Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
File:                     6-T90XLfhZdWyoUd3eE2cPSBfuA.mft (raw, json)
Hash identifier:          YNxNj2AiOapZ7FVvN342V0+iY5l8sZ0+0kGRi4QnQmY=
Subject key identifier:   64:E4:79:2C:B7:82:A3:A2:2A:6B:9C:38:41:0A:76:84:6D:8A:52:BF
Authority key identifier: EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0
Certificate issuer:       /CN=ebe4fdd172df859756ca851ddde13670f4817ee0
Certificate serial:       0197B632A4186996CDEB4093B312072004A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 11:01:01 +0000
Manifest this update:     Sat 28 Jun 2025 11:01:01 +0000
Manifest next update:     Sun 29 Jun 2025 11:01:01 +0000
Files and hashes:         1: 6-T90XLfhZdWyoUd3eE2cPSBfuA.crl (hash: IG4kQ/5YqJois4fVH6KkYGsoMCCFMKQTfNi+oV3zNxA=)
                          2: Z9aXtfZOLHLUJRH7QqPi1mqGj3U.roa (hash: pwgtrLZ9ZWVWEXXmTENsA08mvoGu1JfrrcaBMhazJW4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 11:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:a4:18:69:96:cd:eb:40:93:b3:12:07:20:04:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe4fdd172df859756ca851ddde13670f4817ee0
        Validity
            Not Before: Jun 28 11:01:01 2025 GMT
            Not After : Jun 29 11:01:01 2025 GMT
        Subject: CN=64e4792cb782a3a22a6b9c38410a76846d8a52bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:09:08:57:85:cd:17:6c:20:e6:e8:40:20:fc:
                    53:7b:67:79:ce:d6:0e:af:a9:bf:24:d3:c9:eb:44:
                    35:47:ec:b3:9b:d7:ba:0e:d2:41:6e:45:b5:e9:62:
                    80:ae:6b:79:4d:f2:a9:cf:e8:23:b0:2b:0f:1c:a6:
                    8d:58:60:1a:3b:7e:1f:91:f7:53:0a:46:a1:47:0c:
                    59:38:71:04:c5:8f:9d:a2:60:b7:9b:cc:00:b7:a2:
                    a8:aa:43:18:c4:e7:9e:c3:b5:37:66:b6:99:d3:4a:
                    75:98:70:04:a4:1e:06:31:3b:f7:5c:54:a2:8d:da:
                    08:92:40:37:65:a2:96:5f:08:d2:ec:1a:f4:55:5b:
                    2c:fc:1e:83:7d:bc:62:67:31:47:05:ed:bc:ee:10:
                    d4:30:5d:af:d5:12:a3:56:d4:4f:40:97:a7:5f:a3:
                    af:59:3e:00:35:9d:43:2d:b1:4c:0b:e6:ed:bb:00:
                    c7:4d:15:9c:f6:5e:5c:2f:7a:a9:2e:a5:86:df:2e:
                    44:5f:0a:fe:6f:b7:1b:03:cf:d4:5f:54:cf:96:a9:
                    37:a7:90:bd:e4:f8:d5:4a:30:87:8b:99:bc:b7:4d:
                    13:1e:e8:23:ad:42:b5:5a:92:d8:eb:0d:75:36:6f:
                    7b:0b:5f:f0:c7:23:7f:69:22:1e:6c:97:39:06:d8:
                    82:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E4:79:2C:B7:82:A3:A2:2A:6B:9C:38:41:0A:76:84:6D:8A:52:BF
            X509v3 Authority Key Identifier:
                keyid:EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:8b:7a:c7:b6:0a:13:1b:14:3c:0f:b2:b1:02:1c:82:07:86:
         4e:ac:c8:43:ef:56:cb:02:39:47:20:89:ed:91:64:fc:32:dc:
         87:1e:2b:42:02:06:cd:7a:8e:f4:0a:49:29:a0:be:7b:67:85:
         67:40:91:7a:c2:62:b3:e6:f6:28:60:a1:d4:09:c1:f6:74:77:
         a1:bf:64:e2:34:e8:b0:be:da:11:16:6b:02:83:f9:19:a0:1e:
         69:27:22:8e:d6:d3:b1:4b:c2:84:51:77:23:c8:58:51:ac:10:
         a4:f7:8a:b9:ee:5c:4b:a1:4f:3b:b4:dc:0f:c9:32:86:fc:8b:
         38:a9:7d:d5:63:ca:bb:62:a0:f5:65:4a:73:21:b6:ea:c3:43:
         50:e5:6b:c7:83:7a:11:d9:c5:5e:b0:eb:e2:f2:b7:73:62:16:
         14:b5:53:48:9a:21:30:32:eb:6f:1b:1d:23:70:dc:ca:0b:70:
         e0:8d:42:c0:be:98:6c:33:7a:e5:01:ed:2c:35:40:a4:c7:f1:
         f1:68:96:a4:85:9a:b0:48:c9:b9:d2:0f:24:e0:f4:42:16:cd:
         6c:a4:f8:3a:56:17:c6:57:c6:a1:16:6c:91:07:69:96:28:49:
         77:be:12:9e:bd:52:e5:a5:7c:26:bb:7f:b4:47:ab:7f:ac:ef:
         df:30:7d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:40 2025 by rpki-client