Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft
File:                     an0UIH91yLFYDbJ_defD_bH_hgw.mft (raw, json)
Hash identifier:          xzjwXESIN6nP7psgNOLKEsIBORsEe3C08wUAFVSmG1k=
Subject key identifier:   12:C5:09:58:8A:0F:05:9B:B7:C5:02:EE:7E:68:2F:D1:A0:E6:5E:13
Authority key identifier: 6A:7D:14:20:7F:75:C8:B1:58:0D:B2:7F:75:E7:C3:FD:B1:FF:86:0C
Certificate issuer:       /CN=6a7d14207f75c8b1580db27f75e7c3fdb1ff860c
Certificate serial:       01987486D62455796C94AA5B463437D0385C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/an0UIH91yLFYDbJ_defD_bH_hgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft
Manifest number:          08A6
Signing time:             Mon 04 Aug 2025 10:00:50 +0000
Manifest this update:     Mon 04 Aug 2025 10:00:50 +0000
Manifest next update:     Tue 05 Aug 2025 10:00:50 +0000
Files and hashes:         1: an0UIH91yLFYDbJ_defD_bH_hgw.crl (hash: BTj4tw68xMGsFInjwpKhksZP1LGuD3c0pPRfrF8opLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/an0UIH91yLFYDbJ_defD_bH_hgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 10:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:86:d6:24:55:79:6c:94:aa:5b:46:34:37:d0:38:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a7d14207f75c8b1580db27f75e7c3fdb1ff860c
        Validity
            Not Before: Aug  4 10:00:50 2025 GMT
            Not After : Aug  5 10:00:50 2025 GMT
        Subject: CN=12c509588a0f059bb7c502ee7e682fd1a0e65e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a3:8e:1b:39:29:c1:8d:90:2a:ee:0a:e3:ec:
                    ad:86:f4:98:65:5e:1f:2b:fa:7d:e2:5b:7f:b2:4f:
                    9f:8f:ba:f1:e1:89:af:13:d5:37:c9:96:58:fd:b4:
                    05:92:89:b7:bf:dc:d7:ca:76:d6:93:d3:cd:86:ea:
                    68:23:76:02:ea:98:27:a6:84:d2:8f:02:4d:20:6d:
                    69:2f:ac:33:f3:10:a4:4f:e3:0e:17:ea:92:e5:26:
                    64:e6:e1:90:34:04:e1:ff:34:e8:c0:77:79:dd:de:
                    53:29:2a:06:f9:0c:ba:b0:ca:b3:ad:6f:d4:35:b1:
                    f7:39:70:2e:20:d4:1a:de:ab:e7:27:a5:56:b2:a1:
                    52:95:e3:7c:35:34:f4:9e:ca:73:96:b5:e3:02:dc:
                    54:90:83:76:c2:63:02:df:16:f6:d2:cc:1b:77:0a:
                    57:2a:9c:2b:c1:6b:d9:38:b0:24:21:fc:ce:24:16:
                    7b:3b:5d:82:5d:14:0a:4f:a4:77:d1:41:e5:41:2e:
                    d7:b5:54:c1:dd:ee:9e:05:46:04:68:fc:cb:40:31:
                    08:7e:00:c2:c4:df:5e:f7:74:c1:ab:92:f4:77:15:
                    df:33:aa:91:54:2d:ed:75:9a:07:c4:be:e8:a5:8f:
                    b5:74:ac:d0:ab:b5:bd:e2:bc:c4:09:8d:3d:32:31:
                    77:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C5:09:58:8A:0F:05:9B:B7:C5:02:EE:7E:68:2F:D1:A0:E6:5E:13
            X509v3 Authority Key Identifier:
                keyid:6A:7D:14:20:7F:75:C8:B1:58:0D:B2:7F:75:E7:C3:FD:B1:FF:86:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/an0UIH91yLFYDbJ_defD_bH_hgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:42:29:87:46:cd:68:8c:0f:6b:0e:d5:05:3d:d4:b9:02:38:
         99:a0:9d:dd:cf:a9:1c:ff:12:60:64:1f:34:f9:73:43:b5:d3:
         12:07:fd:7f:78:c0:01:a2:be:83:ab:88:19:9f:27:57:23:34:
         ed:a7:8e:19:a5:0f:b6:ca:0f:41:fd:07:13:30:99:d7:dd:76:
         2c:57:9e:67:f9:1e:52:db:78:23:2d:05:a5:5b:5f:6b:90:44:
         b2:bd:bc:be:e6:c1:67:56:30:4a:b4:ff:e4:37:cc:c5:f8:7b:
         65:81:36:ab:42:8b:f9:5f:75:ac:aa:ce:12:11:6e:88:f9:d2:
         57:32:b6:90:85:51:6d:ec:b2:63:0a:67:b2:89:30:9f:36:43:
         07:9d:82:78:c0:47:fb:4f:25:49:3a:0f:f5:a4:6b:36:20:2b:
         7e:48:a9:4d:e9:c5:a2:fe:69:8d:0c:23:52:cb:51:73:dd:71:
         60:71:7b:92:a8:1b:65:9b:d2:78:4e:86:5e:e6:d2:27:2b:d8:
         3b:d2:e4:69:90:f5:ec:02:5f:cf:96:c9:37:ad:04:cc:2c:89:
         e3:56:02:cc:16:3f:86:ef:0a:1a:11:98:b1:ac:1d:ef:fa:da:
         99:4c:70:db:46:63:2f:f2:0b:31:10:7f:3f:07:f2:bc:f5:23:
         5e:c0:53:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:57:04 2025 by rpki-client