Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
File:                     6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft (raw, json)
Hash identifier:          xR/q4NFlFnvLninmgX5brjTHwTQllRskcpdWgyeaj4U=
Subject key identifier:   D0:EA:07:EC:20:E9:9A:76:B8:D7:F6:81:EA:75:5B:A8:D4:68:6C:B0
Authority key identifier: E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E
Certificate issuer:       /CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
Certificate serial:       019789C7207171C764394CF0CC3126FE5B39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
Manifest number:          159E
Signing time:             Thu 19 Jun 2025 20:00:17 +0000
Manifest this update:     Thu 19 Jun 2025 20:00:17 +0000
Manifest next update:     Fri 20 Jun 2025 20:00:17 +0000
Files and hashes:         1: 6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl (hash: peBgGipPSiJsMbgoVy8hWeJof1upaaTw6+b7niNkugI=)
                          2: CEi11oDah-Xj3CSyKJ8iomoOYoM.roa (hash: ez/wVHjqJzETmetoc7ih07UD25PAbuMs0U3dxKCFOXE=)
                          3: h_PujoF1idQej6mkI673sMCS4CI.roa (hash: gJAR6zsyEp9IfdpTVmdU+2Uly1ejVeeDkLflgAL2GD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 19:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:89:c7:20:71:71:c7:64:39:4c:f0:cc:31:26:fe:5b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
        Validity
            Not Before: Jun 19 20:00:17 2025 GMT
            Not After : Jun 20 20:00:17 2025 GMT
        Subject: CN=d0ea07ec20e99a76b8d7f681ea755ba8d4686cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:02:5b:b5:c5:7b:e2:f2:ed:05:bb:6d:8a:5f:
                    8e:b8:96:f5:c4:27:b3:ea:98:7c:bf:e2:27:99:82:
                    cc:7e:6b:78:90:fb:6d:88:70:5e:4a:2c:2c:9a:84:
                    3f:25:8b:ad:09:73:53:43:58:1e:e9:16:19:d4:31:
                    a9:73:10:25:39:8a:e8:2c:62:e6:aa:b6:41:76:8b:
                    44:f5:6c:77:cb:1d:2e:09:a9:21:89:3f:00:84:05:
                    52:3a:87:53:7d:99:f6:f5:a8:06:b0:1e:9e:51:cc:
                    85:b8:26:1e:a6:c6:fd:d2:cc:57:c7:93:02:4d:23:
                    ca:3b:a0:29:80:ae:59:05:d5:67:35:38:65:93:6c:
                    18:09:b7:cf:2d:c7:e5:6e:78:9f:af:63:c9:19:92:
                    a8:28:f8:98:cc:0c:90:82:b9:37:b1:9f:49:a3:48:
                    08:d6:c1:3a:bd:75:3f:9c:6f:a3:d9:1b:c1:98:8c:
                    b4:0c:0b:3b:49:f1:4d:fa:2f:e0:e7:ad:32:d5:d4:
                    b2:28:84:3a:a6:34:60:51:d4:17:cc:7d:4a:6b:39:
                    a5:a5:aa:d6:6a:88:7e:94:35:5d:80:d7:13:84:13:
                    92:0c:02:98:c0:d1:7f:d8:0c:dd:46:7b:84:5a:53:
                    8e:23:10:80:bc:a2:c6:f0:7b:7f:56:76:24:8b:4b:
                    17:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EA:07:EC:20:E9:9A:76:B8:D7:F6:81:EA:75:5B:A8:D4:68:6C:B0
            X509v3 Authority Key Identifier:
                keyid:E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:d7:7b:ab:77:e0:6c:1b:1d:de:18:62:bd:c2:d1:cb:55:4c:
         61:67:07:7b:24:53:11:1c:99:bb:5f:69:02:66:23:2d:bf:41:
         31:bd:c4:f0:17:7c:6c:56:14:49:a8:23:e1:06:ea:72:ba:22:
         9b:02:e8:67:95:9a:0d:60:de:6c:a8:14:1a:7f:73:47:32:28:
         3e:d8:16:58:70:28:bc:34:c3:f2:17:0d:ef:00:06:62:ce:9e:
         df:b0:df:cc:68:77:df:48:74:b3:bd:e3:a7:c6:1f:6f:e0:61:
         bc:6c:0b:be:98:67:3a:be:11:b8:cd:65:5b:7b:e0:23:88:bf:
         96:07:3e:72:5f:cc:36:dd:41:03:9b:31:bc:db:c4:e8:3f:0b:
         f3:b7:1e:d6:42:30:d3:49:5d:6c:84:e0:f7:e2:57:dc:38:5b:
         17:80:a4:f8:31:1a:1a:2e:f8:e6:40:1e:a2:1b:f5:e9:b1:85:
         69:4d:b9:f7:bf:03:d2:93:5e:f7:60:68:8b:f8:3c:10:30:73:
         0e:76:21:81:31:7c:2c:50:a1:d4:b4:68:48:e1:8d:99:f8:46:
         c0:ce:bd:ea:38:8c:45:b4:56:35:8e:c2:55:da:ea:4c:6e:f2:
         7e:38:6e:44:9f:9f:39:51:a2:ab:d7:61:91:18:24:f9:f0:96:
         4a:93:da:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 05:51:06 2025 by rpki-client