Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
File:                     6Fgzjepq5N27JIUKBwf0OqF5TD8.mft (raw, json)
Hash identifier:          9B37OxSjIcD7kfvOaMj7cWD6Vmzqt+lnAU+T8ZRrTUc=
Subject key identifier:   1A:47:B5:11:E4:93:14:A4:72:2E:C3:8D:9B:B5:B9:81:97:A4:77:3C
Authority key identifier: E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F
Certificate issuer:       /CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
Certificate serial:       019898949AC5C3D47DE5FCA154F206001DCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
Manifest number:          15F7
Signing time:             Mon 11 Aug 2025 10:02:12 +0000
Manifest this update:     Mon 11 Aug 2025 10:02:12 +0000
Manifest next update:     Tue 12 Aug 2025 10:02:12 +0000
Files and hashes:         1: 6Fgzjepq5N27JIUKBwf0OqF5TD8.crl (hash: bqxYTzwx9JpMI/ZhWe7pKA3j3sR51tOpSjDCFJOL3/M=)
                          2: KqaueV9hoJCow2ggLZVEN6Aq14w.roa (hash: m49ywOVO+P5/nCXp3LP+DFkgcnb10IgZ5YOzfhx6zR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 10:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:98:94:9a:c5:c3:d4:7d:e5:fc:a1:54:f2:06:00:1d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
        Validity
            Not Before: Aug 11 10:02:12 2025 GMT
            Not After : Aug 12 10:02:12 2025 GMT
        Subject: CN=1a47b511e49314a4722ec38d9bb5b98197a4773c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:05:a5:cd:dd:0e:0c:d6:0b:d9:a3:ad:41:fa:
                    ef:14:0b:58:53:11:31:86:2a:54:d5:6d:b4:d5:b6:
                    36:96:5a:ca:d1:56:bb:fb:17:65:a9:cf:e9:4c:63:
                    ab:86:36:73:0c:a6:a2:07:20:ce:87:2f:b6:4e:fb:
                    cd:97:67:a6:84:89:e4:f8:f7:b2:b7:1a:1c:60:26:
                    53:22:16:23:a7:63:cc:38:8d:ef:ab:21:cd:4a:4c:
                    95:52:6e:87:ab:2a:e8:86:c0:a2:4b:94:58:7b:9c:
                    22:ad:54:9d:7d:47:7e:f7:e6:3f:7c:73:09:c6:1f:
                    37:a2:5e:b4:b6:67:21:92:b6:e4:d8:53:2f:4c:d3:
                    df:6c:a7:78:7b:72:42:b1:d6:e4:64:db:b4:b6:b1:
                    3f:4f:ba:1c:6f:fb:ac:fb:25:35:e5:df:14:fc:7f:
                    0b:03:1f:b8:97:79:58:58:22:b4:7d:13:d9:13:31:
                    20:0c:3d:c4:47:ac:9a:0b:22:32:a2:c0:57:27:b9:
                    8b:81:f3:73:bf:22:07:66:f2:30:18:a3:0d:13:d9:
                    46:b8:fb:82:ad:4f:d8:9f:29:f3:ba:94:87:ee:c9:
                    89:ed:e6:2c:f1:c2:f1:94:5b:ce:f4:ce:65:1a:da:
                    f3:8a:2a:a8:e8:10:fa:77:6b:0a:18:af:e7:69:0f:
                    0f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:47:B5:11:E4:93:14:A4:72:2E:C3:8D:9B:B5:B9:81:97:A4:77:3C
            X509v3 Authority Key Identifier:
                keyid:E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:cf:49:f6:3a:c5:e0:96:fe:55:b0:73:50:f0:db:b4:48:1b:
         d5:63:56:23:4c:27:5d:cc:4c:2f:65:bd:22:84:8d:7b:1d:74:
         ba:03:a0:5a:b1:87:22:ed:92:c8:9e:01:8b:62:94:62:ad:f0:
         6f:87:75:f3:bc:5a:a9:19:9d:53:e7:5d:05:2c:c9:87:5c:4d:
         50:12:5a:ff:ab:23:7c:d6:54:b7:f2:b5:ab:f1:b1:ac:32:23:
         e2:0c:9a:ba:80:fc:a5:6d:30:bb:e0:80:3d:dd:ee:07:aa:ee:
         78:a9:75:5f:eb:25:18:aa:f3:bd:10:c3:02:70:6b:24:1c:3a:
         13:54:1b:c5:38:18:cb:d7:32:69:c4:50:05:49:cd:4d:6a:77:
         8e:0c:3b:4b:98:c0:42:5d:94:5b:b5:09:9a:35:d5:8c:50:fb:
         8b:ce:bd:21:24:c6:f8:c0:c5:73:3f:ea:25:24:a0:a7:cf:c1:
         d5:a1:12:dd:b3:41:f5:13:d9:76:8b:c4:ff:4b:51:1f:1d:4b:
         d0:9f:9d:4f:34:35:9f:f6:1f:e4:4f:d6:1c:c0:11:7d:5d:c9:
         f2:e8:7b:55:08:f0:7a:ba:63:aa:67:91:76:a4:b7:0a:bf:d6:
         62:ce:c4:99:aa:a6:84:3a:d0:ee:90:e0:bd:d2:1d:61:69:3b:
         87:d0:1f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:11:25 2025 by rpki-client