Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
File:                     6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft (raw, json)
Hash identifier:          UB/38kxn0Po6XOdkPchAgzaUcKTcHJdIodeqJCsLqrc=
Subject key identifier:   F8:D1:64:9D:DC:08:CA:1E:C1:8B:70:D6:BB:8A:A3:6F:8C:BF:3A:60
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Certificate issuer:       /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial:       0198D4A7D8B05B243BE31425129E60F2C932
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
Manifest number:          08B4
Signing time:             Sat 23 Aug 2025 02:00:26 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:26 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:26 +0000
Files and hashes:         1: 1oQvv0jSoSu53ss0BELp3o4jFmM.roa (hash: I2MUurYubFmbZ7GZ8bLKTpYRYZB3nGjsRDVL/GxzZxA=)
                          2: 1upwVvOth0ESwzIfWwpLuCD_3Es.roa (hash: 6LIM0TJ502zyJgxqFVPqSxya65Y/9B+s8bx0dBkgTEM=)
                          3: 3uRumfjw_VNGN2REHhoEdbfv8Q4.roa (hash: EtjitrJqAc6g+S42UzHgJmm7oOPTI5kPog/yLqbDlSw=)
                          4: 5CMiZU4pAmiJpfvxBLsG5vubIRA.roa (hash: +oEkF/3njM8s7nBWqWOxZXJl1ZryJZVB3JA4uLNAhxw=)
                          5: 5VfBBY8o-FF5RY7s0zaWFHorhdI.roa (hash: MEJ7BA63gOy4ZsbxMVinMlFma6agN7MnA7HJhj46ixE=)
                          6: 6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl (hash: t8J5HmSIUwo6pfnv3i8mitZPhelQihWocQWUQMcB6oQ=)
                          7: CNfOQtFy5bcmzrS_qJb0wM-XGTo.roa (hash: qRxGHL7+7l2r2M2j/jxjm7d+zfmvT9xzQqUWIWezpeA=)
                          8: CkJjv0vYoRHvbkRXlkiWZ0-_O2w.roa (hash: sn3GvdltPLasZQw3sHAj9RA9PaVADblnC7vtnVoU5qc=)
                          9: JPT84J8sgcKOXjYFNH6TAuUvNk4.roa (hash: e3bD4e8Uvkqff5stQpbUdZdhMmIlcTkZivV1M7IJw9U=)
                          10: NpWIoMyjqyMb_Zaw1o9kw3JDDi4.roa (hash: wMXhMaV/pVnTHbpuxwyjif970THZSh4/vwdthTw+gqc=)
                          11: RmnXvYZt-mmbFhnuP7k2fQRabUA.roa (hash: gHLzUci7yfQ24zvXoIAPAC4wOBAEeqj8cAzMrTtaW54=)
                          12: W6vwiq-voKk2QAWV9ym9B7kGas4.roa (hash: 7ovXfRXZRQGLha60QudJ3CQy5egOSDRax/h7CJvWjlE=)
                          13: ZhZRZT8ZPo8M2a9MIYRNwZyhQ8w.roa (hash: HBtX5WX5rNstuEn0JYCNOPxyzZKZRsOHcscK1aN6ogc=)
                          14: aIYlg9Z6r6J1_C5VfiKtlldGRrI.roa (hash: 1xF0uCQBhw+1hm6OeRG2O6mFUnL8nVyDlkoB9bdADr8=)
                          15: bPxYWT1wnngqDhHRNDBAtz9BJgs.roa (hash: nWexsycSC4zjDn7e4SR1Q+j4Ka0KKXzBUyIVuPqcH7c=)
                          16: fMzNpGVWR81PY-itrM6ZWrxbxR4.roa (hash: JzHaCWidPtRsdVXuThinCzpkb7ljHyzzEpjdEgADrSY=)
                          17: j3rP9aBAAFx9Oa-zskJ_4NI30kU.roa (hash: AifBem/jHqCSEautocNlw624ircJQkhdhRhkcQFuj9Q=)
                          18: juN5scO2Se5ibgJWhuefFYhuow8.roa (hash: 7FUVxUG+oCbfQXWhPZm065agLV2zBdGhwYNN6FPH3LM=)
                          19: l0dBWs1YlE17AhstVW2VWnIvp0s.roa (hash: iWBATYIpP0dSJktBmp9NkaeXH+SClXQSdpBWrPAbzlM=)
                          20: ob2zBPNLtLFzxUuttNyvYQ_i-K0.roa (hash: ahdcq6qcFuk7beprX/QZiv/lO1jQP9BjCIRZOB7i01o=)
                          21: ocjyC2jwDA6Rk88oFGWfNBa6O7c.roa (hash: up4NQEqOBhPBKs8ybW1tNgCMgHUS+uI7TPV3nH5jRFI=)
                          22: p52ECLHacG3z-Gg5eipSNQK8sHg.roa (hash: iCIbKxHFKwisNq/0rdSKxF6SJ72XE0XsI1+USxkuvdQ=)
