Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
File:                     C6ZznUryCYWXGQqgkoMN6pwXpwA.mft (raw, json)
Hash identifier:          apsAaB41z+N30nhUn6ReiZxQfarAnb8NXrvxkNnIh98=
Subject key identifier:   D2:36:5E:D6:EB:C4:34:C3:B6:55:39:7E:64:D5:7D:F6:53:46:E1:15
Authority key identifier: 0B:A6:73:9D:4A:F2:09:85:97:19:0A:A0:92:83:0D:EA:9C:17:A7:00
Certificate issuer:       /CN=0ba6739d4af2098597190aa092830dea9c17a700
Certificate serial:       01987CE5410E5376662D889E5539C0A6324E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
Manifest number:          0C2E
Signing time:             Wed 06 Aug 2025 01:00:55 +0000
Manifest this update:     Wed 06 Aug 2025 01:00:55 +0000
Manifest next update:     Thu 07 Aug 2025 01:00:55 +0000
Files and hashes:         1: C6ZznUryCYWXGQqgkoMN6pwXpwA.crl (hash: g6TZDRs6W3GRCW7vGwghxIuGAx3Hxluti8JD8F4svJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 01:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:e5:41:0e:53:76:66:2d:88:9e:55:39:c0:a6:32:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba6739d4af2098597190aa092830dea9c17a700
        Validity
            Not Before: Aug  6 01:00:55 2025 GMT
            Not After : Aug  7 01:00:55 2025 GMT
        Subject: CN=d2365ed6ebc434c3b655397e64d57df65346e115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:99:ab:0e:15:7b:25:58:5e:57:f8:0e:7c:70:
                    60:50:a9:86:a4:f6:f6:14:23:55:92:c2:f2:4c:2a:
                    8f:2d:1c:14:98:c7:d3:cc:4b:11:bf:88:8b:06:f7:
                    a8:9b:2d:4f:a5:72:07:c9:ce:1c:96:52:94:21:5c:
                    9c:c0:79:52:a8:0c:70:b0:3c:6e:72:b2:dd:b0:ca:
                    16:93:70:73:5b:36:cc:08:3e:f3:8b:71:d8:ca:35:
                    fc:c0:00:7a:5b:13:19:b3:c7:bd:0f:9d:31:3c:62:
                    9e:b4:49:27:25:69:0d:77:fc:b6:9d:39:49:4c:d6:
                    ad:0a:1e:54:af:cc:c5:cb:72:92:d3:23:fe:1f:77:
                    b6:96:89:c3:54:85:a5:90:40:6e:ab:b1:7a:de:e7:
                    80:22:4a:47:86:c9:ff:5e:c7:70:30:f5:f6:fe:a8:
                    e3:b0:70:9a:7b:bf:89:bb:37:3d:c8:86:b7:0d:4d:
                    8f:03:fe:52:31:4a:eb:dc:46:c2:eb:6c:fa:de:a5:
                    c1:7a:b3:57:19:2c:bf:fb:32:74:63:ad:8c:3d:2d:
                    e4:62:9c:86:46:79:02:61:02:60:13:3c:db:55:76:
                    a4:5d:83:f2:f1:d3:1e:2a:dc:0f:30:e2:ef:ad:33:
                    00:06:a1:fc:fd:84:a3:0c:7f:15:f3:97:83:44:7e:
                    a2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:36:5E:D6:EB:C4:34:C3:B6:55:39:7E:64:D5:7D:F6:53:46:E1:15
            X509v3 Authority Key Identifier:
                keyid:0B:A6:73:9D:4A:F2:09:85:97:19:0A:A0:92:83:0D:EA:9C:17:A7:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:fa:b1:22:d9:02:b6:30:b1:f7:10:3e:09:0e:68:98:7c:0f:
         d7:40:96:3d:05:c7:a0:9e:0b:a5:77:87:d3:e5:6d:b8:37:fe:
         0a:0d:25:00:cc:6b:51:5c:a0:3b:7e:39:f5:cf:af:f8:87:18:
         ea:2e:ce:c8:a9:e1:7a:9c:de:15:53:f7:df:ba:db:ba:da:87:
         a9:b7:06:9e:02:6a:80:42:40:b2:fa:07:cf:29:ba:35:8c:c9:
         86:31:89:5d:ce:b8:9d:f8:ab:8b:a1:95:0c:ac:03:30:38:0f:
         53:d1:f9:da:6f:52:b1:de:17:00:ec:ca:f9:03:72:89:4d:9c:
         7e:11:33:39:ef:20:f4:bd:fc:ce:43:2f:d3:21:61:bc:61:9a:
         9d:cc:f9:12:5e:3c:39:f5:1e:a5:de:c1:4a:f6:3f:52:1a:16:
         83:75:0c:1b:cf:9d:f9:16:74:58:6a:1e:44:26:82:1e:1d:32:
         6c:d1:da:f4:70:6f:ad:29:7f:97:c1:55:2d:28:f3:81:9f:77:
         75:e5:1a:95:cb:c9:2e:aa:19:28:e3:9b:10:45:aa:a7:e5:91:
         f4:75:2c:3e:04:5c:2e:75:b1:94:68:cf:de:58:86:d9:97:72:
         4d:ce:5e:e9:9c:8e:04:e8:ab:1c:aa:b0:1f:ed:ab:03:9b:54:
         2e:8c:1b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:58:48 2025 by rpki-client