Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
File:                     C6yCgEcArTZTi_hvNMBz6XFDDaU.mft (raw, json)
Hash identifier:          ZggtIOqlU7pQYpVIvyM+YWNg7SBdhoWMbPfYHViF2Mc=
Subject key identifier:   09:5F:8B:C1:81:E2:0C:CC:FD:69:EE:67:71:C9:89:98:05:60:F5:3D
Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Certificate issuer:       /CN=0bac82804700ad36538bf86f34c073e971430da5
Certificate serial:       01987ABFCD64D44BE376090D7808E11662AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
Manifest number:          1628
Signing time:             Tue 05 Aug 2025 15:00:46 +0000
Manifest this update:     Tue 05 Aug 2025 15:00:46 +0000
Manifest next update:     Wed 06 Aug 2025 15:00:46 +0000
Files and hashes:         1: 1Rd2o3xUjPYq6-ROGbojsnIAO7o.roa (hash: cJibfgam1opzds5Qh9r7Y5ffttnidwSOVT40ptzFnqs=)
                          2: 3BgoLFWZ9YgbC6oPkKTi3o_J_gQ.roa (hash: S8E8XfDmes95rq1PbjLgkDvVZJpWeDUS/8l576aU10U=)
                          3: 7bJ_SXsvQs5jd90zxR_xlvABeGo.roa (hash: m0ZQ2Y2DbXV8jV6KvTNs6fUZ/bk3yiFcpgd8GYS9O7Q=)
                          4: C6yCgEcArTZTi_hvNMBz6XFDDaU.crl (hash: Miq5tMQq1FJ32Hd6ipLG2B007FxmDvfL+xh3sCCLwsw=)
                          5: EJIUsUOKvSLerwNQFS-Out5zZuM.roa (hash: D433E6UiMyX9KdcjAcomX19JFn+CfTOeAqT8DsBwSkY=)
                          6: IYymNdWawqstgCP4XTcQ0LRxyO4.roa (hash: zZeH4Zhf/0r9N1702in9DCWq7U55L0ULISwTrHj2H68=)
                          7: L1Bz6qAa7Tw2r0koEROI1LNkc8U.roa (hash: DocEMWhWVMmnhBegXTSWZpGGhsBAl4jcHIRujEDNT44=)
                          8: b_Dm6TuKr2O9F9em_a6cktDchPg.roa (hash: ehArjKJWDMxsQnB7k5Ijrml5MK5YWi9DCvAWzUWkArc=)
                          9: vdMwrE1WRBo6tPAM0c8ANEH4m7w.roa (hash: aAOimEwL2ZyXBynFWKnhjaaS/YCd7rqkh4wnbJ4qboQ=)
                          10: xkRsFChgw8FgF1z4ealSBYfjSiw.roa (hash: c2XTA6ndUBR9DMhPW66OSPqlDjn7RwF/yQC+0Ynbm/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:bf:cd:64:d4:4b:e3:76:09:0d:78:08:e1:16:62:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5
        Validity
            Not Before: Aug  5 15:00:46 2025 GMT
            Not After : Aug  6 15:00:46 2025 GMT
        Subject: CN=095f8bc181e20cccfd69ee6771c989980560f53d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:e2:6e:42:24:a9:d4:e9:42:bf:74:10:a9:
                    ba:c9:b8:45:e6:48:41:78:b9:fe:f0:4c:e6:c4:3d:
                    72:52:1a:b6:5b:4a:97:a9:d9:da:e0:c6:24:a2:70:
                    dc:38:b7:d8:bf:31:b1:d9:f4:3e:ff:46:9f:9b:9a:
                    4b:0c:2a:a9:54:31:b9:56:85:3b:22:5c:dc:1d:bf:
                    b3:e8:0d:1a:f7:99:81:78:9c:ee:09:32:06:26:ee:
                    b7:3d:84:d4:18:d1:1f:dc:e0:01:c0:97:45:3f:2d:
                    97:37:e0:b1:2a:56:43:d7:e0:44:1e:a1:15:fa:aa:
                    60:1c:8b:4a:03:00:19:82:f2:7e:19:02:de:d1:3b:
                    43:c4:ad:28:4f:26:f0:5c:b7:20:5f:0d:08:4c:0c:
                    13:bf:4d:ab:95:06:b4:48:1e:d7:ee:d0:da:58:00:
                    98:63:e7:8a:18:fb:56:1b:ae:3e:d1:fb:ec:c6:9d:
                    29:dd:f2:f9:72:49:12:e2:b4:1c:fa:21:68:91:82:
                    a4:a1:1c:df:d0:4f:f7:c7:e8:f8:20:2e:1b:d6:30:
                    c3:8a:41:33:2b:0a:95:b6:f5:1e:33:a2:4c:8c:17:
                    22:2d:34:f6:fc:35:9e:08:fd:18:5e:9e:e5:60:bc:
                    48:54:e3:83:05:07:c0:9b:53:a5:3f:78:11:66:ec:
                    ba:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5F:8B:C1:81:E2:0C:CC:FD:69:EE:67:71:C9:89:98:05:60:F5:3D
            X509v3 Authority Key Identifier:
                keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:26:5b:cb:3d:80:fb:4a:0e:61:27:45:72:0f:3f:87:1a:51:
         2a:0f:c7:f0:90:cf:8f:0d:06:0f:e9:ba:1b:21:bb:81:dc:a3:
         4c:cc:33:81:6a:ba:1b:b2:01:3f:ce:bb:26:2c:df:40:ff:03:
         bc:a6:e9:35:a1:41:5c:cf:09:05:ad:70:f9:f3:3a:d4:dc:11:
         22:4a:97:7e:d0:4a:69:39:91:75:fb:73:9c:f6:01:f0:49:91:
         78:8e:08:58:68:cc:ee:9d:48:3b:72:40:dc:4e:49:4f:28:8c:
         81:21:a2:a0:eb:20:eb:aa:b7:f5:ef:40:5f:de:1b:9b:50:30:
         01:f7:a6:d9:93:b9:f5:86:09:45:07:ee:5f:7b:ba:97:a1:40:
         8c:c8:25:46:cb:51:78:cf:65:03:15:7a:a7:f0:b6:ba:75:af:
         ac:b5:13:c1:cb:1f:9e:8d:e6:dd:2c:84:3e:8e:a8:4a:10:ff:
         58:15:f7:5a:d8:30:74:1a:b9:99:af:db:18:19:e8:f2:73:9d:
         28:fe:9b:fe:82:72:be:55:99:ca:45:77:03:1f:c3:ca:91:0b:
         a3:90:4e:1f:fb:1e:c9:d2:26:37:00:83:d6:dd:ec:b6:f5:62:
         b5:c7:4b:b5:c1:db:59:c0:5c:1d:42:6c:6d:82:03:38:cd:ed:
         94:7d:08:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:07:49 2025 by rpki-client