Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
File:                     aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft (raw, json)
Hash identifier:          UAdXT6f5lLDHItqGF2jRLrRBKok8EJmYrsmrRo7eGO0=
Subject key identifier:   A1:88:6B:D2:C9:DF:CF:80:9E:5E:D1:7D:8E:02:A7:3D:54:DD:69:18
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Certificate issuer:       /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial:       0198D472BF82A94FBE71F293EB034F6662F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
Manifest number:          0786
Signing time:             Sat 23 Aug 2025 01:02:26 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:26 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:26 +0000
Files and hashes:         1: 1-rRPCopFYmDMNDGALSnqCobspg8.roa (hash: 6hVXHifql97bRcIsJvQpXwPkBPemWPvtCyhSEbh0CDo=)
                          2: 8IS2SGLZvuejfiILX_HZy4EbxZ8.roa (hash: rsd4qoWJU7YOxhWnkiEgm/sIgrMf/LleiBk2mG4ubQg=)
                          3: CSQOd1Ivsq7SauN1-IwPUSzYm48.roa (hash: dGIueTuGLpuTY7iHF/OWsqSj5IRgJq+ixisf6vrNlv0=)
                          4: MUEabXTH7J0BwsIog7I6OfzuzkI.roa (hash: 9N5LvBOATRgD8zsq92oJDhXIXtyB1ta37GI9iUSZndY=)
                          5: aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl (hash: rUx9Nxs3ezxVuDms6M9QVznmUgL4IKkoPxAPt3jLmyw=)
                          6: bG3vNkLD1dncPLRJXBDHmzwN_FU.roa (hash: VPIXy61pzu1bOvlxodUgzAm3JOVOrTVgSVJvZhBRPLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:bf:82:a9:4f:be:71:f2:93:eb:03:4f:66:62:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
        Validity
            Not Before: Aug 23 01:02:26 2025 GMT
            Not After : Aug 24 01:02:26 2025 GMT
        Subject: CN=a1886bd2c9dfcf809e5ed17d8e02a73d54dd6918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:96:b2:e7:2f:47:0d:c8:5b:1b:25:ff:82:3b:
                    ee:1b:8a:d9:5f:a4:5b:d4:ab:df:d7:00:c1:99:07:
                    06:7c:52:65:e4:cd:74:a2:11:c8:60:93:87:2e:89:
                    32:3c:d6:dd:76:ba:3c:4f:d4:5f:1f:e1:a9:36:da:
                    67:a8:c2:2b:eb:3a:23:9b:b3:f6:d0:4f:dc:a9:f1:
                    80:a8:0d:ef:dd:7b:fd:dd:54:97:02:7c:92:94:ec:
                    60:7b:5e:05:a8:ad:3b:99:67:6c:b4:8f:81:b0:4b:
                    23:73:1c:68:0e:b9:76:34:e6:44:80:90:4f:a9:01:
                    90:c5:d9:08:19:c3:f8:c6:ff:bd:f6:e1:f3:f8:b3:
                    cb:01:74:ef:93:6b:65:59:f8:bc:78:ce:de:45:7d:
                    e6:dc:02:45:f7:d2:c3:ea:b2:6c:97:a4:df:2b:c5:
                    2f:52:ab:3a:7d:fd:25:cc:7e:eb:d9:c8:a5:6c:2c:
                    35:73:62:ef:0d:1c:0a:6a:8b:43:03:58:94:a0:8f:
                    7c:7e:bf:e0:5a:fd:83:78:84:22:b7:d8:65:bb:e0:
                    0b:36:3e:3c:2f:38:0e:32:84:09:c2:93:24:d7:a0:
                    87:89:20:d7:c7:4a:7c:27:8d:ce:f7:e7:4d:88:96:
                    b3:7a:43:eb:0e:57:74:c6:61:4f:e1:7a:e4:84:54:
                    b0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:88:6B:D2:C9:DF:CF:80:9E:5E:D1:7D:8E:02:A7:3D:54:DD:69:18
            X509v3 Authority Key Identifier:
                keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:38:cf:e1:72:27:b1:b0:3f:03:26:9c:6a:b2:1e:99:fb:0b:
         4a:ec:a0:56:f0:5f:37:87:44:b8:d4:74:b0:a3:45:3f:10:1d:
         8a:bf:1a:19:ed:64:d8:bc:ed:6a:40:ef:ef:69:1f:ce:c1:6d:
         cd:1f:d9:57:4b:68:11:54:18:34:ad:fc:a6:04:59:7a:20:3e:
         12:1a:11:8f:54:42:14:1a:c4:83:aa:30:c6:07:3d:74:8b:e0:
         77:77:8d:8b:08:f2:e6:97:0d:09:32:04:09:b4:6c:bb:4b:b0:
         7d:2b:b4:78:2b:d4:26:4d:2f:5f:ee:f8:73:3d:02:94:f2:1e:
         90:20:60:58:59:17:9b:f2:77:07:a1:75:2a:4f:6c:c2:fa:fa:
         a2:be:3c:d6:f2:29:bd:d2:d0:02:43:a6:81:42:77:85:87:98:
         65:ae:3b:2b:5c:a7:2e:3e:38:00:0a:a5:05:86:c6:91:53:ca:
         ec:1c:43:4c:e8:c6:ec:a5:c4:ee:f6:e9:47:96:72:15:dd:dc:
         bc:2a:bf:64:d2:da:11:1f:56:31:72:a1:e0:a8:6c:25:4b:fc:
         b2:df:4e:38:05:18:52:3e:13:66:49:00:a5:9c:2c:7d:41:60:
         aa:64:72:c8:d3:92:64:bd:e4:4f:4e:d5:f6:de:1b:df:4d:39:
         19:62:93:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:46 2025 by rpki-client