Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
File:                     6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft (raw, json)
Hash identifier:          9eIFZdfCiAamkcf6HPHzWSsjIOEgwJFUUAF576JauXY=
Subject key identifier:   0E:A3:63:81:6C:CD:65:BA:C1:A1:14:6F:9F:2A:AA:2C:31:7B:A7:13
Authority key identifier: E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3
Certificate issuer:       /CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
Certificate serial:       01988B1000F2698CA0976331EE42FDAD2627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
Manifest number:          0CF3
Signing time:             Fri 08 Aug 2025 19:02:18 +0000
Manifest this update:     Fri 08 Aug 2025 19:02:18 +0000
Manifest next update:     Sat 09 Aug 2025 19:02:18 +0000
Files and hashes:         1: 6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl (hash: 2jO0ko/8+BE1hG1GOlyAFtavTbnBch0wIQHFyG/mRDA=)
                          2: r3X5pk5U2Z-5txOYvpcZbvrFurQ.roa (hash: 87QkeU5ku+ENNSsEiVa7il+EqGwoFRelcSgk+xC7ai4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:10:00:f2:69:8c:a0:97:63:31:ee:42:fd:ad:26:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
        Validity
            Not Before: Aug  8 19:02:18 2025 GMT
            Not After : Aug  9 19:02:18 2025 GMT
        Subject: CN=0ea363816ccd65bac1a1146f9f2aaa2c317ba713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a0:69:77:4b:9f:97:7f:ee:96:82:e8:d8:41:
                    38:08:ea:16:d6:c1:1f:65:bc:14:55:04:2b:21:b1:
                    76:97:da:97:11:6b:c9:89:58:af:bd:ba:b8:0a:7d:
                    e0:a3:71:d5:5d:14:95:78:90:53:ac:8c:33:82:48:
                    1f:f7:74:6c:eb:1f:05:d3:08:a7:02:c1:ce:37:10:
                    d9:c7:e7:28:37:4b:b0:5c:11:c8:52:72:af:9f:6c:
                    7d:11:62:a5:12:b6:6b:a7:70:cd:93:eb:01:36:5f:
                    34:68:4a:8b:fc:84:36:d4:e5:25:62:92:f8:f2:6f:
                    cc:09:77:fb:23:2e:02:c4:63:9e:b6:49:7f:99:d2:
                    3d:b1:27:a9:fc:3e:1e:80:21:65:38:69:cd:19:b7:
                    d3:ae:cc:4a:b3:93:5f:4a:22:4f:91:ff:eb:76:9e:
                    b2:de:a4:5e:a0:d8:08:bd:6d:8b:cb:c8:c4:28:97:
                    f4:0b:a6:22:19:e2:78:34:b1:95:1e:d1:3d:b4:93:
                    dd:0e:be:f9:9c:06:f2:13:51:6a:ae:57:dd:97:10:
                    26:95:47:ad:d1:c2:1f:d2:46:35:12:19:5e:d4:53:
                    36:1b:87:10:25:72:ee:a5:e6:50:82:3f:6e:2f:64:
                    f4:fc:63:d5:d3:ce:f8:0f:66:0e:2c:f1:56:4c:0b:
                    5b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A3:63:81:6C:CD:65:BA:C1:A1:14:6F:9F:2A:AA:2C:31:7B:A7:13
            X509v3 Authority Key Identifier:
                keyid:E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:c4:3c:10:0b:fa:4e:05:26:1b:f7:84:25:40:64:bc:f4:34:
         cc:eb:8f:13:c8:6c:fb:b2:00:1c:ba:79:3a:04:1a:8a:ab:dc:
         e1:01:a8:c2:97:5f:08:90:f8:4f:bc:fd:ad:ab:79:39:a4:52:
         79:9c:a0:75:d6:c3:d0:b4:9c:36:d1:bc:9b:df:45:99:69:36:
         87:f6:d5:77:e7:01:4a:46:52:5e:9f:0e:7b:81:84:ed:be:ca:
         21:52:0c:00:c6:06:b0:06:0e:f7:57:4d:31:7e:a1:c8:3c:c0:
         e4:9a:78:07:86:78:32:38:79:1a:28:62:93:6b:4f:21:6a:66:
         4d:5d:22:d2:78:48:b2:d1:ec:f7:29:aa:83:31:f6:4c:11:a7:
         89:f3:45:10:d1:60:ff:92:34:bc:25:77:9a:6e:18:d3:51:2b:
         08:80:f3:f4:bb:5a:58:6b:c3:02:56:2c:2c:c3:14:2e:e6:d9:
         3c:5b:5c:d4:6e:84:6a:f0:be:b8:6b:5a:33:67:65:fb:01:e5:
         5c:5f:c3:f4:9c:79:4e:b9:e3:93:be:80:3d:cd:64:8f:97:28:
         1f:e3:3a:7b:d8:d9:68:80:95:b2:ec:09:a8:71:73:f5:2c:09:
         f6:2d:ca:a4:df:17:c8:de:3c:73:ed:ab:23:a7:49:12:2a:da:
         05:26:dd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:44 2025 by rpki-client