Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
File:                     6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft (raw, json)
Hash identifier:          r/rtxvdfSSEyKb8B9VaeyfO4Pny/z55G4+Fnib3aEpw=
Subject key identifier:   C4:C9:35:52:8A:97:60:E2:F5:F1:F7:D1:BA:E1:DE:A2:EF:DC:91:EB
Authority key identifier: E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
Certificate issuer:       /CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Certificate serial:       01989FA8848D936301F60B46721A77091037
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
Manifest number:          15B5
Signing time:             Tue 12 Aug 2025 19:01:17 +0000
Manifest this update:     Tue 12 Aug 2025 19:01:17 +0000
Manifest next update:     Wed 13 Aug 2025 19:01:17 +0000
Files and hashes:         1: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl (hash: SUsmqCzC/1NAvPHgJawwY1TsrB9vDufJ8zWFDBr8NS4=)
                          2: rvzjyC9muvr4migx_xtUIzZ2FRM.roa (hash: 2jsltHZ+YtkUSfR/OVprtu2235QmWCtb64qQWKzazWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 13:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9f:a8:84:8d:93:63:01:f6:0b:46:72:1a:77:09:10:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
        Validity
            Not Before: Aug 12 19:01:17 2025 GMT
            Not After : Aug 13 19:01:17 2025 GMT
        Subject: CN=c4c935528a9760e2f5f1f7d1bae1dea2efdc91eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2b:99:17:94:1e:6e:e4:19:9b:d6:fb:99:75:
                    b9:7e:d7:27:9c:57:df:59:a5:2b:d8:8a:34:87:7e:
                    ae:56:aa:e7:e8:21:d0:ae:36:cd:55:0e:4d:83:55:
                    33:c0:e9:f5:40:50:a7:37:15:d5:aa:3d:b4:1a:c3:
                    eb:56:70:d8:04:85:02:eb:e9:16:0a:42:45:89:1a:
                    67:92:e5:db:31:85:f3:cd:9a:ef:36:4f:95:05:ef:
                    15:b5:23:0e:d7:cb:52:2b:08:a6:7a:0e:18:04:b7:
                    21:82:4e:d5:bb:23:ce:75:d3:cd:9e:73:45:74:60:
                    be:f7:05:dc:41:09:5d:68:e4:c0:3d:f8:c4:01:fd:
                    89:84:8d:c6:5e:48:d3:a7:02:22:51:e3:46:2e:9b:
                    8a:98:35:76:45:42:74:9d:f1:51:2d:a0:22:9f:f1:
                    38:ce:79:0b:5c:7e:6c:e4:34:dc:01:ff:b6:f1:7e:
                    73:ad:ea:5c:88:1b:63:2c:91:1f:90:46:32:af:b5:
                    43:46:93:95:79:78:15:41:11:5d:af:f3:c0:fd:2e:
                    a3:80:57:bd:5c:a7:6b:b5:83:f6:ad:49:83:bc:ed:
                    9b:02:b4:ec:51:d7:ce:c2:49:c1:ae:a8:7d:87:14:
                    71:fb:43:61:71:90:db:24:50:e2:32:26:9f:f4:00:
                    98:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C9:35:52:8A:97:60:E2:F5:F1:F7:D1:BA:E1:DE:A2:EF:DC:91:EB
            X509v3 Authority Key Identifier:
                keyid:E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c3:e6:36:3e:ad:18:fc:64:85:8e:c8:ac:b7:a8:2f:01:50:
         37:98:4b:07:f5:2d:63:cd:d7:d0:f2:6f:54:d8:3a:93:92:ff:
         38:9d:1a:b8:49:e9:bb:82:f6:09:e8:8e:48:e4:0d:5e:d6:af:
         02:90:c3:32:19:56:71:77:10:d9:91:63:eb:b4:a2:d1:47:08:
         cd:b6:c0:a8:2d:c2:63:5b:5a:a7:44:f4:de:fe:f9:73:ba:cb:
         d5:ab:a2:09:10:b0:2f:ae:99:0b:9e:d7:39:7e:21:75:1e:f3:
         cf:e4:2d:4a:ad:40:87:5a:0a:6e:e2:ea:78:fe:4b:12:44:5a:
         27:52:52:2a:b9:c5:b2:25:32:e2:12:0c:e0:1a:38:10:91:7b:
         b3:8e:f7:2f:da:5a:f7:6f:85:a2:d9:68:87:9b:a4:d9:13:63:
         fb:fb:52:5e:00:da:13:20:e1:d2:2c:1c:d9:1b:ff:7e:cc:b1:
         54:71:2f:09:7c:99:f5:45:13:fc:e6:e4:1c:0a:4f:2e:5e:07:
         eb:71:19:90:9f:02:3b:d8:93:02:3c:bb:bc:71:1b:c0:2e:be:
         c0:bb:54:58:d1:1f:44:33:39:9f:f7:97:8c:ea:1b:bc:1c:eb:
         e1:b7:1f:0a:cb:61:50:79:22:c2:27:82:b2:e2:6b:95:67:48:
         c5:98:c5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:42:14 2025 by rpki-client