Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft
File:                     6B4yXNISZiXGbUadtk5O-aqw3GM.mft (raw, json)
Hash identifier:          EoeYSs+DCcTAk2+NJ6nouQiVlCC9Zt0GBY+y3OEwUss=
Subject key identifier:   D2:66:7F:A7:0D:46:D2:5D:E3:B8:5C:A9:48:BF:1E:6C:BC:53:C7:89
Authority key identifier: E8:1E:32:5C:D2:12:66:25:C6:6D:46:9D:B6:4E:4E:F9:AA:B0:DC:63
Certificate issuer:       /CN=e81e325cd2126625c66d469db64e4ef9aab0dc63
Certificate serial:       01987418B6C410EA74F1F64A907A2EE846A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft
Manifest number:          0D78
Signing time:             Mon 04 Aug 2025 08:00:33 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:33 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:33 +0000
Files and hashes:         1: 6B4yXNISZiXGbUadtk5O-aqw3GM.crl (hash: Ogx56n7vaIkP7IaYZqKOhCIHmQ1OYB3DlYjnon+KR+w=)
                          2: guRa0ry_XeErXAXDimQX6nD8r-o.roa (hash: HkTFHVv5bF3CwAvh/UV6s5H3UbyzToqbz92TpMOY9SE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:b6:c4:10:ea:74:f1:f6:4a:90:7a:2e:e8:46:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81e325cd2126625c66d469db64e4ef9aab0dc63
        Validity
            Not Before: Aug  4 08:00:33 2025 GMT
            Not After : Aug  5 08:00:33 2025 GMT
        Subject: CN=d2667fa70d46d25de3b85ca948bf1e6cbc53c789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0b:49:41:58:62:e8:62:4d:87:6d:ba:15:de:
                    12:8e:fd:0e:36:3b:97:25:e5:2d:d4:1c:ce:2b:d4:
                    c5:1b:68:db:d8:83:23:a1:d7:dd:88:4e:53:7c:a7:
                    9c:1b:14:11:09:93:23:67:73:d3:0c:c0:bd:66:2f:
                    d9:a9:f6:52:38:6a:b2:94:6d:84:c7:3a:18:ee:a8:
                    34:23:1e:6e:e2:23:5c:6b:36:b7:ec:e4:6e:66:c0:
                    3e:46:f1:f2:33:3d:ab:09:15:2c:2f:f2:5e:8c:b4:
                    89:b6:46:f2:06:b5:c9:c2:e5:4f:cf:0b:97:a0:ee:
                    2e:8f:82:d5:7f:b1:8a:05:b9:84:98:1b:d7:4a:e6:
                    8b:92:0d:cc:f2:d4:ce:3a:06:7d:a2:2c:29:2f:c5:
                    1c:d1:57:9d:2f:08:9c:35:3f:07:f4:c9:13:42:a9:
                    90:40:5b:30:71:0f:57:79:e4:f9:71:b9:47:b7:65:
                    48:8c:a2:9d:aa:b5:ed:92:4f:71:60:68:9d:a0:51:
                    85:e7:35:79:75:38:cc:62:cb:65:47:ff:5a:51:c6:
                    3a:6d:45:f0:2c:0f:ba:3a:2a:0a:ab:4d:23:3a:8f:
                    2a:25:4f:1e:c4:f6:be:a3:79:a4:2d:3c:82:72:63:
                    8d:e4:d9:96:77:60:a7:0e:64:91:9f:bf:82:c5:ad:
                    f2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:66:7F:A7:0D:46:D2:5D:E3:B8:5C:A9:48:BF:1E:6C:BC:53:C7:89
            X509v3 Authority Key Identifier:
                keyid:E8:1E:32:5C:D2:12:66:25:C6:6D:46:9D:B6:4E:4E:F9:AA:B0:DC:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:23:99:09:43:4e:48:fe:a4:0a:32:d2:5f:90:8d:08:9b:1e:
         8f:62:fe:2a:da:01:fa:9d:a1:27:3a:7b:4b:0d:a7:3e:d6:1e:
         22:54:8d:6c:91:5f:9f:64:a1:2c:b4:cd:a1:d1:96:a3:e7:ef:
         9c:6f:a8:5e:79:29:e2:13:0d:a5:5f:6c:6f:f5:9c:38:01:05:
         1c:4b:6c:9f:7e:f2:30:8c:cc:c0:b2:26:99:bb:03:5e:1e:0e:
         aa:12:d8:f1:0a:68:f2:48:e7:03:a4:c6:76:13:54:ff:16:b5:
         fe:4d:26:0b:1c:4a:f3:0f:a4:31:29:2b:1d:6f:8f:2c:c5:23:
         d1:56:55:cf:3f:5f:90:4c:55:ba:0c:02:e9:12:30:45:f4:57:
         20:22:a2:57:97:3c:3b:67:76:18:c5:f6:b8:d4:5d:a4:85:65:
         09:58:45:e0:17:cc:f6:e5:2d:29:21:f6:d8:67:a8:3b:6c:92:
         47:94:69:fd:f1:97:3c:9e:31:63:8c:a2:f5:3b:d1:1d:4a:5b:
         81:d9:b7:60:f1:ed:5e:ec:64:1f:f7:bf:d7:6f:0c:39:a2:f1:
         0e:9b:35:88:80:1b:33:a7:9d:eb:3c:ab:4b:48:45:6d:78:15:
         c1:79:fa:89:67:ad:08:d4:5a:5f:58:b8:c1:aa:8c:65:38:14:
         a5:23:9c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:06 2025 by rpki-client