Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
File:                     6oPjDy1vznWmZqLQtja0bsmYocs.mft (raw, json)
Hash identifier:          /qziuz6pv/C/AZ8IFSiPUH6qTisdjnTv6xC5EDKKIro=
Subject key identifier:   0B:7E:92:F8:6B:58:04:22:05:F4:3C:5B:16:BA:AE:C6:DF:81:3D:F0
Authority key identifier: EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB
Certificate issuer:       /CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
Certificate serial:       0197B6A0FDA8F9CE7E80102987BC00FF6DC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
Manifest number:          0DD6
Signing time:             Sat 28 Jun 2025 13:01:33 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:33 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:33 +0000
Files and hashes:         1: 6oPjDy1vznWmZqLQtja0bsmYocs.crl (hash: C9B2ip2Rc3oX6GB77SuFCDfgrfmTnMhMnFJmnWH7h3o=)
                          2: okg73byO9ZwK73bf1nHKxWy9BQc.roa (hash: UhLrY21oOL3tD3JEsUSjif+xKx57LK0Vj7G+Yv+lBBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:fd:a8:f9:ce:7e:80:10:29:87:bc:00:ff:6d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
        Validity
            Not Before: Jun 28 13:01:33 2025 GMT
            Not After : Jun 29 13:01:33 2025 GMT
        Subject: CN=0b7e92f86b58042205f43c5b16baaec6df813df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1f:85:83:7b:44:90:d9:27:e3:ba:f6:f9:91:
                    89:b5:75:cd:95:7f:35:21:16:88:05:b2:32:fe:7d:
                    d8:ad:f0:06:95:80:5e:35:28:e9:73:0f:2f:e2:70:
                    41:2d:05:cc:b1:78:4b:d7:13:b6:1c:ba:9e:be:77:
                    a6:da:80:79:0b:34:63:38:6c:0a:02:84:06:00:5d:
                    9b:52:37:d5:b7:60:58:eb:cf:e5:58:c2:1c:83:e8:
                    99:f1:76:b2:42:04:dc:3d:a4:d7:e2:4d:9f:11:0d:
                    3d:53:11:15:c4:b3:77:1f:e7:06:db:cd:5d:65:4e:
                    8e:fc:f0:a2:bb:20:0e:0b:f1:33:46:bd:30:ba:c4:
                    42:e9:fc:06:88:38:5f:d5:2a:15:12:ff:d6:d2:6e:
                    ef:ab:e4:11:f8:c8:17:84:eb:ee:8b:cc:61:95:7e:
                    74:f4:cf:e4:aa:e5:7a:3d:65:fb:b4:ee:e7:c0:80:
                    71:24:72:7c:f3:1b:9e:1a:c8:55:e6:f5:e9:03:62:
                    ff:2e:84:27:85:d0:2c:e0:6e:18:63:8b:e4:3d:38:
                    da:35:c1:c1:ec:c0:18:6b:35:64:d1:12:8b:01:eb:
                    41:30:97:4b:27:4f:a3:3b:5b:c5:81:89:d9:f6:01:
                    c6:4c:21:22:6f:1f:1b:88:bb:7d:8d:39:00:c4:06:
                    fb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:7E:92:F8:6B:58:04:22:05:F4:3C:5B:16:BA:AE:C6:DF:81:3D:F0
            X509v3 Authority Key Identifier:
