Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft
File:                     MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft (raw, json)
Hash identifier:          1nkAQXkd1ZLK+miNRemympgiihfeEeVTlZyL04gumj4=
Subject key identifier:   E3:22:B7:8B:E5:ED:14:62:05:1F:D1:DB:DD:58:4D:92:7F:8A:76:0D
Authority key identifier: 32:50:7F:9E:07:8B:E8:99:32:E9:1B:23:AC:F8:82:AB:46:7C:6A:A7
Certificate issuer:       /CN=32507f9e078be89932e91b23acf882ab467c6aa7
Certificate serial:       01987DF87CBCF36923E490E8436C8CBEE514
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft
Manifest number:          0B91
Signing time:             Wed 06 Aug 2025 06:01:33 +0000
Manifest this update:     Wed 06 Aug 2025 06:01:33 +0000
Manifest next update:     Thu 07 Aug 2025 06:01:33 +0000
Files and hashes:         1: MlB_ngeL6Jky6RsjrPiCq0Z8aqc.crl (hash: peVzMCYv4EaGA92wrVT3wmdlHaBnVZF4i9BgCHnu9TQ=)
                          2: QfrRCybDqFm7xRQ9KjUz6BIzKE0.roa (hash: YrxsXgfls6BVbz+S7KqunX1/zH0o4Orz7g8fkYHg2uk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:f8:7c:bc:f3:69:23:e4:90:e8:43:6c:8c:be:e5:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32507f9e078be89932e91b23acf882ab467c6aa7
        Validity
            Not Before: Aug  6 06:01:33 2025 GMT
            Not After : Aug  7 06:01:33 2025 GMT
        Subject: CN=e322b78be5ed1462051fd1dbdd584d927f8a760d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c5:f3:ce:68:3c:ee:70:cc:23:6c:fc:47:f8:
                    6d:53:4d:3b:a1:b7:82:be:f3:ed:4a:b8:e6:a1:85:
                    0a:33:d7:09:ab:51:a8:cb:68:fa:da:18:89:7b:1d:
                    5c:89:33:a7:53:14:85:b1:0b:8b:7c:e3:be:33:fb:
                    9f:12:83:fb:08:ed:33:3a:25:57:f4:3a:79:45:c7:
                    2e:4c:16:18:62:99:60:52:a0:76:bd:f4:bd:c2:2f:
                    ac:bd:89:06:bf:0c:94:d4:5f:01:fb:0a:c9:24:86:
                    57:bd:16:62:e1:59:8c:c3:33:29:ed:ee:9a:26:64:
                    fc:bf:0e:54:40:10:2d:b2:03:54:7c:fe:a9:4b:b4:
                    e3:e7:78:df:16:e4:bc:ed:75:86:a9:97:23:7f:23:
                    0a:ff:16:f2:09:fc:ff:7e:db:03:58:1c:63:37:98:
                    51:a2:13:23:c7:5d:ec:b0:45:ad:ed:00:9c:d3:3f:
                    c3:65:69:46:a6:8c:fe:ff:df:b3:94:97:65:bb:b7:
                    87:e9:43:c6:a0:58:66:12:10:5d:84:a8:b1:28:6e:
                    77:97:f7:72:b4:f1:1f:c8:69:5a:6a:a2:0a:6e:d6:
                    c2:06:8f:2c:3b:f5:31:e1:68:e4:f1:f5:c6:2d:28:
                    73:ba:54:a6:07:92:28:a2:3e:64:69:0e:99:04:41:
                    5a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:22:B7:8B:E5:ED:14:62:05:1F:D1:DB:DD:58:4D:92:7F:8A:76:0D
            X509v3 Authority Key Identifier:
                keyid:32:50:7F:9E:07:8B:E8:99:32:E9:1B:23:AC:F8:82:AB:46:7C:6A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:86:6f:07:d6:96:ef:9c:db:82:07:b7:fc:98:e0:b4:0a:80:
         76:ce:df:9e:9f:e1:88:7f:aa:0b:a2:20:d9:d9:b8:60:d9:d1:
         84:d9:d4:64:3b:d3:6e:d9:ba:7f:2a:aa:f1:c0:cb:8c:e6:f2:
         4d:b0:10:32:cd:bd:91:6d:c9:ae:3f:e3:a6:1a:56:a8:87:8d:
         c7:88:a1:e2:cd:e4:8d:b9:c7:99:d4:52:04:4c:85:c1:f6:99:
         57:ad:84:2e:0f:63:62:46:03:49:1e:45:58:74:3a:e8:a4:73:
         11:4f:f6:3a:dc:a2:90:71:b7:67:3e:d1:80:62:8d:05:7f:19:
         ab:e2:c6:78:a9:45:75:e0:38:ad:34:61:74:86:26:8d:f9:f5:
         76:7e:2f:83:8d:b8:8b:71:14:6f:ac:0c:39:ed:d1:47:b8:2f:
         36:24:64:7b:d5:fc:22:1d:8e:57:4f:8c:6b:10:f7:6f:a0:26:
         84:52:8b:f2:98:bf:cc:73:69:3e:e2:3b:08:c7:99:c8:29:6d:
         bc:e5:f0:4f:46:61:4e:76:2a:a5:90:b2:2c:d9:43:9d:d4:e7:
         d5:dc:fe:6f:85:8a:a4:5f:33:f3:8d:28:64:7f:92:53:e3:cb:
         5a:94:77:e2:d5:aa:d1:a4:44:d1:74:04:12:1a:82:35:75:1c:
         ad:75:e3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:47:00 2025 by rpki-client