Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.mft
File:                     6RWHvbAFQCxqRx-yQ3WyJtoticU.mft (raw, json)
Hash identifier:          PJHptpRG+s/vKZe2xRas+4kfNzQ0eRq1EK5KKT0dM+A=
Subject key identifier:   29:BB:CC:AB:E6:1F:34:3F:92:2A:7A:CE:CF:3C:5D:6F:14:E2:11:DF
Authority key identifier: E9:15:87:BD:B0:05:40:2C:6A:47:1F:B2:43:75:B2:26:DA:2D:89:C5
Certificate issuer:       /CN=e91587bdb005402c6a471fb24375b226da2d89c5
Certificate serial:       01988A331FC7C6B870D74834B1F23113B1C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6RWHvbAFQCxqRx-yQ3WyJtoticU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.mft
Manifest number:          D5
Signing time:             Fri 08 Aug 2025 15:01:02 +0000
Manifest this update:     Fri 08 Aug 2025 15:01:02 +0000
Manifest next update:     Sat 09 Aug 2025 15:01:02 +0000
Files and hashes:         1: 6RWHvbAFQCxqRx-yQ3WyJtoticU.crl (hash: nI7luCSFmmarMoU/KCmXbcDfma9U5I4cwj8yrMzBg/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6RWHvbAFQCxqRx-yQ3WyJtoticU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 15:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:33:1f:c7:c6:b8:70:d7:48:34:b1:f2:31:13:b1:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e91587bdb005402c6a471fb24375b226da2d89c5
        Validity
            Not Before: Aug  8 15:01:02 2025 GMT
            Not After : Aug  9 15:01:02 2025 GMT
        Subject: CN=29bbccabe61f343f922a7acecf3c5d6f14e211df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:94:45:32:7c:56:ce:a8:50:e6:3c:3a:a1:ce:
                    c6:a8:2a:ba:6b:ec:e4:9d:c4:af:49:e9:52:25:20:
                    37:a2:46:6f:01:7a:ad:91:5e:e6:cd:08:26:00:12:
                    8f:c8:d9:39:c4:70:83:ee:9f:ce:d4:de:b7:e0:9a:
                    c6:3d:c3:65:8f:13:34:70:a2:cd:be:3d:c4:91:80:
                    f4:df:1e:fa:f2:d1:eb:86:e8:4f:e1:cd:c9:e8:50:
                    9f:d8:ec:c5:1c:5f:d3:44:41:bc:8e:72:42:13:17:
                    4a:dc:c1:c9:8d:22:14:0b:ea:55:81:e7:14:84:47:
                    9c:e0:f7:4a:bd:d7:13:64:ca:4e:b2:72:38:a7:5d:
                    6d:fd:32:c1:91:e5:b6:c2:8f:f0:ad:45:c0:6e:00:
                    2e:1c:5c:d1:b8:0c:c4:b5:53:d8:17:35:be:42:ac:
                    4b:bc:94:54:c2:13:d9:79:a7:c7:65:db:c0:c0:1f:
                    62:fb:3f:40:1e:d8:15:e2:53:03:23:4f:6a:1d:1f:
                    e2:96:09:b8:1e:a0:c9:61:3c:d9:46:07:54:8b:f4:
                    31:59:20:30:64:78:38:25:2e:1a:3f:4f:ad:f8:4e:
                    25:9e:ed:61:8e:a7:a5:26:01:dd:0e:a1:5c:b1:e0:
                    0e:19:e1:89:a8:96:52:5c:71:67:29:cd:16:63:6b:
                    7a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BB:CC:AB:E6:1F:34:3F:92:2A:7A:CE:CF:3C:5D:6F:14:E2:11:DF
            X509v3 Authority Key Identifier:
                keyid:E9:15:87:BD:B0:05:40:2C:6A:47:1F:B2:43:75:B2:26:DA:2D:89:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RWHvbAFQCxqRx-yQ3WyJtoticU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:86:45:65:62:c0:41:6f:8f:f0:a0:c7:1c:d1:51:a1:50:ca:
         7b:f9:9e:ed:6a:c0:9a:e3:7f:88:8c:d4:09:af:e4:0a:84:2b:
         2e:72:89:9a:65:f0:e4:a3:b4:f6:47:97:b0:fe:07:0f:56:3a:
         a0:1f:a2:a5:17:b7:cb:de:36:bf:c2:5b:5b:9a:0b:ad:c4:e3:
         53:4f:cb:13:56:a2:9e:a6:ca:c1:b8:e1:bc:55:32:59:69:e1:
         54:9c:a8:e1:d3:a2:94:6f:d7:22:46:e6:e3:f1:8d:d2:4c:0c:
         02:64:34:00:e5:ee:1a:d7:81:1a:f1:f0:5e:e3:93:e7:7e:5a:
         2e:1a:b2:41:ec:c5:74:4e:9e:ff:75:f2:49:d2:12:32:70:0b:
         2a:b4:f5:6a:da:8a:b9:ff:bb:ce:7e:79:e1:09:28:f8:49:59:
         c0:1b:8d:14:1c:2e:8e:44:e9:91:e5:df:3b:53:36:9a:ff:ae:
         88:0a:f0:75:03:c1:64:e7:54:1c:f2:86:a9:e9:53:86:92:a8:
         e6:7d:a8:c6:e7:7c:ae:ea:7c:4a:d9:25:c0:53:32:2d:16:00:
         aa:ed:6b:aa:ff:2e:03:43:6c:5a:cd:20:85:61:fe:5e:f4:63:
         a6:59:3a:b8:fc:3d:d8:96:26:91:48:84:7c:3f:08:70:4e:de:
         f8:58:3a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:09:06 2025 by rpki-client