Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
File:                     xn6d6Ogmze4OZfYiWDQ0uBzze60.mft (raw, json)
Hash identifier:          kJBAxuRXAqIB+7lEwNQw35f1YNGPFMq9zBj14EaXOlg=
Subject key identifier:   A6:0C:3F:28:44:8B:D8:A0:8C:B6:51:D6:4A:8E:D5:C9:6B:B3:68:19
Authority key identifier: C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD
Certificate issuer:       /CN=c67e9de8e826cdee0e65f622583434b81cf37bad
Certificate serial:       0198D54DC5C81343C85C20A434CDFE8EADAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
Manifest number:          15DB
Signing time:             Sat 23 Aug 2025 05:01:40 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:40 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:40 +0000
Files and hashes:         1: KBNP_aX1ZMDHHxXviik6zRQbRlU.roa (hash: ernLTnCJ2sF6KL9+yko9XJyEyeHNKyi2S9R/ACM8LHw=)
                          2: xn6d6Ogmze4OZfYiWDQ0uBzze60.crl (hash: tnHTk3DvBXUa7NVDJ4f8Rtj8KSUN0lnLBz0oCIvZ4qQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:c5:c8:13:43:c8:5c:20:a4:34:cd:fe:8e:ad:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c67e9de8e826cdee0e65f622583434b81cf37bad
        Validity
            Not Before: Aug 23 05:01:40 2025 GMT
            Not After : Aug 24 05:01:40 2025 GMT
        Subject: CN=a60c3f28448bd8a08cb651d64a8ed5c96bb36819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a1:0d:2d:83:2f:d2:c2:21:9b:d6:02:25:69:
                    8d:3e:d9:5a:5e:ea:ec:c0:bd:ec:cf:26:41:52:2d:
                    a2:6d:fa:74:f9:11:f3:c5:23:f8:38:ef:12:8d:b8:
                    77:65:d9:82:11:fa:8a:92:2d:17:51:11:c5:54:c1:
                    97:84:1d:a0:79:0f:7b:e4:a2:19:b5:2f:e3:2e:bd:
                    37:5e:38:14:68:85:c0:8d:e5:71:f6:e1:02:de:fd:
                    b5:bf:de:70:bb:7f:09:5f:e3:c6:29:21:c5:f3:7d:
                    73:63:f0:ff:9f:1c:d1:c3:8d:6f:6e:08:95:42:04:
                    c0:dc:5a:53:c3:0d:fd:85:44:ae:1f:99:d4:66:b7:
                    a6:13:e0:d7:0a:78:38:9d:41:b0:6d:9a:e1:af:2b:
                    89:40:6c:15:f0:57:85:6d:cd:10:77:fd:c1:dd:ee:
                    a7:aa:63:5d:34:b1:82:45:d4:8e:c5:08:d7:91:2e:
                    d7:06:a7:0a:8e:15:ad:9a:9b:88:9b:00:1a:9d:65:
                    4c:9a:ab:93:b5:87:6b:35:ec:e6:a1:e2:ba:a7:05:
                    e9:22:92:a2:78:87:17:03:96:03:6c:70:1c:cc:83:
                    ee:c0:02:e8:e5:fe:0b:97:4c:83:89:10:33:89:59:
                    b8:f0:08:d0:7c:d3:d2:e9:4a:77:25:23:38:8e:08:
                    16:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0C:3F:28:44:8B:D8:A0:8C:B6:51:D6:4A:8E:D5:C9:6B:B3:68:19
            X509v3 Authority Key Identifier:
                keyid:C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:4f:e1:70:61:7d:4c:0d:42:43:d1:12:02:95:dc:cd:d8:15:
         a5:a5:43:24:ab:68:4a:30:10:9d:c7:f6:a8:cc:d0:5f:c3:2c:
         71:4d:c5:4e:a8:0f:b2:5f:6a:43:95:13:79:75:7d:21:f8:4b:
         2e:81:98:3f:d0:32:42:69:86:6d:a1:f2:18:76:42:df:7b:fb:
         ee:df:30:fd:50:88:c0:6f:d8:b5:74:fd:b7:60:62:9e:0d:68:
         b7:cb:b8:79:1a:ef:df:5b:d9:19:06:ef:63:26:51:49:d0:e7:
         95:94:84:28:62:a2:a3:0e:78:b7:bc:00:a2:89:89:7a:c5:b0:
         a5:78:3a:01:b7:2d:19:22:7d:43:9d:3b:fa:97:e8:41:79:4b:
         e0:2d:a8:ca:c9:4c:e6:6e:28:64:a9:7a:b8:0b:f6:3e:ca:03:
         22:97:e9:98:d5:32:a0:c5:1f:24:a8:76:d1:06:da:25:63:23:
         ac:6f:d8:39:78:8e:33:85:e3:cc:35:32:db:59:10:70:1c:c8:
         f1:b1:ad:5c:e8:4e:71:32:7a:39:a8:89:d5:82:c3:aa:81:35:
         87:d7:f2:43:f2:a2:7b:e8:f1:82:a6:00:44:5e:6b:58:54:cd:
         f3:a3:1e:c3:cb:f7:f8:04:c1:2f:37:f5:ab:94:e9:7a:fc:e4:
         8e:ce:3f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:55 2025 by rpki-client