Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
File:                     9WFTxQuIFb0o37sA4j5vJjIDFy4.mft (raw, json)
Hash identifier:          Jh9mw2HY5UPrVH+A4nxII+pIY9Ye2SmvBzFkBJyOllw=
Subject key identifier:   4B:CC:2B:45:19:52:D5:41:96:5B:5D:BC:93:3D:BA:3B:B9:37:6C:3F
Authority key identifier: F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
Certificate issuer:       /CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Certificate serial:       01988BEABC5D6BA5C4F7C6E1FE8178319E12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
Manifest number:          0B06
Signing time:             Fri 08 Aug 2025 23:01:13 +0000
Manifest this update:     Fri 08 Aug 2025 23:01:13 +0000
Manifest next update:     Sat 09 Aug 2025 23:01:13 +0000
Files and hashes:         1: 9WFTxQuIFb0o37sA4j5vJjIDFy4.crl (hash: 65NhBH7WSX9jeLnN8yVJZK9rkArZN1htKfuWFxQvI0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:ea:bc:5d:6b:a5:c4:f7:c6:e1:fe:81:78:31:9e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56153c50b8815bd28dfbb00e23e6f263203172e
        Validity
            Not Before: Aug  8 23:01:13 2025 GMT
            Not After : Aug  9 23:01:13 2025 GMT
        Subject: CN=4bcc2b451952d541965b5dbc933dba3bb9376c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dc:00:61:c5:b6:61:6d:78:25:b1:d2:86:83:
                    df:b8:a3:c4:d8:f2:52:0c:9c:0d:8a:bf:02:79:27:
                    2c:6c:0a:59:de:e6:bf:a9:6b:9f:46:a3:53:e5:78:
                    49:f4:3f:8c:ee:7d:b9:df:57:fb:4f:be:9f:18:0b:
                    0a:bf:81:96:ed:0b:f6:5b:ee:4c:73:0d:e6:c3:7f:
                    da:cd:b4:7d:80:25:f9:1f:21:5a:9a:ed:81:d7:98:
                    f8:c7:d1:d7:87:77:27:45:6c:a7:f4:01:7a:f2:9d:
                    42:62:4e:52:75:86:3c:5b:c9:6e:b2:f9:21:35:5c:
                    13:73:05:83:2d:c8:ba:bb:ef:78:a0:39:6f:42:62:
                    7d:0a:fc:73:0c:fb:56:83:3c:f6:87:3a:b6:cc:32:
                    31:5d:4f:de:1e:26:a0:d7:23:4c:98:4e:5a:7a:de:
                    23:7f:6f:aa:c5:63:be:3d:96:a2:43:24:41:ab:f0:
                    5c:2d:f9:4d:07:79:e0:15:6b:b5:4f:bc:37:38:6e:
                    78:1e:c0:8a:2e:3b:7d:46:ad:9b:a8:62:c1:f8:96:
                    80:39:ef:87:a0:73:f6:52:8d:b6:30:da:04:53:63:
                    ff:92:df:47:bc:71:17:36:d0:68:df:b9:b2:ef:d5:
                    41:7b:65:8e:4d:b3:bb:92:a1:08:aa:4c:af:ed:88:
                    85:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CC:2B:45:19:52:D5:41:96:5B:5D:BC:93:3D:BA:3B:B9:37:6C:3F
            X509v3 Authority Key Identifier:
                keyid:F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:db:52:50:e8:98:f5:15:c3:be:5d:9d:3d:47:f1:f3:6e:9e:
         63:25:8d:db:b4:59:78:4f:ef:01:d7:e2:c5:4c:66:e2:bf:34:
         a5:9d:69:85:bf:78:20:70:26:7e:4a:63:de:69:c6:9a:43:d4:
         9f:84:e6:51:8a:e3:70:b7:a3:3e:90:90:df:23:d0:fb:c2:df:
         96:61:23:a9:24:63:d4:be:84:05:bf:5f:f4:5f:b5:f1:ff:31:
         2a:a0:f6:d2:b1:e0:09:9e:08:9e:35:da:54:68:87:64:3a:15:
         62:b3:24:0c:19:4a:d9:0a:c9:d7:2c:f5:c8:04:96:37:56:dc:
         34:34:38:1a:ac:b5:b5:f1:5c:b4:82:10:69:a8:7a:0f:6b:2b:
         c9:f5:a7:c4:97:fb:bc:66:f3:2e:dc:d3:97:88:68:01:a2:df:
         b1:3b:07:a5:36:df:c5:00:98:96:57:3b:a3:e0:83:d3:f2:aa:
         69:16:7c:86:c3:2b:90:61:6b:0e:22:58:c4:02:d3:7d:3a:86:
         d1:67:22:89:84:9b:b3:78:6a:08:da:86:ae:ac:43:b8:50:85:
         1f:60:b4:8d:bc:58:17:b7:b7:45:c5:ba:34:27:ee:a8:dd:e7:
         0f:14:dd:51:e2:67:58:a9:ed:bb:7e:41:18:b7:8c:26:c8:9e:
         1a:e5:cd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:56 2025 by rpki-client