Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
File:                     S6_0itEUWxAMeD-3r7bzAovY804.mft (raw, json)
Hash identifier:          HWqc0U2AwnfSOIWt3tluVfocM9jE5ch5xuXpnJB/9ho=
Subject key identifier:   11:DA:F3:A0:7D:16:83:EC:5E:E2:1B:1C:F9:2E:42:52:89:64:2C:E8
Authority key identifier: 4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
Certificate issuer:       /CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Certificate serial:       0198D583FBB6B1C5AF37B0492C6B1AFE475C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
Manifest number:          0D82
Signing time:             Sat 23 Aug 2025 06:00:53 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:53 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:53 +0000
Files and hashes:         1: 07VM5GQDyy0wcSk66eg9Nc4GYr0.roa (hash: tZR04Bh0g3Sbqjc1Ej/IqbvRwZJEdNyq0qHOrpzegq8=)
                          2: S6_0itEUWxAMeD-3r7bzAovY804.crl (hash: fJwTxmqHaguggjq4mnvMFemC3eyqXAj+kZHAq9Qe/aA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:fb:b6:b1:c5:af:37:b0:49:2c:6b:1a:fe:47:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
        Validity
            Not Before: Aug 23 06:00:53 2025 GMT
            Not After : Aug 24 06:00:53 2025 GMT
        Subject: CN=11daf3a07d1683ec5ee21b1cf92e425289642ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:be:c4:3e:39:ae:4a:6b:e2:86:76:2d:cc:b5:
                    3c:c6:81:df:fc:24:b3:c1:58:82:fb:53:bb:6a:f4:
                    b6:6b:7e:b8:db:0c:29:36:a4:97:e2:bb:b9:ad:b3:
                    bb:42:2a:18:95:ca:7d:1c:8c:45:57:a2:9e:a5:ff:
                    f2:92:af:1b:55:01:af:a0:d2:11:48:ba:21:9a:12:
                    2c:9c:c1:b6:8a:5c:23:36:23:89:12:bd:7b:a6:9c:
                    d8:6d:23:f0:bc:c0:30:50:68:44:cf:25:f3:ad:be:
                    94:37:82:5f:df:5b:73:7f:4c:9b:16:2e:ef:d2:73:
                    bb:83:a4:f4:cd:93:ce:d6:a6:18:45:c8:42:72:e5:
                    6e:09:3c:ba:84:2c:36:d6:9d:d5:fe:aa:92:fc:9f:
                    ee:8e:a4:53:e8:7b:af:80:31:ad:ca:87:a4:b4:30:
                    ec:eb:60:b1:9d:81:64:7b:96:7d:9c:4d:6f:1d:c3:
                    db:6d:ff:99:d4:0e:bf:85:bf:fc:83:ef:58:4d:b1:
                    38:b3:9e:41:39:23:0d:34:8f:8b:62:a2:29:65:87:
                    3e:e0:68:60:6c:72:d1:95:9c:ae:fd:0a:89:93:b2:
                    37:28:7c:2e:8f:16:94:f8:87:38:78:ab:ef:13:6e:
                    e9:28:8f:76:d9:7d:ac:2d:ca:94:5f:f5:b4:c0:c2:
                    df:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DA:F3:A0:7D:16:83:EC:5E:E2:1B:1C:F9:2E:42:52:89:64:2C:E8
            X509v3 Authority Key Identifier:
                keyid:4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ad:17:a8:cd:b8:29:ba:ec:e1:f8:8f:e8:3d:01:1b:dc:ed:
         2e:1d:83:db:0b:3e:ed:4d:d7:c1:ee:ff:39:ab:31:af:db:b4:
         08:32:2b:9e:ed:5f:ea:ae:61:0f:18:58:a7:7c:b2:c8:99:ae:
         f4:bd:b9:25:13:24:b8:41:f6:b0:05:f7:1a:e2:d9:bc:1a:74:
         75:22:b8:74:8e:02:f8:33:a3:ed:d8:2b:a2:f1:3c:64:0a:0a:
         60:79:f5:f9:a6:d2:0f:05:98:45:0a:0b:ac:fe:98:2e:de:a1:
         f1:4a:ad:b7:fc:7c:34:59:ee:51:6e:02:6e:5f:4c:17:ca:26:
         e6:22:15:e4:7b:01:82:ef:05:33:d3:d9:c9:27:fd:3d:4e:b7:
         1f:2e:be:da:70:59:89:d4:06:5c:a6:bf:e3:5f:ac:a7:bf:50:
         52:3b:fa:ea:6b:94:67:fa:65:32:3d:6d:8c:bb:a6:59:9d:82:
         e3:35:6c:27:a7:85:27:9a:4f:a3:85:cb:36:5b:d4:a7:9f:e7:
         16:4c:3d:bd:57:38:a6:51:55:d0:20:e3:6e:7f:2d:e4:31:d4:
         e6:60:37:66:54:a2:a3:81:cd:05:c9:38:22:41:1c:99:ca:3e:
         08:69:cd:5b:79:44:6c:54:52:9f:56:e1:39:5c:71:53:8c:41:
         d2:7d:2a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:54 2025 by rpki-client