                          23: t5YmhSpQh7hJVJ9rbPKosrK995g.roa (hash: 46VBCXnM3N7gfr2V6b7t3B2sNT8I6Oa9hSbR5q+FAqY=)
                          24: vfHbIoTnUxhnAwnrFKAEBgGqbIw.roa (hash: m840ACktEyZoGVV96T6Ly3VBkVNyCX1wXuDPZajskuA=)
                          25: xc-ziwt5L4IQBhtwr3KHv3MBn_E.roa (hash: Jan/MaJ/3rtTJkw1eayxGH+OJS2zK9UT117u0//wABw=)
                          26: xpX6hcRMPz87CNu8WZKKgI6VmHc.roa (hash: 2GtFRUTOon6G4VNM6WyrbperIlxaZ7rGbYCzZWHktHU=)
                          27: yrw-APdDdrKZbC_GG5pC5x9IuaE.roa (hash: 1L4TnTdUXnzWd1fgMXk6voGBQgtXreTq+fSZW4h+FH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:d8:b0:5b:24:3b:e3:14:25:12:9e:60:f2:c9:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
        Validity
            Not Before: Aug 23 02:00:26 2025 GMT
            Not After : Aug 24 02:00:26 2025 GMT
        Subject: CN=f8d1649ddc08ca1ec18b70d6bb8aa36f8cbf3a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:73:d8:ed:a0:9b:1a:4e:45:d6:6f:72:9c:69:
                    11:34:77:46:15:e4:5f:40:e8:1b:5b:b1:21:73:b0:
                    4d:ce:de:c8:47:0f:1c:06:12:e3:92:b3:52:bf:fe:
                    11:3d:94:bb:7e:99:45:4e:d1:d1:b9:fe:dd:f9:7c:
                    6c:8c:a8:84:b7:1a:3b:46:02:06:95:62:e9:46:48:
                    ee:41:79:16:fa:91:e5:e8:25:eb:53:52:67:f3:15:
                    26:0a:45:70:52:92:22:4a:ab:5f:5e:f6:ee:f1:f1:
                    1d:e6:b8:69:72:65:4a:f8:38:24:a6:3e:b1:87:04:
                    fa:eb:14:ec:04:1d:19:78:9e:a1:9a:fd:da:8a:ab:
                    af:33:5e:8b:60:0e:df:50:39:b5:c4:42:a1:48:4d:
                    60:84:b2:5d:62:44:e1:34:0c:47:b1:51:5f:36:b4:
                    8d:1f:04:d5:75:2d:e2:c9:48:6b:07:b5:1b:ed:0f:
                    a4:03:58:18:04:ec:91:66:6a:4e:ca:eb:ed:7f:d5:
                    b2:90:72:f2:46:f9:89:31:c2:c3:2f:9f:57:27:ca:
                    51:0b:ce:82:fd:59:d0:ab:ba:43:92:06:f0:3d:13:
                    f2:c9:5c:7a:ca:44:9e:50:a2:2b:52:c1:28:6f:2a:
                    3d:74:4e:df:46:c7:39:7d:e5:25:9c:87:91:83:dd:
                    57:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D1:64:9D:DC:08:CA:1E:C1:8B:70:D6:BB:8A:A3:6F:8C:BF:3A:60
            X509v3 Authority Key Identifier:
                keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:15:bc:93:ff:27:06:b2:39:27:36:93:e2:20:f2:79:2f:94:
         c9:64:b3:c7:fe:7f:40:6e:32:70:10:39:3f:e2:03:e0:04:fa:
         1d:f9:4f:9f:ca:35:45:aa:39:a3:ed:67:b7:4f:3a:1f:5f:15:
         1a:45:1b:af:36:cc:82:a9:15:f3:76:1c:bb:e9:fb:58:96:03:
         c6:62:e2:96:ab:8d:7c:a1:8c:0e:c6:28:1e:be:3f:6d:31:17:
         40:25:0e:5e:0b:c1:8b:70:2d:bd:47:2b:8e:92:41:6d:56:3e:
         4d:c8:dd:fd:23:6f:ac:be:f7:c8:b5:72:a0:fa:80:43:d6:99:
         57:2d:20:34:8f:d6:c5:df:e9:ec:ef:54:de:fa:3f:cf:7b:9c:
         00:77:a9:4e:b4:63:29:76:2c:9b:30:d6:e7:4d:9c:fb:df:68:
         d9:ae:92:9a:c3:71:64:47:4e:65:d1:d1:80:c2:64:46:e4:8e:
         3c:54:3d:4b:7d:1a:9a:b9:e7:b2:4c:ff:3c:48:d6:4a:86:ab:
         07:46:54:10:31:2a:76:4a:d8:13:8e:07:bf:00:d7:67:23:31:
         ed:3a:08:ab:1e:21:01:88:4c:17:81:17:0d:3f:2b:2a:cd:1a:
         b5:4f:5b:5a:9e:63:bb:73:de:df:4a:bd:41:27:0f:0c:ad:a2:
         ab:3e:4b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:01 2025 by rpki-client