Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
File:                     6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft (raw, json)
Hash identifier:          DjhRpTO3bl4vdgpVvSloBCybqpvjaN3WKWgQUDzFqlI=
Subject key identifier:   AF:33:72:DD:1C:4C:06:31:6F:6F:C8:2D:01:13:EC:96:03:04:F2:BB
Authority key identifier: E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
Certificate issuer:       /CN=e97656f22015589ff7cc66056867f605d81449bc
Certificate serial:       0198D7057639687DBFCE4BBD567ADABD9FF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 13:01:56 +0000
Manifest this update:     Sat 23 Aug 2025 13:01:56 +0000
Manifest next update:     Sun 24 Aug 2025 13:01:56 +0000
Files and hashes:         1: 46IkgipDtz-gl4yWGt7SVQgrM2Y.roa (hash: xd1tjAJC9B4oABZm0yY50qZfUkL+C2aunMu/YZc9css=)
                          2: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl (hash: z6LIBHSMqsviL+rJtMDjrLv6I+/qVAEhOX5yQbEO2v4=)
                          3: TJ9h-OeDoNwLJy-bpo2ooNFoYYY.roa (hash: uSX/ck6PKaNlZa7GifLSaPti7K35d8cXLGS+lgOUDKc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:76:39:68:7d:bf:ce:4b:bd:56:7a:da:bd:9f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97656f22015589ff7cc66056867f605d81449bc
        Validity
            Not Before: Aug 23 13:01:56 2025 GMT
            Not After : Aug 24 13:01:56 2025 GMT
        Subject: CN=af3372dd1c4c06316f6fc82d0113ec960304f2bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0b:6f:6a:d1:36:d1:70:b3:61:3f:fe:71:ba:
                    66:15:b4:6d:d1:c8:60:c4:b4:be:c5:dd:5b:93:f4:
                    c8:76:11:be:e9:18:66:c4:35:98:db:21:65:e6:6f:
                    23:db:7a:7a:34:75:b6:bb:46:59:7e:f5:95:5e:ff:
                    d1:9b:1b:b1:8e:45:f2:0b:6e:e7:bb:13:64:ec:ca:
                    fd:5d:ec:77:4a:7f:c5:3e:2f:79:b0:57:27:06:54:
                    16:de:67:0c:01:37:14:f0:e7:c0:25:9c:9b:6e:0b:
                    eb:e9:4d:91:6e:02:33:89:b3:20:03:9a:1c:3a:67:
                    9c:d3:bb:c0:19:90:a6:fb:83:93:88:95:79:99:3f:
                    33:45:3f:16:67:fd:45:f1:a3:7a:96:fa:81:77:0e:
                    50:99:f9:a1:11:99:0a:a3:0f:16:1e:0b:9a:8c:ea:
                    d7:2a:32:27:d0:eb:9e:40:dc:02:2b:45:6f:16:46:
                    ff:5b:9e:b0:dc:3a:e8:5c:64:53:b2:f5:58:c4:46:
                    d2:8c:a1:45:82:0a:c3:e2:a0:99:c9:02:cb:82:72:
                    c4:27:90:f5:ef:ea:ae:a1:8c:b5:b8:dc:2c:e7:9b:
                    7d:89:dd:82:2f:3c:36:bd:62:c8:2c:13:ff:e6:b8:
                    f8:16:fd:3f:46:6e:a0:9e:66:8c:22:55:f1:fc:cc:
                    d3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:33:72:DD:1C:4C:06:31:6F:6F:C8:2D:01:13:EC:96:03:04:F2:BB
            X509v3 Authority Key Identifier:
                keyid:E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:36:33:46:66:7c:43:70:88:47:9a:a4:12:d9:24:71:35:1d:
         01:c7:c2:e5:0f:12:ec:93:40:bb:09:eb:68:75:f9:0d:86:19:
         86:16:68:8f:b2:7c:30:87:ad:64:a0:65:0b:33:f3:e8:10:bc:
         de:6f:43:89:e1:7a:28:bf:a0:03:48:ec:ec:dd:30:66:a1:f1:
         c4:19:58:57:db:40:8a:ce:0d:0c:5f:fa:76:ef:68:49:a7:29:
         84:77:e6:0b:2e:0c:e4:7f:6f:d7:ef:ca:29:9c:d4:54:20:14:
         83:35:45:72:b4:e6:b7:59:a4:b4:d2:2d:9e:e3:bd:b6:3e:db:
         55:c4:30:5e:2b:49:97:5b:3b:81:fc:31:df:ec:e8:eb:fd:12:
         df:79:ad:a8:24:ed:7c:a2:06:81:4e:53:99:81:e5:1c:9f:dc:
         7e:83:c7:a7:f9:65:39:a9:9d:f4:d3:e4:df:ff:d7:bd:20:76:
         a3:be:42:60:82:7c:58:f8:a0:de:7b:7f:92:ee:7f:84:19:c0:
         1e:c7:5c:ba:2e:bf:ef:60:cf:2f:7b:59:99:da:62:18:e7:2b:
         8b:46:54:27:f3:2e:6d:cc:0d:a7:a8:63:b9:ed:66:9b:36:cc:
         46:08:18:84:ac:0d:ae:36:f6:68:64:0e:e0:4b:e1:67:da:5d:
         db:4c:b3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:00 2025 by rpki-client