Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
File:                     pI2lIJvWz5DG321-bWOmOVW61LU.mft (raw, json)
Hash identifier:          wUzQQFAq15E93ybEKnjlirJujXc5MpNQl5utfYFitT0=
Subject key identifier:   B6:91:1D:AB:A3:0C:2A:29:66:AB:3B:60:0F:57:C5:5E:12:8E:18:54
Authority key identifier: A4:8D:A5:20:9B:D6:CF:90:C6:DF:6D:7E:6D:63:A6:39:55:BA:D4:B5
Certificate issuer:       /CN=a48da5209bd6cf90c6df6d7e6d63a63955bad4b5
Certificate serial:       01987418ADE251C79D41276F65D8E0ADA3B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
Manifest number:          06A0
Signing time:             Mon 04 Aug 2025 08:00:31 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:31 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:31 +0000
Files and hashes:         1: gZ0yVDfN4vy-eK7OCEPSZaBaBxs.roa (hash: LNpaqhIXeGRj9rxSqG8l9W+yrY/Iu+GRMv3w/Y4Inpo=)
                          2: pI2lIJvWz5DG321-bWOmOVW61LU.crl (hash: B7Wa4XqHPXutihNY7wHJfVZA3zZ7nxF48I9SYhi97u0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 08:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:ad:e2:51:c7:9d:41:27:6f:65:d8:e0:ad:a3:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a48da5209bd6cf90c6df6d7e6d63a63955bad4b5
        Validity
            Not Before: Aug  4 08:00:31 2025 GMT
            Not After : Aug  5 08:00:31 2025 GMT
        Subject: CN=b6911daba30c2a2966ab3b600f57c55e128e1854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6b:b8:6e:fa:44:9e:6b:db:14:d5:83:4f:00:
                    27:b2:5c:58:4d:bd:c1:48:32:db:45:de:a4:0a:2a:
                    a1:a7:d8:61:4d:de:45:d4:69:68:88:f6:47:f5:f1:
                    1d:4a:82:a5:af:ee:57:ec:b9:48:a1:19:a2:6b:80:
                    ab:01:a0:a9:69:3d:f6:c5:9b:c0:42:75:d8:e2:1c:
                    ef:92:0f:99:50:97:0a:f7:d8:8c:bc:89:5e:5b:e8:
                    d2:41:78:66:42:f5:61:d5:99:cb:7e:38:90:a6:a7:
                    a3:5a:d5:16:3a:75:9d:a6:76:a3:a5:7f:0a:db:b7:
                    ad:12:f6:00:50:9f:a8:e5:e7:99:96:11:35:22:39:
                    2e:6d:4e:52:69:e5:c7:5c:30:59:1e:3c:ec:d3:05:
                    dd:9d:6e:b4:b0:9e:17:e8:8c:58:5a:d4:fb:b4:4a:
                    40:12:4f:72:30:be:80:2d:55:0b:3f:43:3c:ad:45:
                    19:19:14:f0:eb:96:f8:b1:12:7a:21:f1:e1:02:cf:
                    85:74:52:7c:83:35:e8:60:33:f1:0a:6f:84:96:41:
                    a4:30:4a:16:bd:c3:24:31:55:c7:8f:c8:74:0f:bd:
                    22:d9:7b:16:f0:56:51:75:16:fa:ff:d4:b6:58:4c:
                    3a:ec:bd:32:1d:14:2d:12:d4:d4:50:39:35:3f:1d:
                    f6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:91:1D:AB:A3:0C:2A:29:66:AB:3B:60:0F:57:C5:5E:12:8E:18:54
            X509v3 Authority Key Identifier:
                keyid:A4:8D:A5:20:9B:D6:CF:90:C6:DF:6D:7E:6D:63:A6:39:55:BA:D4:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:c1:4a:7a:11:48:f0:a9:8d:3c:8f:50:a0:b9:1e:87:d1:e6:
         cb:ef:59:d0:2b:35:e4:70:9e:88:d8:99:70:4b:99:67:a7:9a:
         0d:59:1e:6a:6e:3c:1a:b9:e9:c6:ca:d0:3e:73:d7:66:1a:fd:
         d9:f8:49:95:e6:cf:ec:8b:6f:69:2a:81:11:af:05:b2:8e:ce:
         68:f9:98:30:63:d0:a8:ef:b2:40:c4:92:53:63:5b:96:61:50:
         a7:1a:49:3e:af:2b:05:81:15:f9:5a:3f:12:c3:83:6d:d0:c8:
         d3:37:5c:23:24:89:2c:10:e7:2c:63:84:18:b3:45:9f:0d:7f:
         29:81:14:5b:11:e2:8e:80:db:dd:6a:22:b2:1f:b9:b7:26:39:
         fa:a3:2f:1f:93:e3:ec:cb:c2:3c:65:27:10:35:2c:6e:64:98:
         3a:e9:47:7f:40:97:ab:50:f0:92:c2:36:86:9d:2c:45:47:58:
         47:d3:c3:bf:d6:22:1b:ad:60:ca:77:1d:f6:3e:66:13:87:ef:
         63:0b:17:c8:be:d0:c9:60:44:83:73:ff:80:28:01:63:c5:d2:
         b9:ef:23:09:fc:90:91:3e:30:90:c2:0f:34:01:08:5a:07:ad:
         75:21:77:94:c1:ec:ce:aa:61:82:45:ec:95:0b:d4:20:ec:88:
         a8:05:9a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:45:33 2025 by rpki-client