Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.mft
File:                     M_RqsXrvI5qWvee2zLcG9-C2K24.mft (raw, json)
Hash identifier:          Z8wxsG4TLfM+4p0tb4Al6HFPgm/IONBNb4Nef5Sa0Jg=
Subject key identifier:   DE:D4:3D:A1:7A:AA:58:27:0B:50:99:0A:18:36:69:3D:AC:67:73:24
Authority key identifier: 33:F4:6A:B1:7A:EF:23:9A:96:BD:E7:B6:CC:B7:06:F7:E0:B6:2B:6E
Certificate issuer:       /CN=33f46ab17aef239a96bde7b6ccb706f7e0b62b6e
Certificate serial:       0198D5F120A1218BDBE959CA740A36582582
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M_RqsXrvI5qWvee2zLcG9-C2K24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.mft
Manifest number:          6A
Signing time:             Sat 23 Aug 2025 08:00:06 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:06 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:06 +0000
Files and hashes:         1: MTamWzlF--uNDyRMLTXJk1Mx0Fs.roa (hash: JMBYVhl1br5C36w4dCy9ILJG/1PRS8u33zsXvftn/Yw=)
                          2: M_RqsXrvI5qWvee2zLcG9-C2K24.crl (hash: bs9dTcviobaHZQfuqx98toh0wOlR0FeLLcB4C+9tGvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M_RqsXrvI5qWvee2zLcG9-C2K24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:20:a1:21:8b:db:e9:59:ca:74:0a:36:58:25:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33f46ab17aef239a96bde7b6ccb706f7e0b62b6e
        Validity
            Not Before: Aug 23 08:00:06 2025 GMT
            Not After : Aug 24 08:00:06 2025 GMT
        Subject: CN=ded43da17aaa58270b50990a1836693dac677324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cb:a6:58:69:b9:c3:db:5f:81:3c:ab:8c:c7:
                    22:fe:4f:bc:ff:2d:f1:17:08:7a:0c:c9:95:f9:5d:
                    d4:d4:18:e9:88:65:89:e4:5a:a3:a1:d9:52:1b:a0:
                    94:da:7a:05:11:3b:a0:bd:ea:e8:36:0d:af:a5:0c:
                    4c:2a:04:f8:1e:82:7c:86:ff:7d:b4:2f:55:ac:2f:
                    37:c3:3a:67:17:9c:b3:29:43:36:4a:41:c1:4b:a2:
                    f4:d9:dc:93:b4:9f:c6:2e:8d:a5:c5:9a:1b:c2:ec:
                    85:5d:6c:eb:ea:b4:b1:cc:90:e0:6a:48:83:17:b9:
                    39:b1:02:9a:c8:98:ed:c1:53:b5:b7:fe:95:fe:c5:
                    f4:16:0a:c9:40:b6:bb:69:97:b9:d0:f8:9f:c1:07:
                    72:ef:e6:40:2f:aa:98:62:49:1c:2b:b0:c3:a9:a5:
                    64:47:0f:6d:97:e3:fb:a1:be:bc:18:ea:e1:46:0e:
                    5a:0e:58:fb:ce:29:7e:ad:e2:b8:56:05:0b:8c:24:
                    5c:1d:8a:38:03:b0:8c:f1:05:64:f5:f9:50:4d:cf:
                    91:09:d5:e1:85:7f:ca:1b:0f:bd:3c:92:d9:65:dc:
                    04:9f:38:27:aa:f9:ac:cd:a8:d9:93:f5:3f:44:59:
                    8e:2e:5f:92:4b:a7:1e:62:bd:52:13:b9:6d:22:08:
                    2a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D4:3D:A1:7A:AA:58:27:0B:50:99:0A:18:36:69:3D:AC:67:73:24
            X509v3 Authority Key Identifier:
                keyid:33:F4:6A:B1:7A:EF:23:9A:96:BD:E7:B6:CC:B7:06:F7:E0:B6:2B:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_RqsXrvI5qWvee2zLcG9-C2K24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f1:83:5a:0b:23:f9:0d:47:3c:75:cf:f6:86:df:76:91:ad:
         21:15:57:d8:f0:2b:6b:11:d3:3c:e2:20:ed:e4:54:ef:cc:a7:
         86:b5:b7:d9:04:f5:a6:c0:ef:7a:29:87:20:36:61:fc:f4:75:
         7c:d6:62:1b:cd:a9:c2:a2:6e:a9:6c:74:ef:89:18:1a:01:1d:
         23:b4:61:34:48:a0:ce:9d:7d:d1:bf:c9:a2:7c:1e:70:0f:ff:
         90:13:9d:42:a2:24:47:40:dc:13:d4:00:ad:dc:5a:a8:0d:a2:
         19:af:82:b4:76:1e:74:3f:a3:2c:bd:6a:e7:5a:13:3d:be:2d:
         4a:49:15:4f:65:87:a8:ba:4f:15:c8:1b:39:85:53:96:fc:e5:
         03:b5:4b:b9:9a:36:db:5f:43:44:45:e8:00:32:1b:10:5f:ca:
         05:6b:24:e1:98:da:23:ea:9b:54:ba:5a:51:a2:55:ea:f0:f7:
         d9:12:11:7f:7c:c5:7a:8f:c5:3d:68:2a:0a:72:ac:26:4e:d1:
         f9:2b:df:46:78:57:99:60:00:d9:0c:24:c5:10:16:24:f3:50:
         9e:bb:7a:5d:08:24:7a:3f:50:ec:10:b5:8f:ae:9e:9f:be:6f:
         b5:db:8a:52:ad:52:d3:7b:fe:71:90:ec:59:1b:fc:ee:c1:b2:
         5d:19:20:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:21 2025 by rpki-client