:78:62:65:de:64:9e:e7:da:3c:
                    11:52:23:3b:9e:af:e2:22:c9:88:3d:41:04:0a:fd:
                    2b:4d:fb:5f:2c:e5:fa:36:7a:7c:22:69:a8:68:43:
                    ea:40:55:5d:5a:fa:5d:40:7a:20:fb:95:43:ee:97:
                    a7:89:62:6f:77:dc:3b:7b:70:9b:f0:4a:5f:61:a1:
                    17:57:41:ec:1d:90:16:dc:ee:8c:97:b7:fa:49:0e:
                    22:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:65:18:7B:55:77:66:03:A1:0D:44:44:83:FF:ED:37:84:FB:3B:F0
            X509v3 Authority Key Identifier:
                keyid:13:A8:BF:B3:F5:47:54:BD:32:91:80:E5:93:75:02:65:EF:7E:39:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6i_s_VHVL0ykYDlk3UCZe9-OZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:bc:34:f8:6e:33:e1:f0:79:f0:ad:b1:53:af:65:ce:46:97:
         14:c7:70:ba:2c:e8:a4:af:29:3c:91:c3:03:3a:97:ce:64:5a:
         db:a9:8c:78:fa:15:bd:bb:ba:4a:aa:d3:25:48:a1:95:76:92:
         60:35:cb:c3:52:50:3c:4a:38:8e:3f:f9:70:a0:cf:b4:19:33:
         ee:70:4c:3a:4e:d1:d7:3e:e9:43:38:aa:89:0f:26:82:94:c0:
         d6:fb:83:ae:9c:59:8f:53:77:20:d6:37:4e:05:5f:98:92:14:
         48:31:a9:dd:96:2b:99:1f:c4:57:b4:ec:24:be:65:a2:3f:e0:
         35:2c:6e:c5:cb:30:1b:f2:b9:86:35:5f:96:c4:5a:db:18:0b:
         0a:50:c1:5e:dc:3c:b6:e7:e8:d5:fe:ac:e1:cf:24:f4:f0:05:
         1f:55:28:0f:a8:a1:de:32:df:14:48:b2:a8:81:98:09:8c:e7:
         84:65:e5:92:56:ce:ca:0f:5b:d2:ff:2f:66:04:ea:2d:78:99:
         b0:8b:fa:9d:bb:c0:49:c6:16:df:41:9f:56:d2:97:72:01:84:
         fc:8e:86:44:58:6d:e2:31:04:e6:41:13:52:5e:71:89:e8:9e:
         fc:c3:cb:aa:48:af:72:32:07:16:1c:ab:eb:16:1a:f9:a5:02:
         e2:3c:46:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:46:55 2025 by rpki-client