Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
File:                     6po2KjoeqNaaLSY__8GA2rWjgck.mft (raw, json)
Hash identifier:          EFoYXV1IGaHFM7rW44oEEmsNxvoD37UN3nAALENdOrU=
Subject key identifier:   6A:23:E5:09:F7:74:2D:CE:AB:41:FA:0F:B9:C9:0C:0A:9B:66:21:F8
Authority key identifier: EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9
Certificate issuer:       /CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
Certificate serial:       0198745028EF69EB78FCFC58E9C90A6D32FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
Manifest number:          0A0A
Signing time:             Mon 04 Aug 2025 09:01:07 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:07 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:07 +0000
Files and hashes:         1: 6po2KjoeqNaaLSY__8GA2rWjgck.crl (hash: T88EeV9Gra10YlilTlXUMdwIbiikzuRbs1y6IKmmP10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:28:ef:69:eb:78:fc:fc:58:e9:c9:0a:6d:32:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
        Validity
            Not Before: Aug  4 09:01:07 2025 GMT
            Not After : Aug  5 09:01:07 2025 GMT
        Subject: CN=6a23e509f7742dceab41fa0fb9c90c0a9b6621f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:35:50:bc:ae:f7:a5:ce:b7:ae:40:4f:2b:10:
                    c4:18:d5:d6:88:8d:8c:11:62:65:77:da:d6:ad:9c:
                    f2:58:3c:1b:76:fd:e7:88:8f:ee:c2:0a:86:3b:8f:
                    88:d6:b8:ba:c0:b1:7e:28:42:17:a2:7a:f2:48:1e:
                    04:a4:76:d5:27:44:a3:40:91:06:04:fb:b3:0a:5a:
                    2a:6e:57:c4:da:73:5f:bc:76:17:62:f5:ad:11:6f:
                    e2:ab:a3:44:c6:02:e3:26:e7:b4:7d:91:86:c6:ef:
                    0b:26:d7:f3:04:bd:21:e7:55:1c:8a:ca:ed:b6:f2:
                    7e:30:3b:40:82:40:2a:4f:9f:9e:52:1a:3a:88:c8:
                    8d:5c:55:60:cc:8a:4a:c2:fd:e5:4e:e5:43:01:13:
                    e8:bd:80:e7:37:ee:d2:d6:d1:a9:6d:9f:eb:b0:8f:
                    f4:0a:88:c9:98:ee:c2:f5:90:c1:23:e8:c6:53:a5:
                    9d:93:83:41:37:3d:88:ef:22:fa:94:7c:5c:d6:8b:
                    49:de:8a:2d:11:fb:13:c4:17:c7:b4:be:5c:16:c0:
                    3d:ca:a2:17:0f:24:0f:30:c7:b2:60:56:f1:81:59:
                    7a:f0:1c:3c:58:e3:c8:f7:c7:69:e8:30:99:3f:8b:
                    54:68:89:35:b0:46:6b:ca:1f:ea:44:5f:c2:16:5f:
                    f4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:23:E5:09:F7:74:2D:CE:AB:41:FA:0F:B9:C9:0C:0A:9B:66:21:F8
            X509v3 Authority Key Identifier:
