Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
File:                     6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft (raw, json)
Hash identifier:          nG17zUj6TYSEZ8oXZn622TZat165fxbcLwxg4gVMFB0=
Subject key identifier:   3B:08:9D:AD:DD:E8:CD:62:64:15:31:DB:EE:9B:59:7E:F1:80:BD:EE
Authority key identifier: EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC
Certificate issuer:       /CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
Certificate serial:       0197B70ECA65E364E04C351D9A3E6589BC66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
Manifest number:          0C96
Signing time:             Sat 28 Jun 2025 15:01:29 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:29 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:29 +0000
Files and hashes:         1: 6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl (hash: gVJMZWaSGuNvYkINX/VSgG6KOwmTbloZtVcwJNO1gRw=)
                          2: DXb8g5-PypIL6EwTwBa5JTnxBKo.roa (hash: tOPfESlkZC7S5BHJvSJ7lgd26XQAVlBllx5t/n2Rb7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:ca:65:e3:64:e0:4c:35:1d:9a:3e:65:89:bc:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
        Validity
            Not Before: Jun 28 15:01:29 2025 GMT
            Not After : Jun 29 15:01:29 2025 GMT
        Subject: CN=3b089daddde8cd62641531dbee9b597ef180bdee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ae:4a:ef:ad:5f:91:b8:e2:25:8f:1a:70:58:
                    38:26:fa:5c:72:89:3d:88:67:6b:7e:eb:40:9d:bf:
                    76:d4:cc:6b:ec:f0:90:c0:97:3f:9e:0d:8d:e5:47:
                    78:c2:ab:fb:0a:39:39:2f:3c:97:ad:d7:1d:68:51:
                    1c:77:a6:b4:17:57:aa:94:1f:ae:69:40:78:63:8c:
                    ec:90:12:fa:76:7a:0a:79:b2:67:6b:1f:36:54:50:
                    f8:05:da:0b:c1:49:f3:ab:12:7b:a6:04:65:90:de:
                    09:3e:22:28:32:6a:4f:df:ff:4a:2a:36:1f:a7:f7:
                    32:ef:08:3f:a6:3c:f2:ed:a7:ef:04:84:4e:fa:77:
                    59:0c:6a:d2:6b:95:18:f3:0a:51:d1:a6:f0:56:30:
                    56:d5:3d:7d:b4:a4:00:7e:88:0b:4b:e4:cb:a8:9b:
                    b2:7c:b7:10:41:d6:31:45:e6:20:31:4f:74:0e:79:
                    ff:0c:05:6d:68:54:e5:b7:c1:bd:45:ef:bb:b4:1c:
                    1b:4e:09:68:ec:2e:2f:f4:e4:f4:e1:33:ff:ef:cc:
                    9b:eb:23:15:78:81:4a:d5:fe:d2:35:9d:94:ec:24:
                    c6:8b:6c:73:27:35:44:3d:66:89:b5:c7:82:6f:fa:
                    dc:3b:cc:17:7c:ce:fa:1a:ea:cd:ed:5c:67:61:9c:
                    0b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:08:9D:AD:DD:E8:CD:62:64:15:31:DB:EE:9B:59:7E:F1:80:BD:EE
            X509v3 Authority Key Identifier:
                keyid:EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:30:48:da:d4:c3:41:2a:54:4e:fe:00:24:0e:a9:ff:5d:40:
         0f:20:0a:f8:95:b3:af:5a:b8:9a:38:0c:d2:6c:83:db:1e:ac:
         81:e0:a9:7f:50:ca:00:e4:b4:d1:3c:36:0a:2f:2d:9f:b2:61:
         42:1a:06:79:cd:2a:3c:d0:af:b2:78:5b:9b:34:38:35:f2:8c:
         9f:ec:2c:b4:04:0f:cc:7f:8e:d6:e7:49:1f:98:bc:ba:82:d8:
         61:95:5f:67:ff:c1:b9:dc:44:27:fd:75:03:b0:fb:0b:8d:09:
         f4:dc:24:92:73:fb:1c:10:20:10:ab:d3:53:b2:8c:a3:09:a7:
         fd:4e:28:4b:11:da:80:65:0f:ce:2b:b0:bb:45:72:6a:ef:aa:
         10:8f:9a:19:b7:52:c5:e8:72:10:16:8b:ca:e5:90:3f:98:2f:
         72:0b:be:3d:6f:c5:33:04:87:89:fc:d0:07:75:2a:e5:2a:5b:
         17:3a:a7:39:57:69:d4:4c:ff:f4:77:fc:1d:e9:93:a6:e9:fb:
         34:3f:1c:b6:48:99:9b:22:3d:3c:c9:d9:53:db:51:0c:07:a4:
         bc:e8:b3:62:2a:35:89:0d:c7:5c:d8:0c:65:46:b1:2d:28:33:
         ff:cc:15:76:92:45:60:ac:e6:17:49:7d:e1:b4:0c:ba:eb:f8:
         c5:1c:ed:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:14 2025 by rpki-client