Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
File:                     S6XEBCZt6xbZx4qpLoAtg_uibHE.mft (raw, json)
Hash identifier:          pkJX5RYloZCikJwnU70xHN+ucUrl5pUC1n/yIZ2U9oU=
Subject key identifier:   DF:EF:2C:82:01:A3:E8:42:19:74:F7:BD:93:08:01:C7:0D:D0:C0:22
Authority key identifier: 4B:A5:C4:04:26:6D:EB:16:D9:C7:8A:A9:2E:80:2D:83:FB:A2:6C:71
Certificate issuer:       /CN=4ba5c404266deb16d9c78aa92e802d83fba26c71
Certificate serial:       0198D54E2F5382F4D4911127BA2B7CFBBEA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
Manifest number:          054D
Signing time:             Sat 23 Aug 2025 05:02:07 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:07 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:07 +0000
Files and hashes:         1: S6XEBCZt6xbZx4qpLoAtg_uibHE.crl (hash: vWoIFWvrs6SQB/whpi7eyjZ6YQ45wXFK04vukANTXDE=)
                          2: eQ54edgYKIUcfPhFEws-eNJ8BAA.roa (hash: OAjHXz/8YyId26wIY7CC8yapukZc0Z6aGp6x02zSR/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:2f:53:82:f4:d4:91:11:27:ba:2b:7c:fb:be:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba5c404266deb16d9c78aa92e802d83fba26c71
        Validity
            Not Before: Aug 23 05:02:07 2025 GMT
            Not After : Aug 24 05:02:07 2025 GMT
        Subject: CN=dfef2c8201a3e8421974f7bd930801c70dd0c022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4b:b4:d1:c8:76:f2:de:75:05:79:92:91:a8:
                    9f:b3:3d:7f:7d:b2:54:c1:f0:a6:a7:85:23:69:2b:
                    6f:9f:1e:e6:80:13:e7:f4:c5:82:fa:af:a7:4a:89:
                    65:15:58:4d:8e:1d:9b:61:27:25:d1:ea:fa:2a:ce:
                    aa:95:57:9c:ea:69:f0:f8:25:eb:52:42:cb:fb:7f:
                    fd:d1:c1:28:5b:77:eb:1d:d9:f7:56:de:10:91:59:
                    48:b7:f9:2c:55:f9:4f:ae:32:58:0a:8d:6d:ef:0c:
                    d6:a5:e1:4c:10:7c:9d:ea:f9:58:34:45:0a:26:ee:
                    89:bf:8b:cc:36:22:9a:6a:a0:2e:ce:3c:ab:9a:41:
                    38:b4:4e:ee:e9:b2:eb:6e:e6:a8:70:43:90:33:d2:
                    dd:e0:2e:f8:7f:c1:e4:8e:ad:80:38:09:ad:69:43:
                    6a:4f:03:73:04:11:aa:81:86:91:93:f8:35:f3:fc:
                    76:f4:c4:3c:1c:b2:d4:0c:c7:97:b4:72:35:e8:ec:
                    d6:6e:3b:ab:0e:7b:5a:49:f5:ac:f3:26:d6:d7:ba:
                    36:eb:87:b6:10:3f:41:9a:f5:1e:b7:bb:82:d7:85:
                    cb:98:45:38:3e:7d:73:1b:9e:74:9d:d3:ee:4c:22:
                    a8:a7:ef:be:62:38:a1:d2:0b:85:2f:70:b6:0b:91:
                    85:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:EF:2C:82:01:A3:E8:42:19:74:F7:BD:93:08:01:C7:0D:D0:C0:22
            X509v3 Authority Key Identifier:
                keyid:4B:A5:C4:04:26:6D:EB:16:D9:C7:8A:A9:2E:80:2D:83:FB:A2:6C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:a5:29:a6:c8:90:93:97:79:c1:f7:4f:7d:09:ec:02:35:9d:
         10:84:c7:28:8e:c7:8e:ba:53:1d:5b:e0:f2:df:f2:bc:6a:de:
         b2:2c:46:55:9c:f4:89:17:b9:55:71:19:4d:1c:34:43:fe:b9:
         12:12:bd:c4:73:32:1b:6c:7d:89:11:e6:98:08:7b:43:4e:29:
         cf:76:50:82:d9:df:54:86:a9:7c:a6:d6:65:fe:95:51:f3:6c:
         66:2b:e3:c7:41:1c:19:30:2f:2d:8d:87:06:db:2b:a1:39:b1:
         5f:16:41:16:22:13:d5:9f:99:cc:5b:3f:2d:6b:d0:93:68:6b:
         f6:f7:15:81:7f:10:57:fb:ae:89:3c:c4:bf:ca:d2:d3:09:a3:
         6c:b9:22:aa:aa:9d:05:8f:f7:87:af:9a:fc:b9:6a:cb:0e:a9:
         5b:1c:fe:e8:20:cb:78:f0:6a:65:0f:c2:ad:a1:8e:f4:e0:20:
         2b:4e:8a:09:75:e2:97:d9:4d:3e:a8:03:da:a0:5b:3a:7e:29:
         a1:a3:8d:b9:09:a7:96:c1:fa:fe:b0:e2:54:ad:f2:76:8e:38:
         39:38:a7:18:37:23:5d:71:b0:38:00:d9:f8:fa:4b:0e:bb:0c:
         27:b5:df:03:b4:ed:69:84:98:b3:f3:52:77:74:58:4e:3a:c5:
         45:8c:fc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:52 2025 by rpki-client