                keyid:EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:91:99:f0:3f:c3:d0:b5:11:8b:00:97:f6:03:11:0c:9c:f6:
         66:2c:04:23:01:d1:8c:59:c7:9f:2d:71:68:e0:b3:9a:a9:92:
         03:f9:1a:f5:04:4e:1c:52:0b:ba:77:5b:c7:dd:cb:5f:5b:88:
         03:05:22:0f:da:1c:12:10:b7:29:c7:f3:57:8f:43:d9:d8:5f:
         a9:d8:6e:f9:f8:8f:be:6c:e8:d7:75:9e:f1:22:0d:fe:bd:6b:
         2e:fd:8b:f9:2e:bd:39:00:c7:e8:45:d9:94:ba:fd:9f:cf:0a:
         c9:60:7e:0e:b2:99:ea:19:76:8f:3e:5a:35:f2:33:eb:ab:8c:
         65:86:de:ac:74:76:66:4e:6d:02:bb:d3:f6:68:0b:8b:fa:61:
         7a:38:3d:aa:55:87:3f:88:ff:a4:1d:ac:68:19:59:fe:22:42:
         49:38:22:af:b6:8c:cc:b3:6f:df:24:ca:7c:2b:7e:1e:5c:75:
         49:ae:62:9c:b9:98:c7:90:fa:fb:19:66:0c:54:2a:df:96:85:
         a5:21:28:36:23:1e:d0:bc:e7:dc:8b:69:64:db:21:be:6e:a2:
         45:ed:e8:1d:dc:5d:44:e8:3f:6c:20:38:5f:81:da:db:37:e5:
         8e:a3:5b:6b:b3:2b:d6:b3:52:28:e9:7a:ad:4c:11:1f:61:3f:
         12:37:99:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UCjvaet4/PxY6ckKbTL/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhOWEzNjJhM2ExZWE4ZDY5YTJkMjYzZmZmYzE4MGRhYjVh
MzgxYzkwHhcNMjUwODA0MDkwMTA3WhcNMjUwODA1MDkwMTA3WjAzMTEwLwYDVQQD
Eyg2YTIzZTUwOWY3NzQyZGNlYWI0MWZhMGZiOWM5MGMwYTliNjYyMWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzVQvK73pc63rkBPKxDEGNXWiI2M
EWJld9rWrZzyWDwbdv3niI/uwgqGO4+I1ri6wLF+KEIXonrySB4EpHbVJ0SjQJEG
BPuzCloqblfE2nNfvHYXYvWtEW/iq6NExgLjJue0fZGGxu8LJtfzBL0h51Ucisrt
tvJ+MDtAgkAqT5+eUho6iMiNXFVgzIpKwv3lTuVDARPovYDnN+7S1tGpbZ/rsI/0
CojJmO7C9ZDBI+jGU6Wdk4NBNz2I7yL6lHxc1otJ3ootEfsTxBfHtL5cFsA9yqIX
DyQPMMeyYFbxgVl68Bw8WOPI98dp6DCZP4tUaIk1sEZryh/qRF/CFl/0LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoj5Qn3dC3Oq0H6D7nJDAqbZiH4MB8GA1UdIwQY
MBaAFOqaNio6HqjWmi0mP//BgNq1o4HJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnBvMktqb2VxTmFhTFNZX184R0EycldqZ2NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lN2Y0NDEtMTJlNC00MWMzLTgzMjQt
ZDRkOGY4OTZiZmYzLzEvNnBvMktqb2VxTmFhTFNZX184R0EycldqZ2NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9lN2Y0NDEtMTJlNC00MWMzLTgzMjQtZDRkOGY4OTZiZmYz
LzEvNnBvMktqb2VxTmFhTFNZX184R0EycldqZ2NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhpGZ8D/D
0LURiwCX9gMRDJz2ZiwEIwHRjFnHny1xaOCzmqmSA/ka9QROHFILundbx93LX1uI
AwUiD9ocEhC3KcfzV49D2dhfqdhu+fiPvmzo13We8SIN/r1rLv2L+S69OQDH6EXZ
lLr9n88KyWB+DrKZ6hl2jz5aNfIz66uMZYberHR2Zk5tArvT9mgLi/phejg9qlWH
P4j/pB2saBlZ/iJCSTgir7aMzLNv3yTKfCt+Hlx1Sa5inLmYx5D6+xlmDFQq35aF
pSEoNiMe0Lzn3ItpZNshvm6iRe3oHdxdROg/bCA4X4Ha2zfljqNba7Mr1rNSKOl6
rUwRH2E/EjeZrA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:47 2025 by rpki-client