Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
File:                     mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft (raw, json)
Hash identifier:          ByP9PDOZKtiep/39kXDRyIJigcIsRW2uFhUk9J4oSpM=
Subject key identifier:   21:49:78:21:00:D9:B4:A9:4D:0D:4A:4C:13:72:7D:0E:E8:64:99:C3
Authority key identifier: 98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63
Certificate issuer:       /CN=983ea291971990dc486f93812783fadd87ade863
Certificate serial:       01988167E0E96267BD62E3FC5C4DD28EBFA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
Manifest number:          09E6
Signing time:             Wed 06 Aug 2025 22:02:05 +0000
Manifest this update:     Wed 06 Aug 2025 22:02:05 +0000
Manifest next update:     Thu 07 Aug 2025 22:02:05 +0000
Files and hashes:         1: mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl (hash: 1pDsCYLUv63bcsa1r3rGyfwDX18GOgARth/8vmhvA4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:67:e0:e9:62:67:bd:62:e3:fc:5c:4d:d2:8e:bf:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983ea291971990dc486f93812783fadd87ade863
        Validity
            Not Before: Aug  6 22:02:05 2025 GMT
            Not After : Aug  7 22:02:05 2025 GMT
        Subject: CN=2149782100d9b4a94d0d4a4c13727d0ee86499c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d8:55:f8:79:82:0f:17:13:79:e2:be:bb:ab:
                    f2:89:a8:1c:82:ad:c8:a3:d1:7a:e4:7c:d6:47:66:
                    0a:cc:04:66:43:82:47:2a:09:60:86:b1:23:7c:7b:
                    ed:2a:f2:12:1d:61:5c:cc:9c:da:23:e6:1a:07:76:
                    3d:e3:85:a6:c5:a0:8a:c0:4d:58:42:aa:10:a7:62:
                    14:36:34:74:8b:15:b2:3a:23:b4:05:cf:09:63:b6:
                    9f:1e:5e:dc:79:0a:bb:9b:cd:a2:35:e6:68:01:9d:
                    66:1d:d1:cc:23:20:e5:c9:dd:7f:be:37:6e:c2:8b:
                    79:76:5e:7a:2d:dc:67:30:8b:07:bc:c9:77:c9:c6:
                    99:f8:9b:dd:0f:8f:d4:61:f4:b9:36:27:59:50:26:
                    a7:ff:ad:71:0d:a3:d9:ab:2c:eb:3f:bb:3d:23:d6:
                    f8:5d:ee:09:db:37:37:35:47:86:70:a3:f9:e1:31:
                    61:ff:36:45:77:f7:12:d4:b1:59:25:17:a2:e9:46:
                    3d:11:01:1d:25:f3:8b:92:7d:42:c1:85:44:31:6b:
                    09:13:9d:ea:84:ac:61:bb:29:f9:b5:22:9a:47:86:
                    d1:17:cf:d9:de:1c:58:cb:09:92:0f:da:93:ea:9d:
                    86:f2:96:fc:cf:39:b1:db:37:c0:b8:8f:a8:fc:af:
                    47:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:49:78:21:00:D9:B4:A9:4D:0D:4A:4C:13:72:7D:0E:E8:64:99:C3
            X509v3 Authority Key Identifier:
                keyid:98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:1f:38:78:d5:85:3d:5a:77:24:09:12:4d:6d:06:98:2b:1e:
         8d:50:bd:6e:0f:77:d5:7e:28:cf:06:32:7f:ee:bf:6f:49:3b:
         6f:e5:3e:78:ff:97:8e:15:14:14:1e:6b:66:20:70:fb:ef:fb:
         c7:df:2f:38:33:7c:a6:c5:d4:7c:40:ae:ad:33:e3:10:c2:ae:
         63:51:97:a7:d8:94:4b:5d:0e:bb:d7:4e:3f:c8:84:ee:ef:ab:
         65:f3:98:94:40:e1:9c:ac:4a:7f:28:0f:5c:4c:92:ee:be:d6:
         4c:73:dc:56:b5:e9:ff:50:c7:79:ec:7b:21:fe:2e:67:aa:f2:
         c8:04:83:b2:93:4e:f0:69:43:88:cf:86:69:2a:14:26:32:ff:
         7d:70:c7:3d:46:a3:29:ee:c2:39:28:23:f2:f4:15:44:3d:51:
         6c:65:cb:21:2c:3b:44:36:09:4c:97:dd:e4:4e:2f:3d:47:36:
         96:a0:e2:f4:0d:b5:5d:7a:42:7c:e3:6d:35:0f:44:b5:29:a0:
         7f:6b:e3:e4:b1:32:6d:70:a4:77:34:bf:e4:4e:28:2d:0c:33:
         07:f6:29:3e:d8:fa:c4:86:87:a1:73:cf:18:6e:07:6e:a6:69:
         cc:94:51:25:ce:6c:58:96:be:b2:52:5c:40:4d:4e:e2:b6:13:
         14:20:58:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZ+DpYme9YuP8XE3Sjr+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4M2VhMjkxOTcxOTkwZGM0ODZmOTM4MTI3ODNmYWRkODdh
ZGU4NjMwHhcNMjUwODA2MjIwMjA1WhcNMjUwODA3MjIwMjA1WjAzMTEwLwYDVQQD
EygyMTQ5NzgyMTAwZDliNGE5NGQwZDRhNGMxMzcyN2QwZWU4NjQ5OWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwthV+HmCDxcTeeK+u6vyiagcgq3I
o9F65HzWR2YKzARmQ4JHKglghrEjfHvtKvISHWFczJzaI+YaB3Y944WmxaCKwE1Y
QqoQp2IUNjR0ixWyOiO0Bc8JY7afHl7ceQq7m82iNeZoAZ1mHdHMIyDlyd1/vjdu
wot5dl56LdxnMIsHvMl3ycaZ+JvdD4/UYfS5NidZUCan/61xDaPZqyzrP7s9I9b4
Xe4J2zc3NUeGcKP54TFh/zZFd/cS1LFZJRei6UY9EQEdJfOLkn1CwYVEMWsJE53q
hKxhuyn5tSKaR4bRF8/Z3hxYywmSD9qT6p2G8pb8zzmx2zfAuI+o/K9HiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFJeCEA2bSpTQ1KTBNyfQ7oZJnDMB8GA1UdIwQY
MBaAFJg+opGXGZDcSG+TgSeD+t2HrehjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUQ2aWtaY1prTnhJYjVPQko0UDYzWWV0NkdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80MmU5OWMtNzRhNy00MTU1LWIyYjQt
YzZlOWUwZmQ3MDgwLzEvbUQ2aWtaY1prTnhJYjVPQko0UDYzWWV0NkdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80MmU5OWMtNzRhNy00MTU1LWIyYjQtYzZlOWUwZmQ3MDgw
LzEvbUQ2aWtaY1prTnhJYjVPQko0UDYzWWV0NkdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACh84eNWF
PVp3JAkSTW0GmCsejVC9bg931X4ozwYyf+6/b0k7b+U+eP+XjhUUFB5rZiBw++/7
x98vODN8psXUfECurTPjEMKuY1GXp9iUS10Ou9dOP8iE7u+rZfOYlEDhnKxKfygP
XEyS7r7WTHPcVrXp/1DHeex7If4uZ6ryyASDspNO8GlDiM+GaSoUJjL/fXDHPUaj
Ke7COSgj8vQVRD1RbGXLISw7RDYJTJfd5E4vPUc2lqDi9A21XXpCfONtNQ9EtSmg
f2vj5LEybXCkdzS/5E4oLQwzB/YpPtj6xIaHoXPPGG4HbqZpzJRRJc5sWJa+slJc
QE1O4rYTFCBYCw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:45:36 2025 by rpki-client