                keyid:EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ce:30:bc:59:08:d8:34:63:f2:8a:86:0b:09:19:40:e7:01:
         66:71:93:27:71:da:e3:36:1c:07:3c:17:58:a7:09:78:ff:ac:
         b4:0a:5c:bf:c6:0a:bd:c0:88:87:2f:23:24:a6:43:1d:cb:f9:
         d0:6b:19:0f:e0:03:8f:69:b2:57:9f:bf:bf:63:b1:30:1a:0d:
         5d:64:2f:f1:51:5c:cc:99:49:a2:58:75:75:67:fa:01:65:87:
         e1:fb:89:25:59:7d:de:0f:a9:dc:c0:75:2b:dc:95:ee:97:47:
         b6:52:aa:5e:90:7a:d6:7c:58:8f:c4:a0:c2:a6:94:28:55:12:
         ca:37:39:2d:01:ca:ef:dd:cd:43:4d:ec:98:6f:10:ac:17:3c:
         c8:16:a3:3f:29:da:9d:39:ab:6e:45:03:b6:84:ca:52:ed:c9:
         aa:31:44:76:80:b8:9d:cc:e2:24:8a:7e:87:90:eb:22:d3:7d:
         cf:85:51:ac:d9:42:1d:1d:a5:1d:de:15:72:ba:75:36:39:9c:
         c8:17:ce:23:f8:8f:5a:56:1b:f1:24:2f:47:88:a8:ab:61:17:
         cc:13:9e:1e:55:98:b5:b0:4e:5b:1f:4c:29:55:bd:ad:88:e9:
         8d:d6:2e:09:c7:01:e4:fb:6a:ff:6f:c5:14:83:27:8f:77:ec:
         e0:2f:53:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oP2o+c5+gBAph7wA/23HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhODNlMzBmMmQ2ZmNlNzVhNjY2YTJkMGI2MzZiNDZlYzk5
OGExY2IwHhcNMjUwNjI4MTMwMTMzWhcNMjUwNjI5MTMwMTMzWjAzMTEwLwYDVQQD
EygwYjdlOTJmODZiNTgwNDIyMDVmNDNjNWIxNmJhYWVjNmRmODEzZGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR+Fg3tEkNkn47r2+ZGJtXXNlX81
IRaIBbIy/n3YrfAGlYBeNSjpcw8v4nBBLQXMsXhL1xO2HLqevnem2oB5CzRjOGwK
AoQGAF2bUjfVt2BY68/lWMIcg+iZ8XayQgTcPaTX4k2fEQ09UxEVxLN3H+cG281d
ZU6O/PCiuyAOC/EzRr0wusRC6fwGiDhf1SoVEv/W0m7vq+QR+MgXhOvui8xhlX50
9M/kquV6PWX7tO7nwIBxJHJ88xueGshV5vXpA2L/LoQnhdAs4G4YY4vkPTjaNcHB
7MAYazVk0RKLAetBMJdLJ0+jO1vFgYnZ9gHGTCEibx8biLt9jTkAxAb7cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAt+kvhrWAQiBfQ8Wxa6rsbfgT3wMB8GA1UdIwQY
MBaAFOqD4w8tb851pmai0LY2tG7JmKHLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm9QakR5MXZ6bldtWnFMUXRqYTBic21Zb2NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNjljNzUtODM5MS00ZDkzLWIzNzgt
M2ZhMTVhMzNmNDI5LzEvNm9QakR5MXZ6bldtWnFMUXRqYTBic21Zb2NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jNjljNzUtODM5MS00ZDkzLWIzNzgtM2ZhMTVhMzNmNDI5
LzEvNm9QakR5MXZ6bldtWnFMUXRqYTBic21Zb2NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcM4wvFkI
2DRj8oqGCwkZQOcBZnGTJ3Ha4zYcBzwXWKcJeP+stApcv8YKvcCIhy8jJKZDHcv5
0GsZD+ADj2myV5+/v2OxMBoNXWQv8VFczJlJolh1dWf6AWWH4fuJJVl93g+p3MB1
K9yV7pdHtlKqXpB61nxYj8SgwqaUKFUSyjc5LQHK793NQ03smG8QrBc8yBajPyna
nTmrbkUDtoTKUu3JqjFEdoC4ncziJIp+h5DrItN9z4VRrNlCHR2lHd4Vcrp1Njmc
yBfOI/iPWlYb8SQvR4ioq2EXzBOeHlWYtbBOWx9MKVW9rYjpjdYuCccB5Ptq/2/F
FIMnj3fs4C9TJA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:51:53 2025 by rpki-client