Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
File:                     P6E212Q_3A0_sdU0Z9irspm3kXE.mft (raw, json)
Hash identifier:          idHHJy6LjaJDNVJJYyVI4bJ+8D5Zs2APzgRiTJRMayY=
Subject key identifier:   5F:D5:15:65:F4:8D:21:73:8E:78:DE:97:D1:BB:63:26:98:48:A9:BA
Authority key identifier: 3F:A1:36:D7:64:3F:DC:0D:3F:B1:D5:34:67:D8:AB:B2:99:B7:91:71
Certificate issuer:       /CN=3fa136d7643fdc0d3fb1d53467d8abb299b79171
Certificate serial:       019873E1C49D4374FB7C6848EDC023C2C97A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
Manifest number:          0601
Signing time:             Mon 04 Aug 2025 07:00:32 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:32 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:32 +0000
Files and hashes:         1: P6E212Q_3A0_sdU0Z9irspm3kXE.crl (hash: xGsbMpgdUcO83Q/9P5GZLK9+AQ1KEmw2AL66r4uvh+s=)
                          2: aQLWCmdbg9aMVtpUr6kgFp-kl8g.roa (hash: MaYzTmKmtA6VMd+7uLB1yAAfoDrTIUYoMrGwKo2T4Fc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e1:c4:9d:43:74:fb:7c:68:48:ed:c0:23:c2:c9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fa136d7643fdc0d3fb1d53467d8abb299b79171
        Validity
            Not Before: Aug  4 07:00:32 2025 GMT
            Not After : Aug  5 07:00:32 2025 GMT
        Subject: CN=5fd51565f48d21738e78de97d1bb63269848a9ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e8:73:ba:42:40:e7:eb:19:d4:5e:c3:6d:ea:
                    d2:2d:58:d1:ba:f7:c9:ee:ec:94:ee:fa:1f:08:1b:
                    47:1a:d3:a0:82:66:1f:b9:82:ab:5b:74:2e:63:6f:
                    e2:0a:01:bb:44:e9:0a:0a:9f:45:e4:ef:8f:00:69:
                    94:85:b8:29:dc:ba:de:79:28:b6:18:10:86:77:d9:
                    55:a5:90:09:a4:20:80:63:de:1e:7e:90:35:33:5c:
                    4d:f1:8f:5a:c5:ec:db:92:15:54:e8:78:44:d6:55:
                    57:fa:b4:a0:e4:e6:20:82:91:17:4d:48:4d:6f:28:
                    9c:bf:88:2a:61:39:ff:61:a4:a7:ba:9f:d5:6d:23:
                    5b:8f:ac:59:99:24:b7:68:d9:d3:9c:c7:d9:1c:5a:
                    e2:05:cd:f0:c5:0a:69:6a:cf:9e:99:81:fb:84:1e:
                    ba:24:68:54:6e:4a:60:ae:72:a1:0b:8c:a1:51:8f:
                    ee:4a:7c:dc:65:ea:64:21:9e:2b:ab:ed:d8:ac:4c:
                    0e:42:48:87:03:94:74:0e:ff:15:c9:59:1a:03:65:
                    d5:ff:e0:27:99:71:fb:78:28:ac:68:02:38:e5:8e:
                    b6:4c:72:8e:8f:0a:cd:7e:e6:1e:85:15:74:95:6a:
                    de:85:07:01:33:00:0e:43:0e:51:c9:9b:43:cf:d3:
                    a3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D5:15:65:F4:8D:21:73:8E:78:DE:97:D1:BB:63:26:98:48:A9:BA
            X509v3 Authority Key Identifier:
