Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
File:                     blQs7eU6DFcUWmr_L1gZbwLUoS4.mft (raw, json)
Hash identifier:          p/hfWTWg56eGtP3+Rvg0OPsLrD1n3rl6fXFEc0rYNDQ=
Subject key identifier:   0F:D9:6A:83:54:A4:76:D7:C0:33:56:63:92:BD:F2:DB:65:14:9C:D1
Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
Certificate issuer:       /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Certificate serial:       01987C778476540272DC434AE2C764D1CFEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
Manifest number:          15FA
Signing time:             Tue 05 Aug 2025 23:01:04 +0000
Manifest this update:     Tue 05 Aug 2025 23:01:04 +0000
Manifest next update:     Wed 06 Aug 2025 23:01:04 +0000
Files and hashes:         1: blQs7eU6DFcUWmr_L1gZbwLUoS4.crl (hash: VHccW5BfBb4r1rz5/AApa4NzJSDQ5MrFxs8xYEkrdis=)
                          2: pXv8FGbLwxECE7IPZwLe-oIEhlQ.roa (hash: lA0EoJbAgOHytg/Q3yX/rveAnxbQAYlQALMvfLmzZeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:77:84:76:54:02:72:dc:43:4a:e2:c7:64:d1:cf:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
        Validity
            Not Before: Aug  5 23:01:04 2025 GMT
            Not After : Aug  6 23:01:04 2025 GMT
        Subject: CN=0fd96a8354a476d7c033566392bdf2db65149cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ec:90:15:77:97:a6:c9:20:bf:71:ee:5d:e3:
                    97:54:47:cd:2e:29:09:42:18:75:46:e6:33:e6:26:
                    8a:21:31:06:01:54:21:e1:75:2a:f7:0c:81:a2:a5:
                    10:f8:c5:c7:98:57:ed:17:b3:dd:78:6a:e3:a6:b8:
                    db:7a:d0:85:3c:4b:a3:cf:36:ac:7e:e5:0d:22:58:
                    f0:1b:91:79:d8:83:b9:0e:ae:7c:71:ba:3a:d2:c4:
                    07:36:0a:b9:ae:09:c1:35:72:74:a8:fc:5d:99:db:
                    c2:83:bc:7e:bb:43:d0:10:75:fa:25:45:ca:96:4b:
                    a6:ef:4f:01:34:9f:02:81:61:ed:bc:44:73:02:32:
                    dc:5d:de:18:69:9b:b5:c3:ea:6e:e0:79:6c:d3:4a:
                    8b:81:ba:e3:fb:e2:f4:d3:b8:99:09:11:80:7d:b2:
                    e5:e0:f4:51:11:23:2d:4d:79:d9:b2:7d:3a:57:a8:
                    a3:cc:9c:2b:f5:18:9e:62:85:37:e5:5e:10:07:21:
                    9a:4a:e9:f0:0f:f1:fe:97:c1:ef:a5:b9:8e:b1:8d:
                    f9:62:76:91:f3:27:14:d8:4b:db:0d:d4:5e:9b:a3:
                    df:44:e1:65:55:4a:3b:5f:9e:ba:d6:af:a9:7e:f6:
                    a0:09:96:fe:01:78:d4:e1:a0:a1:1e:2a:e7:7f:9e:
                    00:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D9:6A:83:54:A4:76:D7:C0:33:56:63:92:BD:F2:DB:65:14:9C:D1
            X509v3 Authority Key Identifier:
                keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e7:22:53:81:bb:1d:52:f9:1f:f9:b9:47:dd:0f:84:48:18:
         f0:23:c3:34:04:c3:36:08:83:36:ba:48:bd:53:e9:95:78:b5:
         45:48:f7:a5:1e:7d:c3:96:8b:fc:1d:bd:85:7d:7d:f2:61:41:
         92:39:8c:5c:03:09:d5:27:56:03:6e:a4:4e:ff:ad:b1:f1:e8:
         4d:75:4f:83:9a:94:17:28:50:25:a8:26:09:4b:1e:58:1c:a8:
         b4:69:93:6b:83:ed:a6:90:e9:c5:32:a7:d3:75:68:cf:aa:a3:
         99:1e:fc:db:3f:5d:30:f8:1c:7c:1d:cf:b7:e7:22:42:00:08:
         be:2a:2f:39:d5:df:ac:ac:77:e7:c0:d7:48:34:13:57:02:3c:
         a0:83:c2:92:42:20:34:2f:49:cb:7f:df:b9:98:4b:cb:bb:e8:
         eb:91:f2:df:3b:e7:c1:e3:eb:89:49:d5:86:2d:b2:88:87:37:
         6c:3e:fd:f6:6c:3a:f9:94:a3:5f:7a:bb:a4:0b:30:9a:f6:a8:
         7b:fe:2d:40:8e:97:62:b3:72:61:89:e8:96:8e:3f:42:30:f5:
         f2:2a:df:af:43:5f:a9:73:6e:e7:72:16:b1:3b:76:f6:6d:3d:
         81:0e:8f:3d:8a:35:c4:8f:38:cb:f3:c0:7d:b7:61:24:89:82:
         44:16:eb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:59:43 2025 by rpki-client