Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
File:                     p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft (raw, json)
Hash identifier:          Re+wFGmWIxCdURmFpGhNhWpmV/XQG3lUJrFDHQZYQqc=
Subject key identifier:   67:AA:78:39:E8:40:4E:53:23:AE:09:95:05:F0:34:EE:4E:D9:40:A4
Authority key identifier: A7:A7:06:27:BB:45:CD:6C:71:F2:20:19:22:6A:6A:18:95:22:2F:07
Certificate issuer:       /CN=a7a70627bb45cd6c71f22019226a6a1895222f07
Certificate serial:       0198D5838BC921E2378687643929E66639F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
Manifest number:          05B5
Signing time:             Sat 23 Aug 2025 06:00:24 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:24 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:24 +0000
Files and hashes:         1: EnZTRjVsyeH5YvN_IXdrjMInto8.roa (hash: dGNdfgQT3ZLKhZ/v9I6RHyrRDvkswkwt2I+OFKs6hJw=)
                          2: p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl (hash: HKkKAecOa7zgB2dKlx62mDFNpPKimoA687Fq9SAKGOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:8b:c9:21:e2:37:86:87:64:39:29:e6:66:39:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a70627bb45cd6c71f22019226a6a1895222f07
        Validity
            Not Before: Aug 23 06:00:24 2025 GMT
            Not After : Aug 24 06:00:24 2025 GMT
        Subject: CN=67aa7839e8404e5323ae099505f034ee4ed940a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:36:51:f2:03:69:69:80:c3:a9:5a:46:66:7e:
                    3e:9a:9d:f2:6d:e7:c0:e3:fd:51:de:88:9a:d3:73:
                    72:b7:e1:f7:23:13:42:a1:9e:06:84:b3:05:ca:61:
                    0e:99:66:3b:68:d1:d7:5e:cc:fa:a8:c7:c1:df:62:
                    cc:fd:e1:4f:08:a1:78:79:6c:e2:e1:57:c0:4e:db:
                    3d:0e:c0:8c:52:76:84:89:3d:ab:ed:5c:e7:49:01:
                    ff:d1:5c:49:a9:51:e2:bb:3a:62:a1:ce:17:f1:95:
                    a2:02:84:d8:9c:16:fc:d9:14:65:f0:bc:36:80:c9:
                    24:e5:4a:a1:5b:b1:17:9b:fa:0d:61:1e:22:2a:0e:
                    5f:6b:72:d8:87:d5:ae:06:5e:ab:fd:b8:9b:45:4a:
                    7a:ca:58:b4:cb:f6:4c:f8:cd:1c:3d:43:c8:48:68:
                    cd:31:6e:1e:b8:6c:41:c7:d5:ff:2d:8d:03:bb:5d:
                    69:15:ee:2b:ea:f7:cd:f5:4b:47:f5:95:c6:4c:e8:
                    ca:9e:5f:c7:ba:09:4a:5b:cd:0b:f5:d3:c0:e4:3c:
                    06:0a:06:78:ce:a1:8c:5f:9d:dd:b1:7e:1f:c6:76:
                    41:84:42:1d:09:3f:90:bc:12:ec:b8:7a:86:3f:64:
                    69:bc:f8:23:a0:ca:4f:77:b5:15:aa:9f:78:bf:29:
                    8a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AA:78:39:E8:40:4E:53:23:AE:09:95:05:F0:34:EE:4E:D9:40:A4
            X509v3 Authority Key Identifier:
                keyid:A7:A7:06:27:BB:45:CD:6C:71:F2:20:19:22:6A:6A:18:95:22:2F:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:52:5b:2f:68:d4:85:61:85:dd:44:c0:25:60:14:0d:ac:cf:
         65:78:95:03:0a:d3:d5:18:26:62:25:07:4c:1c:a5:fd:3f:7e:
         28:c3:cf:b9:88:26:92:60:a1:09:a6:d2:df:0a:42:52:ad:6f:
         a5:6d:4b:99:a1:c4:f8:8b:bc:b5:ee:64:86:dd:3d:2b:cd:7e:
         21:82:2b:41:e9:c4:7b:de:6c:9a:84:b1:e3:db:a4:fa:3b:57:
         1d:5e:75:41:88:1e:99:19:b5:95:c9:66:45:54:8f:2f:31:7d:
         a6:53:86:36:e3:ec:ad:97:f7:52:33:ee:75:28:9a:04:46:c4:
         49:4c:aa:4a:ab:94:8d:40:30:e4:1d:a6:25:70:be:fa:2d:cb:
         ff:23:b1:fd:a1:c0:1e:6f:9b:9e:9c:d2:94:3b:a3:18:99:e3:
         aa:58:c0:28:bb:18:5b:4f:4b:f4:23:21:76:0e:a2:4d:1f:48:
         1a:3b:5c:c0:3b:a3:0e:9b:be:a9:3c:c3:f7:8e:7d:3d:89:49:
         f5:d1:6b:a9:8d:84:5d:40:cd:97:42:0c:6a:48:d7:58:46:10:
         3b:62:79:03:e4:0b:8b:c0:8b:35:dc:65:32:1e:5a:33:2b:e5:
         0a:5d:a3:3f:7b:5c:36:fd:41:b9:90:44:77:f6:b6:0d:75:39:
         2e:69:6a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:52 2025 by rpki-client