Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft
File:                     1l2axr8fKjjiwXKFDu9wda686Ig.mft (raw, json)
Hash identifier:          HimQdOHaehghmPaYzWj2LUpjBB6VFdgw18ixneBqu18=
Subject key identifier:   E6:65:1E:21:96:80:2D:1C:1A:1F:C2:C0:7D:64:F8:60:ED:E2:B1:F4
Authority key identifier: D6:5D:9A:C6:BF:1F:2A:38:E2:C1:72:85:0E:EF:70:75:AE:BC:E8:88
Certificate issuer:       /CN=d65d9ac6bf1f2a38e2c172850eef7075aebce888
Certificate serial:       019884313CB545DB54828BFB35ED7CDC69D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft
Manifest number:          130A
Signing time:             Thu 07 Aug 2025 11:01:15 +0000
Manifest this update:     Thu 07 Aug 2025 11:01:15 +0000
Manifest next update:     Fri 08 Aug 2025 11:01:15 +0000
Files and hashes:         1: 1l2axr8fKjjiwXKFDu9wda686Ig.crl (hash: vWxfCSMFm0WnCx7tER0LpGU/rJJbFp3Iz/uBnYRgUxw=)
                          2: QajEwkbx04DeU-__NIG_To3nAd4.roa (hash: DL3wmR5aQwUYr9WHU8u6HM9lbpHPvXLenfBtN39yssQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:84:31:3c:b5:45:db:54:82:8b:fb:35:ed:7c:dc:69:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65d9ac6bf1f2a38e2c172850eef7075aebce888
        Validity
            Not Before: Aug  7 11:01:15 2025 GMT
            Not After : Aug  8 11:01:15 2025 GMT
        Subject: CN=e6651e2196802d1c1a1fc2c07d64f860ede2b1f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c0:f6:24:97:bc:08:ca:49:84:67:6e:63:ca:
                    cc:0a:3f:29:16:ee:4e:ce:c2:5a:c8:c9:c7:31:b9:
                    08:be:87:d9:32:5d:c3:1c:28:15:c8:83:d6:52:0a:
                    66:30:0d:73:d2:ff:54:92:48:f6:62:63:97:e7:f9:
                    2e:f7:e5:c3:18:ac:2f:3d:07:a2:7d:d1:74:56:e2:
                    c7:3b:0c:ff:ba:d7:4b:bb:bf:d1:f2:04:1c:4f:21:
                    e7:ac:b6:f7:4a:cf:63:84:06:ab:a6:27:bf:70:a5:
                    13:98:73:7b:e8:dc:0f:83:cb:3b:09:8e:d3:91:a4:
                    c6:ea:34:e6:40:33:3a:df:a6:16:a6:57:22:e0:03:
                    a1:37:e6:8e:f6:fc:dd:4b:c3:84:3e:67:e8:a7:ce:
                    1a:a5:59:a7:de:20:6b:3d:01:c7:ff:de:0c:dc:36:
                    0b:53:f1:d1:bb:6b:61:b5:a9:ba:6b:a7:a2:2d:73:
                    58:e1:00:84:d7:ff:54:d1:03:a4:41:0f:72:87:be:
                    a3:a8:d1:8e:b9:24:7b:f8:13:74:86:09:ae:42:7f:
                    05:c7:ca:44:ac:cf:08:d3:e4:e1:44:58:63:9b:ea:
                    38:88:5e:4a:c4:5b:b7:77:f2:e2:34:95:1f:f2:fe:
                    8d:cd:11:9f:3b:a2:13:0f:72:fc:64:a5:53:92:ab:
                    42:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:65:1E:21:96:80:2D:1C:1A:1F:C2:C0:7D:64:F8:60:ED:E2:B1:F4
            X509v3 Authority Key Identifier:
                keyid:D6:5D:9A:C6:BF:1F:2A:38:E2:C1:72:85:0E:EF:70:75:AE:BC:E8:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:0d:d6:f1:a4:fa:4d:d2:b8:64:05:7c:b8:77:38:f6:d5:ff:
         96:f6:dd:51:44:f5:4c:e3:61:d7:2e:88:a2:65:73:d9:2a:87:
         7c:00:74:18:ad:26:6a:13:01:ee:05:b7:0c:68:8d:f5:4a:d7:
         fb:39:38:99:c9:09:a8:a4:a7:9f:82:b8:48:87:3c:13:b8:40:
         14:6f:5c:39:1d:27:a8:dd:7c:f1:3e:1a:13:b9:d1:ad:ed:42:
         8e:c7:b3:a9:ec:b8:97:b9:e7:f3:96:79:45:f7:ea:6c:2f:18:
         45:58:cc:76:3e:3f:21:e2:a0:f4:8d:27:58:80:cf:5e:ca:c3:
         51:01:da:4a:8e:32:f7:28:ab:26:f1:50:ec:e4:60:71:f0:53:
         d9:ef:09:f0:1b:4f:72:58:2e:55:09:a8:32:62:53:1c:2d:16:
         a7:2b:87:5b:4f:1e:5b:01:a2:7b:a9:ea:8b:90:03:f8:17:6b:
         e4:fc:d1:1e:7e:65:50:5f:12:97:b9:a5:13:bf:05:c3:61:f3:
         1d:14:28:e1:00:e4:52:4d:2b:ee:c9:8a:94:7a:96:40:ce:9c:
         0e:b9:fd:cf:67:67:3b:9d:eb:14:4c:f4:c3:d9:1d:90:bd:77:
         92:82:cc:53:51:1b:f5:ea:1f:d0:20:35:c5:41:9a:e1:98:f8:
         e4:fa:d1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:44:25 2025 by rpki-client