Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
File:                     6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft (raw, json)
Hash identifier:          Ug92fg09Nau0kXLUwmDLVTulMOXv/ZxOeGPxCHBpwro=
Subject key identifier:   32:52:6E:E3:89:30:F6:29:96:12:79:38:E1:4A:09:8F:48:72:DF:8D
Authority key identifier: E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00
Certificate issuer:       /CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00
Certificate serial:       019873065C5451700F18A3DA40B456E3CDA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
Manifest number:          066A
Signing time:             Mon 04 Aug 2025 03:00:53 +0000
Manifest this update:     Mon 04 Aug 2025 03:00:53 +0000
Manifest next update:     Tue 05 Aug 2025 03:00:53 +0000
Files and hashes:         1: 4pppDVsEzxWcpvOQRzSfsEfJ_j4.roa (hash: QqOmQPrrioYAbFdEx9jvAv4IzYIgXNG6tw4Mnvbd0vE=)
                          2: 6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl (hash: V5DbugYJUHujNdpMGCqfueQUnc/psnQtP8GOE6+umwg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:5c:54:51:70:0f:18:a3:da:40:b4:56:e3:cd:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00
        Validity
            Not Before: Aug  4 03:00:53 2025 GMT
            Not After : Aug  5 03:00:53 2025 GMT
        Subject: CN=32526ee38930f62996127938e14a098f4872df8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dc:6b:f4:25:3b:d3:df:d9:e5:a5:74:88:72:
                    33:09:dd:80:29:33:54:d7:80:da:4c:8a:09:99:1f:
                    f8:1c:41:80:74:2d:cd:bc:d8:fb:f2:45:30:87:78:
                    9c:34:78:f7:d0:7c:be:4c:77:49:b7:27:61:1f:b9:
                    dc:f6:00:21:f6:4d:0c:2b:4a:54:18:75:04:aa:01:
                    8e:f5:75:82:56:42:8d:a7:96:61:49:43:7c:3a:07:
                    2c:8b:43:01:84:b6:b6:9d:c7:44:bc:b9:a4:73:15:
                    99:b8:fe:42:2e:22:10:88:03:ef:ad:21:63:32:3e:
                    8b:0c:31:d8:d7:bc:be:07:55:2a:18:85:1e:52:52:
                    c1:8b:9e:97:6f:cc:ae:13:86:b5:4f:34:dd:0c:ac:
                    d7:9b:d2:5a:1f:ea:5d:80:f5:d8:ee:95:da:ac:4d:
                    43:91:0e:fb:2a:38:43:d7:da:f1:57:60:df:05:b4:
                    ca:05:84:db:ee:28:85:e6:c5:e4:27:e9:f2:31:5a:
                    33:f9:7f:57:f9:20:cf:62:fb:62:61:cd:cc:38:89:
                    f0:a8:13:b1:09:2a:cf:0a:a2:65:db:5a:7d:3c:bd:
                    c4:ab:65:c2:2f:0f:ab:3b:af:c0:2a:56:9b:40:c8:
                    99:92:d2:81:d9:be:df:c4:d2:c2:63:18:67:a2:cd:
                    6d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:52:6E:E3:89:30:F6:29:96:12:79:38:E1:4A:09:8F:48:72:DF:8D
            X509v3 Authority Key Identifier:
                keyid:E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:64:3c:55:f4:33:21:f3:11:37:45:2c:73:a5:b3:80:64:38:
         ae:9d:c1:05:c1:eb:49:43:65:0b:e4:23:ab:ce:95:ec:96:7a:
         e9:31:a7:b7:86:c4:3a:d8:a1:ce:6b:85:46:9a:98:9d:e7:72:
         ff:43:ec:4f:48:a2:fb:78:52:e3:d8:70:bc:89:03:f2:28:25:
         db:db:fe:c1:db:db:dc:93:bd:86:00:30:57:5f:d3:89:95:d4:
         76:d1:a0:ee:40:78:e6:91:d2:af:d4:7b:5e:0f:0f:b8:2d:fb:
         7c:b2:d3:cf:17:dc:2f:3a:ac:fb:92:7a:c5:ef:3e:c9:0a:87:
         9a:18:b5:6c:8c:76:ca:91:3f:e8:9f:3b:8d:f6:e4:cc:ca:ce:
         30:f4:4c:3d:84:75:52:1b:eb:3b:a8:63:f4:99:61:0d:60:4c:
         48:e3:1a:ba:ae:60:a0:8d:1c:62:ed:d3:cc:d3:b8:2f:67:32:
         11:43:9b:0d:cf:19:f0:7e:07:8b:db:94:04:c3:13:87:c6:c4:
         4b:b6:73:8b:2a:24:6c:e2:91:d7:c8:cc:66:5b:b3:87:ab:68:
         03:71:17:7a:cf:e3:29:11:1c:a0:88:8c:82:59:ba:89:b4:d0:
         ca:ce:8b:dc:eb:c2:8b:e8:98:f5:7f:c0:83:87:2b:e4:91:af:
         8e:a1:ef:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:35 2025 by rpki-client