                keyid:3F:A1:36:D7:64:3F:DC:0D:3F:B1:D5:34:67:D8:AB:B2:99:B7:91:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a9:2f:ee:61:ea:72:40:34:2c:fd:a2:ee:fd:e6:71:d9:e5:
         7f:32:01:e8:1b:db:13:70:5b:3a:13:e6:71:de:0c:ee:9b:88:
         a3:f5:d3:6b:76:d2:a3:c1:99:d7:8f:ec:42:aa:44:a5:ef:3b:
         31:76:6e:bc:06:f9:ea:f1:3f:19:cb:07:37:03:4e:83:46:68:
         99:ad:08:44:d9:15:86:fd:9c:49:fd:8e:e7:20:29:0a:d5:30:
         23:67:e1:3d:66:33:24:5c:cb:e9:53:20:cb:cf:ed:0a:57:7a:
         a1:6d:87:e9:cc:ee:2d:1a:d2:ef:d1:0f:5b:1a:9d:53:dc:95:
         a1:24:57:ab:ba:08:ef:70:e9:26:56:b1:c7:1f:cb:2d:40:80:
         aa:7e:06:d9:39:44:c0:cb:1d:28:6a:5c:a0:b5:ca:4a:d4:37:
         b5:43:fc:5b:41:85:95:52:98:24:72:1e:ce:df:ce:2b:37:78:
         63:56:17:ac:67:5c:37:c9:7a:c1:fb:7f:37:1f:85:1e:7e:d2:
         08:b6:6a:b7:1a:0d:8a:80:a1:3d:fb:bc:7a:b8:e2:57:26:33:
         84:5e:50:6b:f5:89:95:65:e3:dd:d9:77:77:49:ab:f2:a7:a5:
         03:ef:f6:f7:2f:40:37:a2:dc:22:56:1f:24:be:60:00:e6:75:
         8d:2c:30:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4cSdQ3T7fGhI7cAjwsl6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmYTEzNmQ3NjQzZmRjMGQzZmIxZDUzNDY3ZDhhYmIyOTli
NzkxNzEwHhcNMjUwODA0MDcwMDMyWhcNMjUwODA1MDcwMDMyWjAzMTEwLwYDVQQD
Eyg1ZmQ1MTU2NWY0OGQyMTczOGU3OGRlOTdkMWJiNjMyNjk4NDhhOWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuhzukJA5+sZ1F7DberSLVjRuvfJ
7uyU7vofCBtHGtOggmYfuYKrW3QuY2/iCgG7ROkKCp9F5O+PAGmUhbgp3LreeSi2
GBCGd9lVpZAJpCCAY94efpA1M1xN8Y9axezbkhVU6HhE1lVX+rSg5OYggpEXTUhN
byicv4gqYTn/YaSnup/VbSNbj6xZmSS3aNnTnMfZHFriBc3wxQppas+emYH7hB66
JGhUbkpgrnKhC4yhUY/uSnzcZepkIZ4rq+3YrEwOQkiHA5R0Dv8VyVkaA2XV/+An
mXH7eCisaAI45Y62THKOjwrNfuYehRV0lWrehQcBMwAOQw5RyZtDz9Oj5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/VFWX0jSFzjnjel9G7YyaYSKm6MB8GA1UdIwQY
MBaAFD+hNtdkP9wNP7HVNGfYq7KZt5FxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDZFMjEyUV8zQTBfc2RVMFo5aXJzcG0za1hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC82NTVkNTMtOTRjNS00YTk3LTg4YTEt
ZDI3N2E1ZjNiOWUwLzEvUDZFMjEyUV8zQTBfc2RVMFo5aXJzcG0za1hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC82NTVkNTMtOTRjNS00YTk3LTg4YTEtZDI3N2E1ZjNiOWUw
LzEvUDZFMjEyUV8zQTBfc2RVMFo5aXJzcG0za1hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMqkv7mHq
ckA0LP2i7v3mcdnlfzIB6BvbE3BbOhPmcd4M7puIo/XTa3bSo8GZ14/sQqpEpe87
MXZuvAb56vE/GcsHNwNOg0Zoma0IRNkVhv2cSf2O5yApCtUwI2fhPWYzJFzL6VMg
y8/tCld6oW2H6czuLRrS79EPWxqdU9yVoSRXq7oI73DpJlaxxx/LLUCAqn4G2TlE
wMsdKGpcoLXKStQ3tUP8W0GFlVKYJHIezt/OKzd4Y1YXrGdcN8l6wft/Nx+FHn7S
CLZqtxoNioChPfu8erjiVyYzhF5Qa/WJlWXj3dl3d0mr8qelA+/29y9AN6LcIlYf
JL5gAOZ1jSww1Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:08:33 2025 by rpki-client